# Flog Txt Version 1 # Analyzer Version: 3.1.1 # Analyzer Build Date: Sep 16 2019 10:43:25 # Log Creation Date: 02.10.2019 16:30:39.813 Process: id = "1" image_name = "sam.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sam.exe" page_root = "0x4eac4000" os_pid = "0x980" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x984 [0027.670] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x76c20000 [0027.746] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualQuery") returned 0x76c3445a [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="SwitchToThread") returned 0x76c4efec [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="SetWaitableTimer") returned 0x76c5bb2f [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="SetProcessPriorityBoost") returned 0x76c4d97b [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="SetEvent") returned 0x76c316c5 [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleCtrlHandler") returned 0x76c38a09 [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryW") returned 0x76c3492b [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemInfo") returned 0x76c349ca [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemDirectoryA") returned 0x76c4b66c [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="GetQueuedCompletionStatus") returned 0x76c4d3c3 [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessAffinityMask") returned 0x76c3a871 [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0027.747] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0027.748] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0027.748] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0027.748] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0027.748] GetProcAddress (hModule=0x76c20000, lpProcName="DuplicateHandle") returned 0x76c31886 [0027.748] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0027.748] GetProcAddress (hModule=0x76c20000, lpProcName="CreateIoCompletionPort") returned 0x76c4eef2 [0027.748] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventA") returned 0x76c3328c [0027.748] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0027.748] GetProcAddress (hModule=0x76c20000, lpProcName="AddVectoredExceptionHandler") returned 0x771a742b [0027.748] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0x18ff68 | out: lpflOldProtect=0x18ff68*=0x2) returned 1 [0027.748] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x2, lpflOldProtect=0x18ff68 | out: lpflOldProtect=0x18ff68*=0x4) returned 1 [0027.748] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0027.749] GetProcAddress (hModule=0x76c20000, lpProcName="AddDllDirectory") returned 0x0 [0027.749] GetProcAddress (hModule=0x76c20000, lpProcName="AddVectoredContinueHandler") returned 0x771937e1 [0027.749] GetProcAddress (hModule=0x76c20000, lpProcName="GetQueuedCompletionStatusEx") returned 0x76cb43af [0027.749] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExA") returned 0x76c34913 [0027.749] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0027.749] GetSystemDirectoryA (in: lpBuffer=0x673c00, uSize=0x208 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0027.749] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\advapi32.dll") returned 0x74d40000 [0029.171] GetProcAddress (hModule=0x74d40000, lpProcName="SystemFunction036") returned 0x74d41919 [0029.171] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\ntdll.dll") returned 0x77130000 [0029.172] GetProcAddress (hModule=0x77130000, lpProcName="NtWaitForSingleObject") returned 0x7714f8ac [0029.172] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\winmm.dll") returned 0x74b30000 [0030.365] GetProcAddress (hModule=0x74b30000, lpProcName="timeBeginPeriod") returned 0x74b39ef7 [0030.365] GetProcAddress (hModule=0x74b30000, lpProcName="timeEndPeriod") returned 0x74b39feb [0030.365] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\ws2_32.dll") returned 0x75bc0000 [0030.538] GetProcAddress (hModule=0x75bc0000, lpProcName="WSAGetOverlappedResult") returned 0x75bc7489 [0030.538] GetProcAddress (hModule=0x77130000, lpProcName="wine_get_version") returned 0x0 [0030.538] SetErrorMode (uMode=0x2) returned 0x0 [0030.538] SetErrorMode (uMode=0x8003) returned 0x2 [0030.538] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x44bee0) returned 0x740bd8 [0030.538] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x44bef0) returned 0x0 [0030.538] SetConsoleCtrlHandler (HandlerRoutine=0x44bf00, Add=1) returned 1 [0030.539] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0030.541] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x18fe9c, lpSystemAffinityMask=0x18fe98 | out: lpProcessAffinityMask=0x18fe9c, lpSystemAffinityMask=0x18fe98) returned 1 [0030.541] GetSystemInfo (in: lpSystemInfo=0x18fed8 | out: lpSystemInfo=0x18fed8*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0030.541] SetProcessPriorityBoost (hProcess=0xffffffff, bDisablePriorityBoost=1) returned 1 [0030.541] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x2d0000 [0030.542] VirtualAlloc (lpAddress=0x0, dwSize=0x10220000, flAllocationType=0x2000, flProtect=0x4) returned 0x2090000 [0030.549] VirtualAlloc (lpAddress=0x800000, dwSize=0x20400000, flAllocationType=0x2000, flProtect=0x4) returned 0x0 [0030.549] VirtualAlloc (lpAddress=0x0, dwSize=0x20400000, flAllocationType=0x2000, flProtect=0x4) returned 0x122b0000 [0030.564] VirtualFree (lpAddress=0x122b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0030.564] VirtualAlloc (lpAddress=0x12400000, dwSize=0x20000000, flAllocationType=0x2000, flProtect=0x4) returned 0x12400000 [0030.579] VirtualAlloc (lpAddress=0x12400000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0x12400000 [0030.588] VirtualAlloc (lpAddress=0x2090000, dwSize=0x41000, flAllocationType=0x1000, flProtect=0x4) returned 0x2090000 [0030.589] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x220000 [0030.589] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x230000 [0030.590] SystemFunction036 (in: RandomBuffer=0x673660, RandomBufferLength=0x40 | out: RandomBuffer=0x673660) returned 1 [0030.590] GetEnvironmentStringsW () returned 0x7448a0* [0030.591] FreeEnvironmentStringsW (penv=0x7448a0) returned 1 [0030.592] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x18feb4, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x18feb4*=0x68) returned 1 [0030.592] VirtualQuery (in: lpAddress=0x18fec4, lpBuffer=0x18fec4, dwLength=0x1c | out: lpBuffer=0x18fec4*(BaseAddress=0x18f000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0030.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44c000, lpParameter=0x124261c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c [0030.593] CloseHandle (hObject=0x6c) returned 1 [0030.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44c000, lpParameter=0x12426380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c [0030.594] CloseHandle (hObject=0x6c) returned 1 [0030.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44c000, lpParameter=0x12426540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c [0030.594] CloseHandle (hObject=0x6c) returned 1 [0030.594] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6c [0030.595] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0030.610] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76c20000 [0030.611] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0030.611] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0030.611] GetProcAddress (hModule=0x76c20000, lpProcName="SetHandleInformation") returned 0x76c4195c [0030.611] SetHandleInformation (hObject=0x3, dwMask=0x1, dwFlags=0x0) returned 0 [0030.612] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0030.612] SetHandleInformation (hObject=0x7, dwMask=0x1, dwFlags=0x0) returned 0 [0030.613] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0030.613] SetHandleInformation (hObject=0xb, dwMask=0x1, dwFlags=0x0) returned 0 [0030.613] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemDirectoryW") returned 0x76c35063 [0030.613] GetSystemDirectoryW (in: lpBuffer=0x1244a000, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0030.614] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\ws2_32.dll") returned 0x75bc0000 [0030.614] GetProcAddress (hModule=0x75bc0000, lpProcName="WSAStartup") returned 0x75bc3ab2 [0030.614] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x12422e28 | out: lpWSAData=0x12422e28) returned 0 [0030.623] GetProcAddress (hModule=0x76c20000, lpProcName="CancelIoEx") returned 0x76c4efbc [0030.624] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileCompletionNotificationModes") returned 0x76caaeee [0030.624] GetProcAddress (hModule=0x75bc0000, lpProcName="WSAEnumProtocolsW") returned 0x75bcc8e1 [0030.624] WSAEnumProtocolsW (in: lpiProtocols=0x1245cf8c, lpProtocolBuffer=0x1245cf94, lpdwBufferLength=0x1245cf88 | out: lpProtocolBuffer=0x1245cf94, lpdwBufferLength=0x1245cf88) returned 4 [0030.696] SetEvent (hEvent=0xac) returned 1 [0030.696] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0030.696] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x12461f84 | out: lpMode=0x12461f84) returned 1 [0030.697] SetEvent (hEvent=0xa8) returned 1 [0030.697] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x6c0000 [0030.697] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x12461f84 | out: lpMode=0x12461f84) returned 1 [0030.698] GetConsoleMode (in: hConsoleHandle=0xb, lpMode=0x12461f84 | out: lpMode=0x12461f84) returned 1 [0030.699] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0030.699] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe\" " [0030.701] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableW") returned 0x76c31b48 [0030.701] GetEnvironmentVariableW (in: lpName="GODEBUG", lpBuffer=0x1247c000, nSize=0x64 | out: lpBuffer="") returned 0x0 [0030.701] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76c20000 [0030.701] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0030.701] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0030.701] GetProcAddress (hModule=0x76c20000, lpProcName="SetHandleInformation") returned 0x76c4195c [0030.701] SetHandleInformation (hObject=0x3, dwMask=0x1, dwFlags=0x0) returned 0 [0030.702] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0030.702] SetHandleInformation (hObject=0x7, dwMask=0x1, dwFlags=0x0) returned 0 [0030.702] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0030.702] SetHandleInformation (hObject=0xb, dwMask=0x1, dwFlags=0x0) returned 0 [0030.703] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\kernel32.dll") returned 0x76c20000 [0030.704] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleWindow") returned 0x76cd7c7d [0030.704] LoadLibraryW (lpLibFileName="user32.dll") returned 0x74f40000 [0030.704] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0030.704] GetConsoleWindow () returned 0x301be [0030.704] ShowWindow (hWnd=0x301be, nCmdShow=0) returned 1 [0030.714] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x1247c0d0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0030.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileAttributesExW") returned 0x76c34574 [0030.717] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0030.718] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0030.718] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0030.718] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0030.718] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0030.718] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0030.718] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0030.718] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0030.718] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0030.718] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0030.718] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0030.719] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0030.719] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0030.719] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0030.719] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0030.719] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0030.719] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0030.719] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0030.719] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0030.719] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0030.719] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0030.719] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0030.719] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0030.719] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0030.720] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0030.720] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x1247c1a0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0030.720] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1 [0030.721] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x1247c270, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0030.721] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1246190c | out: lpFileInformation=0x1246190c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1 [0030.722] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0030.722] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12461c48 | out: lpMode=0x12461c48) returned 0 [0030.722] GetProcAddress (hModule=0x76c20000, lpProcName="CreatePipe") returned 0x76cb415b [0030.722] CreatePipe (in: hReadPipe=0x12461c8c, hWritePipe=0x12461c90, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x12461c8c*=0xb4, hWritePipe=0x12461c90*=0xb8) returned 1 [0030.723] GetConsoleMode (in: hConsoleHandle=0xb4, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0030.723] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0030.723] CreatePipe (in: hReadPipe=0x12461c8c, hWritePipe=0x12461c90, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x12461c8c*=0xbc, hWritePipe=0x12461c90*=0xc0) returned 1 [0030.724] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0030.725] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0030.726] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0030.726] GetEnvironmentStringsW () returned 0x7473e8* [0030.726] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0030.726] FreeEnvironmentStringsW (penv=0x7473e8) returned 1 [0030.727] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0030.727] GetCurrentProcess () returned 0xffffffff [0030.727] GetProcAddress (hModule=0x76c20000, lpProcName="DuplicateHandle") returned 0x76c31886 [0030.727] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x98, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x12446480, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x12446480*=0xc4) returned 1 [0030.727] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x12446484, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x12446484*=0xc8) returned 1 [0030.727] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x12446488, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x12446488*=0xcc) returned 1 [0030.727] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0030.727] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /C tasklist.exe /FO CSV", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124b4000, lpCurrentDirectory=0x0, lpStartupInfo=0x12461c14*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc4, hStdOutput=0xc8, hStdError=0xcc), lpProcessInformation=0x12461bf0 | out: lpCommandLine="cmd.exe /C tasklist.exe /FO CSV", lpProcessInformation=0x12461bf0*(hProcess=0xd4, hThread=0xd0, dwProcessId=0x9b0, dwThreadId=0x9b4)) returned 1 [0030.911] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0030.911] CloseHandle (hObject=0xd0) returned 1 [0030.911] CloseHandle (hObject=0xcc) returned 1 [0030.911] CloseHandle (hObject=0xc8) returned 1 [0030.911] CloseHandle (hObject=0xc4) returned 1 [0030.911] CloseHandle (hObject=0x98) returned 1 [0030.912] CloseHandle (hObject=0xb8) returned 1 [0030.912] CloseHandle (hObject=0xc0) returned 1 [0030.912] SetEvent (hEvent=0xa8) returned 1 [0030.912] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0030.912] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0035.607] GetProcAddress (hModule=0x76c20000, lpProcName="GetExitCodeProcess") returned 0x76c4174d [0035.607] GetExitCodeProcess (in: hProcess=0xd4, lpExitCode=0x12461d4c | out: lpExitCode=0x12461d4c*=0x0) returned 1 [0035.607] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessTimes") returned 0x76c4d60f [0035.607] GetProcessTimes (in: hProcess=0xd4, lpCreationTime=0x124c8020, lpExitTime=0x124c8028, lpKernelTime=0x124c8030, lpUserTime=0x124c8038 | out: lpCreationTime=0x124c8020, lpExitTime=0x124c8028, lpKernelTime=0x124c8030, lpUserTime=0x124c8038) returned 1 [0035.607] CloseHandle (hObject=0xd4) returned 1 [0035.607] SetEvent (hEvent=0xa8) returned 1 [0035.607] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102 [0035.623] SetEvent (hEvent=0xa8) returned 1 [0035.623] GetEnvironmentVariableW (in: lpName="ALLUSERSPROFILE", lpBuffer=0x124d8000, nSize=0x64 | out: lpBuffer="C:\\ProgramData") returned 0xe [0035.624] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\00000000.ext" (normalized: "c:\\programdata\\00000000.ext"), fInfoLevelId=0x0, lpFileInformation=0x12461b4c | out: lpFileInformation=0x12461b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0035.624] CreateFileW (lpFileName="C:\\ProgramData\\00000000.ext" (normalized: "c:\\programdata\\00000000.ext"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.624] GetEnvironmentVariableW (in: lpName="ALLUSERSPROFILE", lpBuffer=0x124d80d0, nSize=0x64 | out: lpBuffer="C:\\ProgramData") returned 0xe [0035.624] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\00000000.pky" (normalized: "c:\\programdata\\00000000.pky"), fInfoLevelId=0x0, lpFileInformation=0x12461b4c | out: lpFileInformation=0x12461b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0035.624] CreateFileW (lpFileName="C:\\ProgramData\\00000000.pky" (normalized: "c:\\programdata\\00000000.pky"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0035.624] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0035.625] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124da100*, nNumberOfCharsToWrite=0x1b, lpNumberOfCharsWritten=0x1246192c, lpReserved=0x0 | out: lpBuffer=0x124da100*, lpNumberOfCharsWritten=0x1246192c*=0x1b) returned 1 [0035.626] SetEvent (hEvent=0xa8) returned 1 [0035.627] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\advapi32.dll") returned 0x74d40000 [0035.627] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14 [0035.627] CryptAcquireContextW (in: phProv=0x12446084, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x12446084*=0x7473e8) returned 1 [0035.643] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGenRandom") returned 0x74d4dfc8 [0035.643] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e202e | out: pbBuffer=0x124e202e) returned 1 [0035.643] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.647] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.651] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.655] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.666] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.670] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.674] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.678] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.682] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.685] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.689] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.693] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.697] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.701] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.705] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.708] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.712] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.716] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.720] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.723] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.728] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.732] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.735] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.739] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.743] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.747] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.751] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.755] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.759] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.762] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.766] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.770] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.774] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.778] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.781] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.785] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.789] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.793] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f8000 | out: pbBuffer=0x124f8000) returned 1 [0035.893] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.896] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.896] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x123b0000 [0035.900] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.904] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.908] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.912] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.916] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.920] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.923] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.924] VirtualAlloc (lpAddress=0x0, dwSize=0xafc7c, flAllocationType=0x3000, flProtect=0x4) returned 0x32cd0000 [0035.928] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.935] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.939] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.943] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.947] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.951] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.954] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.958] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.962] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.966] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.970] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.974] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.978] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.981] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.985] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.989] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.993] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0035.997] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.001] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.005] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.008] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.012] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.016] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.019] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.023] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.027] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.032] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.035] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.039] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.043] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.047] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.050] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.054] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.058] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.062] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.066] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.070] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.074] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.078] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.082] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.085] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.089] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.093] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.097] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.101] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.104] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.108] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.112] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.116] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.120] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.124] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.128] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.132] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.136] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.140] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.144] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.147] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.151] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.156] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.159] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.163] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.167] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.171] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.175] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.178] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.183] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.186] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.190] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.194] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.198] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.202] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.206] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.210] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.214] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.218] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.222] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.226] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.230] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.233] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.237] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.241] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.246] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.250] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.254] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.258] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.262] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.265] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.269] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.273] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.277] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.281] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.289] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.294] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.297] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.301] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x124f9e00 | out: pbBuffer=0x124f9e00) returned 1 [0036.395] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124f6050*, nNumberOfCharsToWrite=0x25, lpNumberOfCharsWritten=0x1246192c, lpReserved=0x0 | out: lpBuffer=0x124f6050*, lpNumberOfCharsWritten=0x1246192c*=0x25) returned 1 [0036.396] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x80, pbBuffer=0x1277e080 | out: pbBuffer=0x1277e080) returned 1 [0036.396] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e24c0 | out: pbBuffer=0x124e24c0) returned 1 [0036.396] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x17d, pbBuffer=0x124c0202 | out: pbBuffer=0x124c0202) returned 1 [0036.396] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c020e | out: pbBuffer=0x124c020e) returned 1 [0036.398] GetEnvironmentVariableW (in: lpName="ALLUSERSPROFILE", lpBuffer=0x124d81a0, nSize=0x64 | out: lpBuffer="C:\\ProgramData") returned 0xe [0036.398] CreateFileW (lpFileName="C:\\ProgramData\\00000000.pky" (normalized: "c:\\programdata\\00000000.pky"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4 [0036.400] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0x12461d78 | out: lpMode=0x12461d78) returned 0 [0036.401] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0036.401] WriteFile (in: hFile=0xd4, lpBuffer=0x1277c000*, nNumberOfBytesToWrite=0x1c3, lpNumberOfBytesWritten=0x12461d7c, lpOverlapped=0x0 | out: lpBuffer=0x1277c000*, lpNumberOfBytesWritten=0x12461d7c*=0x1c3, lpOverlapped=0x0) returned 1 [0036.402] CloseHandle (hObject=0xd4) returned 1 [0036.403] GetEnvironmentVariableW (in: lpName="ALLUSERSPROFILE", lpBuffer=0x124d8270, nSize=0x64 | out: lpBuffer="C:\\ProgramData") returned 0xe [0036.403] CreateFileW (lpFileName="C:\\ProgramData\\00000000.eky" (normalized: "c:\\programdata\\00000000.eky"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd4 [0036.404] GetConsoleMode (in: hConsoleHandle=0xd4, lpMode=0x12461d78 | out: lpMode=0x12461d78) returned 0 [0036.404] WriteFile (in: hFile=0xd4, lpBuffer=0x12709900*, nNumberOfBytesToWrite=0x883, lpNumberOfBytesWritten=0x12461d7c, lpOverlapped=0x0 | out: lpBuffer=0x12709900*, lpNumberOfBytesWritten=0x12461d7c*=0x883, lpOverlapped=0x0) returned 1 [0036.405] CloseHandle (hObject=0xd4) returned 1 [0036.410] CreateFileW (lpFileName="D:\\Test" (normalized: "d:\\test"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0036.410] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0036.410] FindFirstFileW (in: lpFileName="D:\\Test\\*", lpFindFileData=0x124619ec | out: lpFindFileData=0x124619ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0036.410] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0x124d8340, nSize=0x64 | out: lpBuffer="C:\\Windows") returned 0xa [0036.410] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="C:\\Windows\\system32\\cmd.exe /C wmic shadowcopy delete", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x12461dd0*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x12461da0 | out: lpCommandLine="C:\\Windows\\system32\\cmd.exe /C wmic shadowcopy delete", lpProcessInformation=0x12461da0*(hProcess=0xb4, hThread=0xd4, dwProcessId=0xa08, dwThreadId=0xa0c)) returned 1 [0036.420] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124d8410, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0036.420] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0036.420] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.420] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0036.420] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.421] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0036.421] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.421] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0036.421] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.421] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0036.421] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.421] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0036.421] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.421] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0036.421] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.421] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0036.421] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.421] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0036.422] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.422] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0036.422] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.422] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0036.422] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.422] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0036.422] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0036.422] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124d84e0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0036.422] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1 [0036.422] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124d85b0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0036.422] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1246190c | out: lpFileInformation=0x1246190c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1 [0036.422] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0036.423] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12461c48 | out: lpMode=0x12461c48) returned 0 [0036.447] CreatePipe (in: hReadPipe=0x12461c8c, hWritePipe=0x12461c90, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x12461c8c*=0xbc, hWritePipe=0x12461c90*=0xb8) returned 1 [0036.448] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0036.457] GetConsoleMode (in: hConsoleHandle=0xb8, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0036.462] CreatePipe (in: hReadPipe=0x12461c8c, hWritePipe=0x12461c90, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x12461c8c*=0x98, hWritePipe=0x12461c90*=0xc4) returned 1 [0036.462] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0036.467] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0036.488] GetEnvironmentStringsW () returned 0x747df8* [0036.489] FreeEnvironmentStringsW (penv=0x747df8) returned 1 [0036.523] GetCurrentProcess () returned 0xffffffff [0036.523] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124e2830, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124e2830*=0xc8) returned 1 [0036.523] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xb8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124e2834, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124e2834*=0xcc) returned 1 [0036.523] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124e2838, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124e2838*=0xd0) returned 1 [0036.524] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /C taskkill.exe /F /IM sql*", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124d0c00, lpCurrentDirectory=0x0, lpStartupInfo=0x12461c14*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xcc, hStdError=0xd0), lpProcessInformation=0x12461bf0 | out: lpCommandLine="cmd.exe /C taskkill.exe /F /IM sql*", lpProcessInformation=0x12461bf0*(hProcess=0xd8, hThread=0xdc, dwProcessId=0xa1c, dwThreadId=0xa20)) returned 1 [0036.558] CloseHandle (hObject=0xdc) returned 1 [0036.558] CloseHandle (hObject=0xd0) returned 1 [0036.558] CloseHandle (hObject=0xcc) returned 1 [0036.558] CloseHandle (hObject=0xc8) returned 1 [0036.558] CloseHandle (hObject=0xc0) returned 1 [0036.558] CloseHandle (hObject=0xb8) returned 1 [0036.558] CloseHandle (hObject=0xc4) returned 1 [0036.559] SetEvent (hEvent=0xa0) returned 1 [0036.559] WaitForSingleObject (hHandle=0xd8, dwMilliseconds=0xffffffff) returned 0x0 [0037.381] GetExitCodeProcess (in: hProcess=0xd8, lpExitCode=0x12461d4c | out: lpExitCode=0x12461d4c*=0x80) returned 1 [0037.381] GetProcessTimes (in: hProcess=0xd8, lpCreationTime=0x124c8040, lpExitTime=0x124c8048, lpKernelTime=0x124c8050, lpUserTime=0x124c8058 | out: lpCreationTime=0x124c8040, lpExitTime=0x124c8048, lpKernelTime=0x124c8050, lpUserTime=0x124c8058) returned 1 [0037.381] CloseHandle (hObject=0xd8) returned 1 [0037.381] SetEvent (hEvent=0xa8) returned 1 [0037.381] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102 [0037.399] SetEvent (hEvent=0xa8) returned 1 [0037.399] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x127cc000, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0037.399] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0037.399] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.399] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0037.399] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.399] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0037.399] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.399] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0037.400] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.400] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0037.400] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.400] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0037.400] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.400] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0037.400] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.400] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0037.400] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.400] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0037.400] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.400] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0037.400] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.400] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0037.400] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.401] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0037.401] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0037.401] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x127cc0d0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0037.401] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1 [0037.401] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x127cc1a0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0037.401] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1246190c | out: lpFileInformation=0x1246190c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1 [0037.401] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0037.401] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12461c48 | out: lpMode=0x12461c48) returned 0 [0037.413] CreatePipe (in: hReadPipe=0x12461c8c, hWritePipe=0x12461c90, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x12461c8c*=0x98, hWritePipe=0x12461c90*=0xbc) returned 1 [0037.413] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0037.570] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0037.570] CreatePipe (in: hReadPipe=0x12461c8c, hWritePipe=0x12461c90, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x12461c8c*=0xc0, hWritePipe=0x12461c90*=0xc8) returned 1 [0037.571] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0037.572] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0037.573] GetEnvironmentStringsW () returned 0x747df8* [0037.573] FreeEnvironmentStringsW (penv=0x747df8) returned 1 [0037.574] GetCurrentProcess () returned 0xffffffff [0037.574] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xd8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x12410330, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x12410330*=0xcc) returned 1 [0037.574] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xbc, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x12410334, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x12410334*=0xd0) returned 1 [0037.574] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc8, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x12410338, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x12410338*=0xdc) returned 1 [0037.574] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /C taskkill.exe /F /IM agent*", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x127f8000, lpCurrentDirectory=0x0, lpStartupInfo=0x12461c14*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xcc, hStdOutput=0xd0, hStdError=0xdc), lpProcessInformation=0x12461bf0 | out: lpCommandLine="cmd.exe /C taskkill.exe /F /IM agent*", lpProcessInformation=0x12461bf0*(hProcess=0xe0, hThread=0xe4, dwProcessId=0xa50, dwThreadId=0xa54)) returned 1 [0037.581] CloseHandle (hObject=0xe4) returned 1 [0037.581] CloseHandle (hObject=0xdc) returned 1 [0037.581] CloseHandle (hObject=0xd0) returned 1 [0037.582] CloseHandle (hObject=0xcc) returned 1 [0037.582] CloseHandle (hObject=0xd8) returned 1 [0037.582] CloseHandle (hObject=0xbc) returned 1 [0037.582] CloseHandle (hObject=0xc8) returned 1 [0037.582] SetEvent (hEvent=0xa8) returned 1 [0037.582] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0040.054] GetExitCodeProcess (in: hProcess=0xe0, lpExitCode=0x12461d4c | out: lpExitCode=0x12461d4c*=0x80) returned 1 [0040.054] GetProcessTimes (in: hProcess=0xe0, lpCreationTime=0x124428c0, lpExitTime=0x124428c8, lpKernelTime=0x124428d0, lpUserTime=0x124428d8 | out: lpCreationTime=0x124428c0, lpExitTime=0x124428c8, lpKernelTime=0x124428d0, lpUserTime=0x124428d8) returned 1 [0040.054] CloseHandle (hObject=0xe0) returned 1 [0040.054] SetEvent (hEvent=0xa0) returned 1 [0040.054] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102 [0041.699] SetEvent (hEvent=0xa0) returned 1 [0041.699] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124d8680, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0041.699] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0041.700] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.700] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0041.701] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.701] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0041.701] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.701] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0041.701] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.701] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0041.701] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.701] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0041.701] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.701] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0041.701] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.701] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0041.701] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.702] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0041.702] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.702] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0041.702] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.702] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0041.702] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.702] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0041.702] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0041.702] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x124d8750, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0041.702] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1 [0041.703] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x124d8820, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0041.703] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1246190c | out: lpFileInformation=0x1246190c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1 [0041.703] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0041.703] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12461c48 | out: lpMode=0x12461c48) returned 0 [0041.715] CreatePipe (in: hReadPipe=0x12461c8c, hWritePipe=0x12461c90, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x12461c8c*=0xc0, hWritePipe=0x12461c90*=0x98) returned 1 [0041.715] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0041.797] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0041.816] CreatePipe (in: hReadPipe=0x12461c8c, hWritePipe=0x12461c90, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x12461c8c*=0xc8, hWritePipe=0x12461c90*=0xbc) returned 1 [0041.816] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0041.964] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0042.026] GetEnvironmentStringsW () returned 0x747df8* [0042.026] VirtualAlloc (lpAddress=0x12800000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0x12800000 [0042.035] VirtualAlloc (lpAddress=0x20d1000, dwSize=0x41000, flAllocationType=0x1000, flProtect=0x4) returned 0x20d1000 [0042.036] FreeEnvironmentStringsW (penv=0x747df8) returned 1 [0042.036] GetCurrentProcess () returned 0xffffffff [0042.036] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xe0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124e2b40, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124e2b40*=0xd8) returned 1 [0042.036] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x98, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124e2b44, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124e2b44*=0xcc) returned 1 [0042.036] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xbc, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124e2b48, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124e2b48*=0xd0) returned 1 [0042.037] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /C taskkill.exe /F /IM backup*", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x124d1800, lpCurrentDirectory=0x0, lpStartupInfo=0x12461c14*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xd8, hStdOutput=0xcc, hStdError=0xd0), lpProcessInformation=0x12461bf0 | out: lpCommandLine="cmd.exe /C taskkill.exe /F /IM backup*", lpProcessInformation=0x12461bf0*(hProcess=0xe4, hThread=0xdc, dwProcessId=0xb04, dwThreadId=0xb08)) returned 1 [0042.053] CloseHandle (hObject=0xdc) returned 1 [0042.053] CloseHandle (hObject=0xd0) returned 1 [0042.053] CloseHandle (hObject=0xcc) returned 1 [0042.053] CloseHandle (hObject=0xd8) returned 1 [0042.053] CloseHandle (hObject=0xe0) returned 1 [0042.053] CloseHandle (hObject=0x98) returned 1 [0042.053] CloseHandle (hObject=0xbc) returned 1 [0042.053] SetEvent (hEvent=0xa0) returned 1 [0042.054] WaitForSingleObject (hHandle=0xe4, dwMilliseconds=0xffffffff) returned 0x0 [0043.059] GetExitCodeProcess (in: hProcess=0xe4, lpExitCode=0x12461d4c | out: lpExitCode=0x12461d4c*=0x80) returned 1 [0043.059] GetProcessTimes (in: hProcess=0xe4, lpCreationTime=0x124c8060, lpExitTime=0x124c8068, lpKernelTime=0x124c8070, lpUserTime=0x124c8078 | out: lpCreationTime=0x124c8060, lpExitTime=0x124c8068, lpKernelTime=0x124c8070, lpUserTime=0x124c8078) returned 1 [0043.060] CloseHandle (hObject=0xe4) returned 1 [0043.060] SetEvent (hEvent=0xa8) returned 1 [0043.060] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102 [0043.100] SetEvent (hEvent=0xac) returned 1 [0043.100] SetEvent (hEvent=0xa8) returned 1 [0043.100] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x127cc270, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0043.100] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0043.100] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.100] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0043.101] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.101] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0043.101] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.101] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0043.101] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.101] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0043.101] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.101] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0043.101] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.101] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0043.101] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.101] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0043.101] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.101] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0043.102] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.102] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0043.102] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.102] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0043.102] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.102] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0043.102] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0043.102] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x127cc340, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0043.102] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124619d4 | out: lpFileInformation=0x124619d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1 [0043.102] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x127cc410, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0043.102] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1246190c | out: lpFileInformation=0x1246190c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1 [0043.102] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0043.102] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12461c48 | out: lpMode=0x12461c48) returned 0 [0043.123] CreatePipe (in: hReadPipe=0x12461c8c, hWritePipe=0x12461c90, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x12461c8c*=0xc8, hWritePipe=0x12461c90*=0xc0) returned 1 [0043.124] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0043.126] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0043.127] CreatePipe (in: hReadPipe=0x12461c8c, hWritePipe=0x12461c90, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x12461c8c*=0xbc, hWritePipe=0x12461c90*=0x98) returned 1 [0043.127] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0043.128] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12461c64 | out: lpMode=0x12461c64) returned 0 [0043.128] GetEnvironmentStringsW () returned 0x747df8* [0043.128] FreeEnvironmentStringsW (penv=0x747df8) returned 1 [0043.128] GetCurrentProcess () returned 0xffffffff [0043.128] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xe4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x12410640, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x12410640*=0xe0) returned 1 [0043.128] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x12410644, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x12410644*=0xd8) returned 1 [0043.128] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x98, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x12410648, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x12410648*=0xcc) returned 1 [0043.129] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /C taskkill.exe /F /IM vm*", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x127f8c00, lpCurrentDirectory=0x0, lpStartupInfo=0x12461c14*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xe0, hStdOutput=0xd8, hStdError=0xcc), lpProcessInformation=0x12461bf0 | out: lpCommandLine="cmd.exe /C taskkill.exe /F /IM vm*", lpProcessInformation=0x12461bf0*(hProcess=0xdc, hThread=0xd0, dwProcessId=0xb40, dwThreadId=0xb44)) returned 1 [0043.138] CloseHandle (hObject=0xd0) returned 1 [0043.138] CloseHandle (hObject=0xcc) returned 1 [0043.138] CloseHandle (hObject=0xd8) returned 1 [0043.138] CloseHandle (hObject=0xe0) returned 1 [0043.138] CloseHandle (hObject=0xe4) returned 1 [0043.138] CloseHandle (hObject=0xc0) returned 1 [0043.138] CloseHandle (hObject=0x98) returned 1 [0043.138] SetEvent (hEvent=0xa8) returned 1 [0043.139] WaitForSingleObject (hHandle=0xdc, dwMilliseconds=0xffffffff) returned 0x0 [0044.028] GetExitCodeProcess (in: hProcess=0xdc, lpExitCode=0x12461d4c | out: lpExitCode=0x12461d4c*=0x80) returned 1 [0044.029] GetProcessTimes (in: hProcess=0xdc, lpCreationTime=0x124428e0, lpExitTime=0x124428e8, lpKernelTime=0x124428f0, lpUserTime=0x124428f8 | out: lpCreationTime=0x124428e0, lpExitTime=0x124428e8, lpKernelTime=0x124428f0, lpUserTime=0x124428f8) returned 1 [0044.029] CloseHandle (hObject=0xdc) returned 1 [0044.029] SetEvent (hEvent=0xa8) returned 1 [0044.029] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102 [0044.043] SetEvent (hEvent=0xa8) returned 1 [0044.051] SetEvent (hEvent=0xa0) returned 1 [0044.051] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0044.052] SetEvent (hEvent=0x7c) returned 1 [0044.052] SetEvent (hEvent=0xa0) returned 1 [0044.052] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0044.054] SetEvent (hEvent=0xa8) returned 1 [0044.054] SetEvent (hEvent=0xa0) returned 1 [0044.054] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0044.054] SetEvent (hEvent=0x7c) returned 1 [0044.054] SetEvent (hEvent=0xa0) returned 1 [0044.055] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0044.056] SetEvent (hEvent=0xa8) returned 1 [0044.057] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0044.059] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0044.059] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x3a0000 [0044.059] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x32ec0000 [0044.059] SetEvent (hEvent=0xa8) returned 1 [0044.060] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0044.061] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0044.064] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1243bdc0*, nNumberOfCharsToWrite=0x19, lpNumberOfCharsWritten=0x1245592c, lpReserved=0x0 | out: lpBuffer=0x1243bdc0*, lpNumberOfCharsWritten=0x1245592c*=0x19) returned 1 [0044.066] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\kernel32.dll") returned 0x76c20000 [0044.067] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0044.067] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1277a000, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sam.exe")) returned 0x2d [0044.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sam.exe"), fInfoLevelId=0x0, lpFileInformation=0x12455b68 | out: lpFileInformation=0x12455b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8a43480, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xb93ccb00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xb80b9e00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0xff400)) returned 1 [0044.067] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x1248e000, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0044.068] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124559d4 | out: lpFileInformation=0x124559d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0044.068] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.068] GetFileAttributesExW (in: lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), fInfoLevelId=0x0, lpFileInformation=0x124559d4 | out: lpFileInformation=0x124559d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0044.068] CreateFileW (lpFileName="cmd.exe.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.068] GetFileAttributesExW (in: lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), fInfoLevelId=0x0, lpFileInformation=0x124559d4 | out: lpFileInformation=0x124559d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0044.068] CreateFileW (lpFileName="cmd.exe.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.068] GetFileAttributesExW (in: lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), fInfoLevelId=0x0, lpFileInformation=0x124559d4 | out: lpFileInformation=0x124559d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0044.068] CreateFileW (lpFileName="cmd.exe.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.068] GetFileAttributesExW (in: lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124559d4 | out: lpFileInformation=0x124559d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0044.068] CreateFileW (lpFileName="cmd.exe.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.068] GetFileAttributesExW (in: lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124559d4 | out: lpFileInformation=0x124559d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0044.068] CreateFileW (lpFileName="cmd.exe.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.068] GetFileAttributesExW (in: lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124559d4 | out: lpFileInformation=0x124559d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0044.069] CreateFileW (lpFileName="cmd.exe.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.069] GetFileAttributesExW (in: lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), fInfoLevelId=0x0, lpFileInformation=0x124559d4 | out: lpFileInformation=0x124559d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0044.069] CreateFileW (lpFileName="cmd.exe.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.069] GetFileAttributesExW (in: lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), fInfoLevelId=0x0, lpFileInformation=0x124559d4 | out: lpFileInformation=0x124559d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0044.069] CreateFileW (lpFileName="cmd.exe.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.069] GetFileAttributesExW (in: lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124559d4 | out: lpFileInformation=0x124559d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0044.069] CreateFileW (lpFileName="cmd.exe.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.069] GetFileAttributesExW (in: lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124559d4 | out: lpFileInformation=0x124559d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0044.069] CreateFileW (lpFileName="cmd.exe.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.069] GetFileAttributesExW (in: lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), fInfoLevelId=0x0, lpFileInformation=0x124559d4 | out: lpFileInformation=0x124559d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0044.069] CreateFileW (lpFileName="cmd.exe.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0044.069] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x1248e0d0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0044.069] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124559d4 | out: lpFileInformation=0x124559d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1 [0044.069] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x1248e1a0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0044.070] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1245590c | out: lpFileInformation=0x1245590c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1 [0044.070] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0044.070] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12455c48 | out: lpMode=0x12455c48) returned 0 [0044.071] CreatePipe (in: hReadPipe=0x12455c8c, hWritePipe=0x12455c90, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x12455c8c*=0xc8, hWritePipe=0x12455c90*=0xbc) returned 1 [0044.071] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12455c64 | out: lpMode=0x12455c64) returned 0 [0044.072] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12455c64 | out: lpMode=0x12455c64) returned 0 [0044.073] CreatePipe (in: hReadPipe=0x12455c8c, hWritePipe=0x12455c90, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x12455c8c*=0x98, hWritePipe=0x12455c90*=0xc0) returned 1 [0044.073] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12455c64 | out: lpMode=0x12455c64) returned 0 [0044.074] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12455c64 | out: lpMode=0x12455c64) returned 0 [0044.075] GetEnvironmentStringsW () returned 0x747df8* [0044.075] FreeEnvironmentStringsW (penv=0x747df8) returned 1 [0044.075] GetCurrentProcess () returned 0xffffffff [0044.075] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xdc, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x12410d80, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x12410d80*=0xe4) returned 1 [0044.075] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xbc, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x12410d84, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x12410d84*=0xe0) returned 1 [0044.076] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x12410d88, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x12410d88*=0xd8) returned 1 [0044.076] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /C WMIC PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12777400, lpCurrentDirectory=0x0, lpStartupInfo=0x12455c14*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xe4, hStdOutput=0xe0, hStdError=0xd8), lpProcessInformation=0x12455bf0 | out: lpCommandLine="cmd.exe /C WMIC PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128", lpProcessInformation=0x12455bf0*(hProcess=0xd0, hThread=0xcc, dwProcessId=0xb84, dwThreadId=0xb88)) returned 1 [0044.084] CloseHandle (hObject=0xcc) returned 1 [0044.084] CloseHandle (hObject=0xd8) returned 1 [0044.084] CloseHandle (hObject=0xe0) returned 1 [0044.084] CloseHandle (hObject=0xe4) returned 1 [0044.084] CloseHandle (hObject=0xdc) returned 1 [0044.084] CloseHandle (hObject=0xbc) returned 1 [0044.084] CloseHandle (hObject=0xc0) returned 1 [0044.084] SetEvent (hEvent=0xa0) returned 1 [0044.084] WaitForSingleObject (hHandle=0xd0, dwMilliseconds=0xffffffff) returned 0x0 [0045.546] GetExitCodeProcess (in: hProcess=0xd0, lpExitCode=0x12455d4c | out: lpExitCode=0x12455d4c*=0x80041017) returned 1 [0045.546] GetProcessTimes (in: hProcess=0xd0, lpCreationTime=0x1249a000, lpExitTime=0x1249a008, lpKernelTime=0x1249a010, lpUserTime=0x1249a018 | out: lpCreationTime=0x1249a000, lpExitTime=0x1249a008, lpKernelTime=0x1249a010, lpUserTime=0x1249a018) returned 1 [0045.546] CloseHandle (hObject=0xd0) returned 1 [0045.546] SetEvent (hEvent=0xa0) returned 1 [0045.546] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x5) returned 0x102 [0045.557] SetEvent (hEvent=0xa0) returned 1 [0045.557] GetEnvironmentVariableW (in: lpName="SYSTEMROOT", lpBuffer=0x124a0000, nSize=0x64 | out: lpBuffer="C:\\Windows") returned 0xa [0045.557] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x124a6000, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sam.exe")) returned 0x2d [0045.561] GetFileAttributesExW (in: lpFileName="A:\\" (normalized: "a:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.564] CreateFileW (lpFileName="A:\\" (normalized: "a:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.567] GetFileAttributesExW (in: lpFileName="B:\\" (normalized: "b:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.570] CreateFileW (lpFileName="B:\\" (normalized: "b:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.571] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xe0adbcc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe0adbcc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0045.571] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeW") returned 0x76c3418b [0045.571] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0045.574] GetFileAttributesExW (in: lpFileName="D:\\" (normalized: "d:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.577] CreateFileW (lpFileName="D:\\" (normalized: "d:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.580] GetFileAttributesExW (in: lpFileName="E:\\" (normalized: "e:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.583] CreateFileW (lpFileName="E:\\" (normalized: "e:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.586] GetFileAttributesExW (in: lpFileName="F:\\" (normalized: "f:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.589] CreateFileW (lpFileName="F:\\" (normalized: "f:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.592] GetFileAttributesExW (in: lpFileName="G:\\" (normalized: "g:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.595] CreateFileW (lpFileName="G:\\" (normalized: "g:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.598] GetFileAttributesExW (in: lpFileName="H:\\" (normalized: "h:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.601] CreateFileW (lpFileName="H:\\" (normalized: "h:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.605] GetFileAttributesExW (in: lpFileName="I:\\" (normalized: "i:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.608] CreateFileW (lpFileName="I:\\" (normalized: "i:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.611] GetFileAttributesExW (in: lpFileName="J:\\" (normalized: "j:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.615] CreateFileW (lpFileName="J:\\" (normalized: "j:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.618] GetFileAttributesExW (in: lpFileName="K:\\" (normalized: "k:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.621] CreateFileW (lpFileName="K:\\" (normalized: "k:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.624] GetFileAttributesExW (in: lpFileName="L:\\" (normalized: "l:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.627] CreateFileW (lpFileName="L:\\" (normalized: "l:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.630] GetFileAttributesExW (in: lpFileName="M:\\" (normalized: "m:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.633] CreateFileW (lpFileName="M:\\" (normalized: "m:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.636] GetFileAttributesExW (in: lpFileName="N:\\" (normalized: "n:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.639] CreateFileW (lpFileName="N:\\" (normalized: "n:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.642] GetFileAttributesExW (in: lpFileName="O:\\" (normalized: "o:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.645] CreateFileW (lpFileName="O:\\" (normalized: "o:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.648] GetFileAttributesExW (in: lpFileName="P:\\" (normalized: "p:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.651] CreateFileW (lpFileName="P:\\" (normalized: "p:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.654] GetFileAttributesExW (in: lpFileName="Q:\\" (normalized: "q:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.657] CreateFileW (lpFileName="Q:\\" (normalized: "q:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.660] GetFileAttributesExW (in: lpFileName="R:\\" (normalized: "r:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.663] CreateFileW (lpFileName="R:\\" (normalized: "r:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.666] GetFileAttributesExW (in: lpFileName="S:\\" (normalized: "s:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.669] CreateFileW (lpFileName="S:\\" (normalized: "s:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.672] GetFileAttributesExW (in: lpFileName="T:\\" (normalized: "t:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.675] CreateFileW (lpFileName="T:\\" (normalized: "t:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.678] GetFileAttributesExW (in: lpFileName="U:\\" (normalized: "u:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.681] CreateFileW (lpFileName="U:\\" (normalized: "u:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.684] GetFileAttributesExW (in: lpFileName="V:\\" (normalized: "v:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.687] CreateFileW (lpFileName="V:\\" (normalized: "v:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.690] GetFileAttributesExW (in: lpFileName="W:\\" (normalized: "w:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.693] CreateFileW (lpFileName="W:\\" (normalized: "w:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.696] GetFileAttributesExW (in: lpFileName="X:\\" (normalized: "x:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.699] CreateFileW (lpFileName="X:\\" (normalized: "x:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.702] GetFileAttributesExW (in: lpFileName="Y:\\" (normalized: "y:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.706] CreateFileW (lpFileName="Y:\\" (normalized: "y:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.708] GetFileAttributesExW (in: lpFileName="Z:\\" (normalized: "z:"), fInfoLevelId=0x0, lpFileInformation=0x12455acc | out: lpFileInformation=0x12455acc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.711] CreateFileW (lpFileName="Z:\\" (normalized: "z:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.712] SetEvent (hEvent=0xa0) returned 1 [0045.712] GetFileAttributesExW (in: lpFileName="C:\\\\00000000.lock" (normalized: "c:\\00000000.lock"), fInfoLevelId=0x0, lpFileInformation=0x1242bcdc | out: lpFileInformation=0x1242bcdc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.712] CreateFileW (lpFileName="C:\\\\00000000.lock" (normalized: "c:\\00000000.lock"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0045.712] CreateFileW (lpFileName="C:\\\\00000000.lock" (normalized: "c:\\00000000.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.713] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bf34 | out: lpMode=0x1242bf34) returned 0 [0045.713] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileAttributesW") returned 0x76c4d4f7 [0045.713] SetFileAttributesW (lpFileName="C:\\\\00000000.lock", dwFileAttributes=0x2) returned 1 [0045.714] CreateFileW (lpFileName="C:\\" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.714] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x1242bb7c | out: lpFindFileData=0x1242bb7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x745e00 [0045.714] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0045.714] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xce7b3560, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xce7b3560, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce7b3560, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00000000.lock", cAlternateFileName="000000~1.LOC")) returned 1 [0045.714] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0045.714] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0045.714] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0045.714] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0045.714] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0045.715] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x813b7be0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0045.715] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0045.715] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x814762c0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0045.715] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0045.715] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc4488d40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xc4488d40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0045.715] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0045.715] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcbb892f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcbb892f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0045.715] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0045.715] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0045.715] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0045.715] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0045.715] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bbf8 | out: lpFindFileData=0x1242bbf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.715] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0045.715] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.715] CreateFileW (lpFileName="C:/$Recycle.Bin" (normalized: "c:\\$recycle.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.716] FindFirstFileW (in: lpFileName="C:/$Recycle.Bin\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.716] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.716] CreateFileW (lpFileName="C:/00000000.lock" (normalized: "c:\\00000000.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0045.716] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x1242be68 | out: lpMode=0x1242be68) returned 0 [0045.716] ReadFile (in: hFile=0xc8, lpBuffer=0x124b8000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242be78, lpOverlapped=0x0 | out: lpBuffer=0x124b8000*, lpNumberOfBytesRead=0x1242be78*=0x0, lpOverlapped=0x0) returned 1 [0045.716] CreateFileW (lpFileName="C:/BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.729] FindFirstFileW (in: lpFileName="C:/BOOTSECT.BAK\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.729] CreateFileW (lpFileName="C:/Boot" (normalized: "c:\\boot"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.729] FindFirstFileW (in: lpFileName="C:/Boot\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.729] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.729] CreateFileW (lpFileName="C:/Config.Msi" (normalized: "c:\\config.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.729] FindFirstFileW (in: lpFileName="C:/Config.Msi\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.730] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.730] CreateFileW (lpFileName="C:/Documents and Settings" (normalized: "c:\\documents and settings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.730] FindFirstFileW (in: lpFileName="C:/Documents and Settings\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.730] CreateFileW (lpFileName="C:/MSOCache" (normalized: "c:\\msocache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.730] FindFirstFileW (in: lpFileName="C:/MSOCache\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.730] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.731] CreateFileW (lpFileName="C:/PerfLogs" (normalized: "c:\\perflogs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.731] FindFirstFileW (in: lpFileName="C:/PerfLogs\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.731] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.731] CreateFileW (lpFileName="C:/Program Files" (normalized: "c:\\program files"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.731] FindFirstFileW (in: lpFileName="C:/Program Files\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc4488d40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xc4488d40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.731] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.731] CreateFileW (lpFileName="C:/Program Files (x86)" (normalized: "c:\\program files (x86)"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.731] FindFirstFileW (in: lpFileName="C:/Program Files (x86)\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.731] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.731] CreateFileW (lpFileName="C:/ProgramData" (normalized: "c:\\programdata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.732] FindFirstFileW (in: lpFileName="C:/ProgramData\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcbb892f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcbb892f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.732] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.732] CreateFileW (lpFileName="C:/Recovery" (normalized: "c:\\recovery"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.732] FindFirstFileW (in: lpFileName="C:/Recovery\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.733] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.733] CreateFileW (lpFileName="C:/System Volume Information" (normalized: "c:\\system volume information"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.734] FindFirstFileW (in: lpFileName="C:/System Volume Information\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.734] CreateFileW (lpFileName="C:/Users" (normalized: "c:\\users"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.734] FindFirstFileW (in: lpFileName="C:/Users\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.734] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.734] CreateFileW (lpFileName="C:/Windows" (normalized: "c:\\windows"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.734] FindFirstFileW (in: lpFileName="C:/Windows\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.734] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.734] CreateFileW (lpFileName="C:/bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.735] FindFirstFileW (in: lpFileName="C:/bootmgr\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.735] CreateFileW (lpFileName="C:/hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.735] FindFirstFileW (in: lpFileName="C:/hiberfil.sys\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.735] CreateFileW (lpFileName="C:/pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.735] FindFirstFileW (in: lpFileName="C:/pagefile.sys\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.736] CreateFileW (lpFileName="C:/00000000.lock\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\00000000.lock\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.736] FindFirstFileW (in: lpFileName="C:/00000000.lock\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.736] CreateFileW (lpFileName="C:/00000000.lock\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\00000000.lock\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.736] FindFirstFileW (in: lpFileName="C:/00000000.lock\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242bb98 | out: lpFindFileData=0x1242bb98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.736] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileAttributesW") returned 0x76c31b18 [0045.736] GetFileAttributesW (lpFileName="C:/00000000.lock\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\00000000.lock\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.736] CreateFileW (lpFileName="C:/00000000.lock" (normalized: "c:\\00000000.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0045.736] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x1242bd9c | out: lpMode=0x1242bd9c) returned 0 [0045.736] CloseHandle (hObject=0x98) returned 1 [0045.736] CreateFileW (lpFileName="C:/BOOTSECT.BAK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\bootsect.bak\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.737] FindFirstFileW (in: lpFileName="C:/BOOTSECT.BAK\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.737] CreateFileW (lpFileName="C:/BOOTSECT.BAK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\bootsect.bak\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.737] FindFirstFileW (in: lpFileName="C:/BOOTSECT.BAK\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242bb98 | out: lpFindFileData=0x1242bb98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.737] GetFileAttributesW (lpFileName="C:/BOOTSECT.BAK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\bootsect.bak\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.737] CreateFileW (lpFileName="C:/BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0045.737] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x1242bd9c | out: lpMode=0x1242bd9c) returned 0 [0045.737] CloseHandle (hObject=0x98) returned 1 [0045.737] CreateFileW (lpFileName="C:/Boot\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.737] FindFirstFileW (in: lpFileName="C:/Boot\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242bba0 | out: lpFindFileData=0x1242bba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.738] CreateFileW (lpFileName="C:/Boot\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0045.738] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x1242be60 | out: lpMode=0x1242be60) returned 0 [0045.738] WriteFile (in: hFile=0x98, lpBuffer=0x12708600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242be64, lpOverlapped=0x0 | out: lpBuffer=0x12708600*, lpNumberOfBytesWritten=0x1242be64*=0x1033, lpOverlapped=0x0) returned 1 [0045.739] CloseHandle (hObject=0x98) returned 1 [0045.740] GetFileAttributesW (lpFileName="C:/Boot\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\@_read_to_recover_files_@.txt")) returned 0x20 [0045.740] SetFileAttributesW (lpFileName="C:/Boot\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0045.741] CreateFileW (lpFileName="C:/Boot" (normalized: "c:\\boot"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.741] FindFirstFileW (in: lpFileName="C:/Boot\\*", lpFindFileData=0x1242bad4 | out: lpFindFileData=0x1242bad4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xce7d5840, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce7d5840, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xce7d5840, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce7d5840, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xce7d5840, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xce7d5840, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce7dcd70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0045.741] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0045.742] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0045.742] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0045.742] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0045.742] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0045.742] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0045.742] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0045.742] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0045.742] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0045.742] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0045.742] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0045.742] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0045.742] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0045.742] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242bb50 | out: lpFindFileData=0x1242bb50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.742] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.742] CreateFileW (lpFileName="C:/Boot/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.742] FindFirstFileW (in: lpFileName="C:/Boot/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.742] CreateFileW (lpFileName="C:/Boot/BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.742] FindFirstFileW (in: lpFileName="C:/Boot/BCD\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.742] CreateFileW (lpFileName="C:/Boot/BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.743] FindFirstFileW (in: lpFileName="C:/Boot/BCD.LOG\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.743] CreateFileW (lpFileName="C:/Boot/BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0045.743] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x1242bdc0 | out: lpMode=0x1242bdc0) returned 0 [0045.743] ReadFile (in: hFile=0x98, lpBuffer=0x124b8100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242bdd0, lpOverlapped=0x0 | out: lpBuffer=0x124b8100*, lpNumberOfBytesRead=0x1242bdd0*=0x0, lpOverlapped=0x0) returned 1 [0045.743] CreateFileW (lpFileName="C:/Boot/BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0045.743] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242bdc0 | out: lpMode=0x1242bdc0) returned 0 [0045.744] ReadFile (in: hFile=0xc0, lpBuffer=0x124b8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242bdd0, lpOverlapped=0x0 | out: lpBuffer=0x124b8200*, lpNumberOfBytesRead=0x1242bdd0*=0x0, lpOverlapped=0x0) returned 1 [0045.744] CreateFileW (lpFileName="C:/Boot/BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0045.744] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x1242bdc0 | out: lpMode=0x1242bdc0) returned 0 [0045.745] ReadFile (in: hFile=0xbc, lpBuffer=0x124b8300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242bdd0, lpOverlapped=0x0 | out: lpBuffer=0x124b8300*, lpNumberOfBytesRead=0x1242bdd0*=0x100, lpOverlapped=0x0) returned 1 [0045.747] CreateFileW (lpFileName="C:/Boot/Fonts" (normalized: "c:\\boot\\fonts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.747] FindFirstFileW (in: lpFileName="C:/Boot/Fonts\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.747] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.747] CreateFileW (lpFileName="C:/Boot/cs-CZ" (normalized: "c:\\boot\\cs-cz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.747] FindFirstFileW (in: lpFileName="C:/Boot/cs-CZ\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.747] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.747] CreateFileW (lpFileName="C:/Boot/da-DK" (normalized: "c:\\boot\\da-dk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.747] FindFirstFileW (in: lpFileName="C:/Boot/da-DK\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.748] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.748] CreateFileW (lpFileName="C:/Boot/de-DE" (normalized: "c:\\boot\\de-de"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.748] FindFirstFileW (in: lpFileName="C:/Boot/de-DE\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.749] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.749] CreateFileW (lpFileName="C:/Boot/el-GR" (normalized: "c:\\boot\\el-gr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.749] FindFirstFileW (in: lpFileName="C:/Boot/el-GR\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.749] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.749] CreateFileW (lpFileName="C:/Boot/en-US" (normalized: "c:\\boot\\en-us"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.749] FindFirstFileW (in: lpFileName="C:/Boot/en-US\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.750] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.750] CreateFileW (lpFileName="C:/Boot/es-ES" (normalized: "c:\\boot\\es-es"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.750] FindFirstFileW (in: lpFileName="C:/Boot/es-ES\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.751] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.751] CreateFileW (lpFileName="C:/Boot/fi-FI" (normalized: "c:\\boot\\fi-fi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.751] FindFirstFileW (in: lpFileName="C:/Boot/fi-FI\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.751] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.751] CreateFileW (lpFileName="C:/Boot/fr-FR" (normalized: "c:\\boot\\fr-fr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.751] FindFirstFileW (in: lpFileName="C:/Boot/fr-FR\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.752] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.752] CreateFileW (lpFileName="C:/Boot/hu-HU" (normalized: "c:\\boot\\hu-hu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.752] FindFirstFileW (in: lpFileName="C:/Boot/hu-HU\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.753] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.753] CreateFileW (lpFileName="C:/Boot/it-IT" (normalized: "c:\\boot\\it-it"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.753] FindFirstFileW (in: lpFileName="C:/Boot/it-IT\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.754] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.754] CreateFileW (lpFileName="C:/Boot/ja-JP" (normalized: "c:\\boot\\ja-jp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.754] FindFirstFileW (in: lpFileName="C:/Boot/ja-JP\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.754] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.754] CreateFileW (lpFileName="C:/Boot/ko-KR" (normalized: "c:\\boot\\ko-kr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.754] FindFirstFileW (in: lpFileName="C:/Boot/ko-KR\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.755] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.755] CreateFileW (lpFileName="C:/Boot/memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.755] FindFirstFileW (in: lpFileName="C:/Boot/memtest.exe\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.755] CreateFileW (lpFileName="C:/Boot/nb-NO" (normalized: "c:\\boot\\nb-no"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.755] FindFirstFileW (in: lpFileName="C:/Boot/nb-NO\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.755] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.756] CreateFileW (lpFileName="C:/Boot/nl-NL" (normalized: "c:\\boot\\nl-nl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.756] FindFirstFileW (in: lpFileName="C:/Boot/nl-NL\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.756] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.756] CreateFileW (lpFileName="C:/Boot/pl-PL" (normalized: "c:\\boot\\pl-pl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.756] FindFirstFileW (in: lpFileName="C:/Boot/pl-PL\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.757] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.757] CreateFileW (lpFileName="C:/Boot/pt-BR" (normalized: "c:\\boot\\pt-br"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.757] FindFirstFileW (in: lpFileName="C:/Boot/pt-BR\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.758] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.758] CreateFileW (lpFileName="C:/Boot/pt-PT" (normalized: "c:\\boot\\pt-pt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.758] FindFirstFileW (in: lpFileName="C:/Boot/pt-PT\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.758] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.758] CreateFileW (lpFileName="C:/Boot/ru-RU" (normalized: "c:\\boot\\ru-ru"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.758] FindFirstFileW (in: lpFileName="C:/Boot/ru-RU\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.759] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.759] CreateFileW (lpFileName="C:/Boot/sv-SE" (normalized: "c:\\boot\\sv-se"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.759] FindFirstFileW (in: lpFileName="C:/Boot/sv-SE\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.759] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.759] CreateFileW (lpFileName="C:/Boot/tr-TR" (normalized: "c:\\boot\\tr-tr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.760] FindFirstFileW (in: lpFileName="C:/Boot/tr-TR\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.761] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.761] CreateFileW (lpFileName="C:/Boot/zh-CN" (normalized: "c:\\boot\\zh-cn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.761] FindFirstFileW (in: lpFileName="C:/Boot/zh-CN\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.761] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.761] CreateFileW (lpFileName="C:/Boot/zh-HK" (normalized: "c:\\boot\\zh-hk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.761] FindFirstFileW (in: lpFileName="C:/Boot/zh-HK\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.762] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.762] CreateFileW (lpFileName="C:/Boot/zh-TW" (normalized: "c:\\boot\\zh-tw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.762] FindFirstFileW (in: lpFileName="C:/Boot/zh-TW\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.762] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.762] GetFileAttributesExW (in: lpFileName="C:/Boot/BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x1242bba8 | out: lpFileInformation=0x1242bba8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0045.762] CreateFileW (lpFileName="C:/Boot/BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0045.762] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242bca4 | out: lpMode=0x1242bca4) returned 0 [0045.763] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249f020 | out: pbBuffer=0x1249f020) returned 1 [0045.764] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446d94 | out: pbBuffer=0x12446d94) returned 1 [0045.764] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b8402 | out: pbBuffer=0x124b8402) returned 1 [0045.764] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b844c | out: pbBuffer=0x124b844c) returned 1 [0045.764] VirtualAlloc (lpAddress=0x12c00000, dwSize=0x800000, flAllocationType=0x1000, flProtect=0x4) returned 0x12c00000 [0045.783] VirtualAlloc (lpAddress=0x2112000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x2112000 [0045.783] VirtualAlloc (lpAddress=0x2152000, dwSize=0x41000, flAllocationType=0x1000, flProtect=0x4) returned 0x2152000 [0045.784] VirtualFree (lpAddress=0x12830000, dwSize=0x3d0000, dwFreeType=0x4000) returned 1 [0045.793] VirtualFree (lpAddress=0x124f2000, dwSize=0x214000, dwFreeType=0x4000) returned 1 [0045.805] VirtualFree (lpAddress=0x1270c000, dwSize=0x60000, dwFreeType=0x4000) returned 1 [0045.808] VirtualFree (lpAddress=0x12780000, dwSize=0x42000, dwFreeType=0x4000) returned 1 [0045.809] VirtualFree (lpAddress=0x127ea000, dwSize=0x18000, dwFreeType=0x4000) returned 1 [0045.816] SetEvent (hEvent=0xa0) returned 1 [0045.816] ReadFile (in: hFile=0xdc, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242bcb4, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x1242bcb4*=0x10000, lpOverlapped=0x0) returned 1 [0045.897] SwitchToThread () returned 1 [0045.899] VirtualAlloc (lpAddress=0x127f2000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x127f2000 [0045.899] VirtualAlloc (lpAddress=0x12780000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x12780000 [0045.900] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x700000 [0045.900] VirtualAlloc (lpAddress=0x12790000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x12790000 [0045.902] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0045.902] GetFileType (hFile=0xdc) returned 0x1 [0045.902] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0045.902] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bc7c | out: lpNewFilePointer=0x0) returned 1 [0045.902] WriteFile (in: hFile=0xdc, lpBuffer=0x12780000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x1242bc98, lpOverlapped=0x1242bca4 | out: lpBuffer=0x12780000*, lpNumberOfBytesWritten=0x1242bc98*=0x10000, lpOverlapped=0x1242bca4) returned 1 [0045.903] GetFileType (hFile=0xdc) returned 0x1 [0045.903] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bc7c | out: lpNewFilePointer=0x0) returned 1 [0045.903] ReadFile (in: hFile=0xdc, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242bcb4, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x1242bcb4*=0x0, lpOverlapped=0x0) returned 1 [0045.903] CloseHandle (hObject=0xdc) returned 1 [0045.904] VirtualAlloc (lpAddress=0x127fa000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x127fa000 [0045.904] CreateFileW (lpFileName="C:/Boot/BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0045.904] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242bca4 | out: lpMode=0x1242bca4) returned 0 [0045.905] WriteFile (in: hFile=0xdc, lpBuffer=0x127deb40*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x1242bca8, lpOverlapped=0x0 | out: lpBuffer=0x127deb40*, lpNumberOfBytesWritten=0x1242bca8*=0x108, lpOverlapped=0x0) returned 1 [0045.906] CloseHandle (hObject=0xdc) returned 1 [0045.907] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12412070*, nNumberOfCharsToWrite=0x32, lpNumberOfCharsWritten=0x1242b96c, lpReserved=0x0 | out: lpBuffer=0x12412070*, lpNumberOfCharsWritten=0x1242b96c*=0x32) returned 1 [0045.908] CreateFileW (lpFileName="C:/Boot/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.908] FindFirstFileW (in: lpFileName="C:/Boot/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.908] CreateFileW (lpFileName="C:/Boot/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.908] FindFirstFileW (in: lpFileName="C:/Boot/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf0 | out: lpFindFileData=0x1242baf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.908] GetFileAttributesW (lpFileName="C:/Boot/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.909] CreateFileW (lpFileName="C:/Boot/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.909] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bcf4 | out: lpMode=0x1242bcf4) returned 0 [0045.909] CloseHandle (hObject=0xd0) returned 1 [0045.909] CreateFileW (lpFileName="C:/Boot/BCD\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\bcd\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.909] FindFirstFileW (in: lpFileName="C:/Boot/BCD\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.909] CreateFileW (lpFileName="C:/Boot/BCD\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\bcd\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.909] FindFirstFileW (in: lpFileName="C:/Boot/BCD\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf0 | out: lpFindFileData=0x1242baf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.909] GetFileAttributesW (lpFileName="C:/Boot/BCD\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\bcd\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.910] CreateFileW (lpFileName="C:/Boot/BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.910] FindFirstFileW (in: lpFileName="C:/Boot/BCD\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.910] CreateFileW (lpFileName="C:/Boot/BCD.LOG\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\bcd.log\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.910] FindFirstFileW (in: lpFileName="C:/Boot/BCD.LOG\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.910] CreateFileW (lpFileName="C:/Boot/BCD.LOG\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\bcd.log\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.910] FindFirstFileW (in: lpFileName="C:/Boot/BCD.LOG\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf0 | out: lpFindFileData=0x1242baf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.910] GetFileAttributesW (lpFileName="C:/Boot/BCD.LOG\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\bcd.log\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.910] CreateFileW (lpFileName="C:/Boot/BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.910] FindFirstFileW (in: lpFileName="C:/Boot/BCD.LOG\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.910] CreateFileW (lpFileName="C:/Boot/BCD.LOG1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\bcd.log1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.910] FindFirstFileW (in: lpFileName="C:/Boot/BCD.LOG1\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.910] CreateFileW (lpFileName="C:/Boot/BCD.LOG1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\bcd.log1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.910] FindFirstFileW (in: lpFileName="C:/Boot/BCD.LOG1\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf0 | out: lpFindFileData=0x1242baf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.911] GetFileAttributesW (lpFileName="C:/Boot/BCD.LOG1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\bcd.log1\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.911] CreateFileW (lpFileName="C:/Boot/BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.911] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bcf4 | out: lpMode=0x1242bcf4) returned 0 [0045.911] CloseHandle (hObject=0xd0) returned 1 [0045.911] CreateFileW (lpFileName="C:/Boot/BCD.LOG2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\bcd.log2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.911] FindFirstFileW (in: lpFileName="C:/Boot/BCD.LOG2\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.911] CreateFileW (lpFileName="C:/Boot/BCD.LOG2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\bcd.log2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.911] FindFirstFileW (in: lpFileName="C:/Boot/BCD.LOG2\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf0 | out: lpFindFileData=0x1242baf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.911] GetFileAttributesW (lpFileName="C:/Boot/BCD.LOG2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\bcd.log2\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.911] CreateFileW (lpFileName="C:/Boot/BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.911] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bcf4 | out: lpMode=0x1242bcf4) returned 0 [0045.912] CloseHandle (hObject=0xd0) returned 1 [0045.912] CreateFileW (lpFileName="C:/Boot/Fonts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.912] FindFirstFileW (in: lpFileName="C:/Boot/Fonts\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.912] CreateFileW (lpFileName="C:/Boot/Fonts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.913] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0045.914] WriteFile (in: hFile=0xd0, lpBuffer=0x124c2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x124c2600*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0045.915] CloseHandle (hObject=0xd0) returned 1 [0045.917] GetFileAttributesW (lpFileName="C:/Boot/Fonts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\@_read_to_recover_files_@.txt")) returned 0x20 [0045.917] SetFileAttributesW (lpFileName="C:/Boot/Fonts\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0045.917] CreateFileW (lpFileName="C:/Boot/Fonts" (normalized: "c:\\boot\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.918] FindFirstFileW (in: lpFileName="C:/Boot/Fonts\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xce97e520, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce97e520, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.918] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xce97e520, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce97e520, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xce97be10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xce97be10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce980c30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.918] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.918] CreateFileW (lpFileName="C:/Boot/Fonts/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.918] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.918] CreateFileW (lpFileName="C:/Boot/Fonts/chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.918] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/chs_boot.ttf\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.918] CreateFileW (lpFileName="C:/Boot/Fonts/cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.919] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/cht_boot.ttf\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.919] CreateFileW (lpFileName="C:/Boot/Fonts/jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.919] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/jpn_boot.ttf\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.919] CreateFileW (lpFileName="C:/Boot/Fonts/kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.920] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/kor_boot.ttf\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.920] CreateFileW (lpFileName="C:/Boot/Fonts/wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.920] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/wgl4_boot.ttf\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.920] CreateFileW (lpFileName="C:/Boot/Fonts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.920] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.920] CreateFileW (lpFileName="C:/Boot/Fonts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.920] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.920] GetFileAttributesW (lpFileName="C:/Boot/Fonts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.920] CreateFileW (lpFileName="C:/Boot/Fonts/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.920] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0045.920] CloseHandle (hObject=0xd0) returned 1 [0045.921] CreateFileW (lpFileName="C:/Boot/Fonts/chs_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\chs_boot.ttf\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.921] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/chs_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.921] CreateFileW (lpFileName="C:/Boot/Fonts/chs_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\chs_boot.ttf\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.921] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/chs_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.921] GetFileAttributesW (lpFileName="C:/Boot/Fonts/chs_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\chs_boot.ttf\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.921] CreateFileW (lpFileName="C:/Boot/Fonts/chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.921] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0045.921] CloseHandle (hObject=0xd0) returned 1 [0045.921] CreateFileW (lpFileName="C:/Boot/Fonts/cht_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\cht_boot.ttf\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.922] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/cht_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.922] CreateFileW (lpFileName="C:/Boot/Fonts/cht_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\cht_boot.ttf\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.922] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/cht_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.922] GetFileAttributesW (lpFileName="C:/Boot/Fonts/cht_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\cht_boot.ttf\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.922] CreateFileW (lpFileName="C:/Boot/Fonts/cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.922] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0045.922] CloseHandle (hObject=0xd0) returned 1 [0045.922] CreateFileW (lpFileName="C:/Boot/Fonts/jpn_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.922] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/jpn_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.922] CreateFileW (lpFileName="C:/Boot/Fonts/jpn_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.923] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/jpn_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.923] GetFileAttributesW (lpFileName="C:/Boot/Fonts/jpn_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.923] CreateFileW (lpFileName="C:/Boot/Fonts/jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.923] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0045.923] CloseHandle (hObject=0xd0) returned 1 [0045.923] CreateFileW (lpFileName="C:/Boot/Fonts/kor_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\kor_boot.ttf\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.923] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/kor_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.923] CreateFileW (lpFileName="C:/Boot/Fonts/kor_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\kor_boot.ttf\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.923] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/kor_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.923] GetFileAttributesW (lpFileName="C:/Boot/Fonts/kor_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\kor_boot.ttf\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.923] CreateFileW (lpFileName="C:/Boot/Fonts/kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.924] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0045.924] CloseHandle (hObject=0xd0) returned 1 [0045.924] CreateFileW (lpFileName="C:/Boot/Fonts/wgl4_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.924] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/wgl4_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.924] CreateFileW (lpFileName="C:/Boot/Fonts/wgl4_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.924] FindFirstFileW (in: lpFileName="C:/Boot/Fonts/wgl4_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.924] GetFileAttributesW (lpFileName="C:/Boot/Fonts/wgl4_boot.ttf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.924] CreateFileW (lpFileName="C:/Boot/Fonts/wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.924] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0045.925] CloseHandle (hObject=0xd0) returned 1 [0045.925] CreateFileW (lpFileName="C:/Boot/cs-CZ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\cs-cz\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.925] FindFirstFileW (in: lpFileName="C:/Boot/cs-CZ\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.925] CreateFileW (lpFileName="C:/Boot/cs-CZ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\cs-cz\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.925] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0045.925] WriteFile (in: hFile=0xd0, lpBuffer=0x1270ac00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x1270ac00*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0045.926] CloseHandle (hObject=0xd0) returned 1 [0045.926] GetFileAttributesW (lpFileName="C:/Boot/cs-CZ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\cs-cz\\@_read_to_recover_files_@.txt")) returned 0x20 [0045.927] SetFileAttributesW (lpFileName="C:/Boot/cs-CZ\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0045.927] CreateFileW (lpFileName="C:/Boot/cs-CZ" (normalized: "c:\\boot\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.927] FindFirstFileW (in: lpFileName="C:/Boot/cs-CZ\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xce9992d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce9992d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.927] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xce9992d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce9992d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.927] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xce9992d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xce9992d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce99b9e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0045.927] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.927] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.927] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.927] CreateFileW (lpFileName="C:/Boot/cs-CZ/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\cs-cz\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.927] FindFirstFileW (in: lpFileName="C:/Boot/cs-CZ/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.927] CreateFileW (lpFileName="C:/Boot/cs-CZ/bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.927] FindFirstFileW (in: lpFileName="C:/Boot/cs-CZ/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.928] CreateFileW (lpFileName="C:/Boot/cs-CZ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\cs-cz\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.928] FindFirstFileW (in: lpFileName="C:/Boot/cs-CZ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.928] VirtualAlloc (lpAddress=0x127fc000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x127fc000 [0045.928] CreateFileW (lpFileName="C:/Boot/cs-CZ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\cs-cz\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.928] FindFirstFileW (in: lpFileName="C:/Boot/cs-CZ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.928] GetFileAttributesW (lpFileName="C:/Boot/cs-CZ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\cs-cz\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.928] CreateFileW (lpFileName="C:/Boot/cs-CZ/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\cs-cz\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.928] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0045.929] CloseHandle (hObject=0xd0) returned 1 [0045.929] CreateFileW (lpFileName="C:/Boot/cs-CZ/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.929] FindFirstFileW (in: lpFileName="C:/Boot/cs-CZ/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.929] CreateFileW (lpFileName="C:/Boot/cs-CZ/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.929] FindFirstFileW (in: lpFileName="C:/Boot/cs-CZ/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.929] GetFileAttributesW (lpFileName="C:/Boot/cs-CZ/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.929] CreateFileW (lpFileName="C:/Boot/cs-CZ/bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.930] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0045.930] CloseHandle (hObject=0xd0) returned 1 [0045.930] CreateFileW (lpFileName="C:/Boot/da-DK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\da-dk\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.930] FindFirstFileW (in: lpFileName="C:/Boot/da-DK\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.930] CreateFileW (lpFileName="C:/Boot/da-DK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\da-dk\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.930] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0045.931] WriteFile (in: hFile=0xd0, lpBuffer=0x127fe600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x127fe600*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0045.931] CloseHandle (hObject=0xd0) returned 1 [0045.932] GetFileAttributesW (lpFileName="C:/Boot/da-DK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\da-dk\\@_read_to_recover_files_@.txt")) returned 0x20 [0045.932] SetFileAttributesW (lpFileName="C:/Boot/da-DK\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0045.932] CreateFileW (lpFileName="C:/Boot/da-DK" (normalized: "c:\\boot\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.932] FindFirstFileW (in: lpFileName="C:/Boot/da-DK\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xce9a5620, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce9a5620, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.932] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xce9a5620, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce9a5620, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.932] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xce9a5620, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xce9a5620, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce9a7d30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0045.932] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.932] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.932] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.932] CreateFileW (lpFileName="C:/Boot/da-DK/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\da-dk\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.933] FindFirstFileW (in: lpFileName="C:/Boot/da-DK/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.933] CreateFileW (lpFileName="C:/Boot/da-DK/bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.933] FindFirstFileW (in: lpFileName="C:/Boot/da-DK/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.933] CreateFileW (lpFileName="C:/Boot/da-DK/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\da-dk\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.933] FindFirstFileW (in: lpFileName="C:/Boot/da-DK/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.933] CreateFileW (lpFileName="C:/Boot/da-DK/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\da-dk\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.933] FindFirstFileW (in: lpFileName="C:/Boot/da-DK/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.933] GetFileAttributesW (lpFileName="C:/Boot/da-DK/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\da-dk\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.933] CreateFileW (lpFileName="C:/Boot/da-DK/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\da-dk\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.933] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0045.934] CloseHandle (hObject=0xd0) returned 1 [0045.934] CreateFileW (lpFileName="C:/Boot/da-DK/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.934] FindFirstFileW (in: lpFileName="C:/Boot/da-DK/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.934] CreateFileW (lpFileName="C:/Boot/da-DK/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.934] FindFirstFileW (in: lpFileName="C:/Boot/da-DK/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.934] GetFileAttributesW (lpFileName="C:/Boot/da-DK/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.934] CreateFileW (lpFileName="C:/Boot/da-DK/bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.934] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0045.934] CloseHandle (hObject=0xd0) returned 1 [0045.934] CreateFileW (lpFileName="C:/Boot/de-DE\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\de-de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.935] FindFirstFileW (in: lpFileName="C:/Boot/de-DE\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.935] CreateFileW (lpFileName="C:/Boot/de-DE\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\de-de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.935] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0045.935] WriteFile (in: hFile=0xd0, lpBuffer=0x124a4000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x124a4000*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0045.936] CloseHandle (hObject=0xd0) returned 1 [0045.936] GetFileAttributesW (lpFileName="C:/Boot/de-DE\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\de-de\\@_read_to_recover_files_@.txt")) returned 0x20 [0045.936] SetFileAttributesW (lpFileName="C:/Boot/de-DE\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0045.937] CreateFileW (lpFileName="C:/Boot/de-DE" (normalized: "c:\\boot\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.937] FindFirstFileW (in: lpFileName="C:/Boot/de-DE\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xce9af260, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce9af260, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.937] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xce9af260, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce9af260, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.937] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xce9af260, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xce9af260, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce9b4080, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0045.937] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.937] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.937] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.937] CreateFileW (lpFileName="C:/Boot/de-DE/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\de-de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.937] FindFirstFileW (in: lpFileName="C:/Boot/de-DE/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.937] CreateFileW (lpFileName="C:/Boot/de-DE/bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.937] FindFirstFileW (in: lpFileName="C:/Boot/de-DE/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.937] CreateFileW (lpFileName="C:/Boot/de-DE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\de-de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.937] FindFirstFileW (in: lpFileName="C:/Boot/de-DE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.937] CreateFileW (lpFileName="C:/Boot/de-DE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\de-de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.937] FindFirstFileW (in: lpFileName="C:/Boot/de-DE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.938] GetFileAttributesW (lpFileName="C:/Boot/de-DE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\de-de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.938] CreateFileW (lpFileName="C:/Boot/de-DE/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\de-de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.938] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0045.939] CloseHandle (hObject=0xd0) returned 1 [0045.939] CreateFileW (lpFileName="C:/Boot/de-DE/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.939] FindFirstFileW (in: lpFileName="C:/Boot/de-DE/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.939] CreateFileW (lpFileName="C:/Boot/de-DE/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.939] FindFirstFileW (in: lpFileName="C:/Boot/de-DE/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.939] GetFileAttributesW (lpFileName="C:/Boot/de-DE/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.939] CreateFileW (lpFileName="C:/Boot/de-DE/bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.939] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0045.995] CloseHandle (hObject=0xd0) returned 1 [0045.995] CreateFileW (lpFileName="C:/Boot/el-GR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\el-gr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.995] FindFirstFileW (in: lpFileName="C:/Boot/el-GR\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.995] CreateFileW (lpFileName="C:/Boot/el-GR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\el-gr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.995] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0045.996] WriteFile (in: hFile=0xd0, lpBuffer=0x124a7900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x124a7900*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0045.997] CloseHandle (hObject=0xd0) returned 1 [0045.997] GetFileAttributesW (lpFileName="C:/Boot/el-GR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\el-gr\\@_read_to_recover_files_@.txt")) returned 0x20 [0045.997] SetFileAttributesW (lpFileName="C:/Boot/el-GR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0045.997] CreateFileW (lpFileName="C:/Boot/el-GR" (normalized: "c:\\boot\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.997] FindFirstFileW (in: lpFileName="C:/Boot/el-GR\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea41a20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea41a20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0045.997] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea41a20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea41a20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.997] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xcea41a20, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xcea41a20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea44130, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0045.997] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0045.997] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.998] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0045.998] CreateFileW (lpFileName="C:/Boot/el-GR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\el-gr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.998] FindFirstFileW (in: lpFileName="C:/Boot/el-GR/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.998] CreateFileW (lpFileName="C:/Boot/el-GR/bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.998] FindFirstFileW (in: lpFileName="C:/Boot/el-GR/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.998] CreateFileW (lpFileName="C:/Boot/el-GR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\el-gr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.998] FindFirstFileW (in: lpFileName="C:/Boot/el-GR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.998] CreateFileW (lpFileName="C:/Boot/el-GR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\el-gr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.998] FindFirstFileW (in: lpFileName="C:/Boot/el-GR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.998] GetFileAttributesW (lpFileName="C:/Boot/el-GR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\el-gr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.998] CreateFileW (lpFileName="C:/Boot/el-GR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\el-gr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.998] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0045.999] CloseHandle (hObject=0xd0) returned 1 [0045.999] CreateFileW (lpFileName="C:/Boot/el-GR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.999] FindFirstFileW (in: lpFileName="C:/Boot/el-GR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.999] CreateFileW (lpFileName="C:/Boot/el-GR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0045.999] FindFirstFileW (in: lpFileName="C:/Boot/el-GR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0045.999] GetFileAttributesW (lpFileName="C:/Boot/el-GR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0045.999] CreateFileW (lpFileName="C:/Boot/el-GR/bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0045.999] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.000] CloseHandle (hObject=0xd0) returned 1 [0046.000] CreateFileW (lpFileName="C:/Boot/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.000] FindFirstFileW (in: lpFileName="C:/Boot/en-US\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.000] CreateFileW (lpFileName="C:/Boot/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.001] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.002] WriteFile (in: hFile=0xd0, lpBuffer=0x124af300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x124af300*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.003] CloseHandle (hObject=0xd0) returned 1 [0046.003] GetFileAttributesW (lpFileName="C:/Boot/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\en-us\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.003] SetFileAttributesW (lpFileName="C:/Boot/en-US\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.003] CreateFileW (lpFileName="C:/Boot/en-US" (normalized: "c:\\boot\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.003] FindFirstFileW (in: lpFileName="C:/Boot/en-US\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea50480, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea50480, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0046.003] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea50480, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea50480, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.003] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xcea4dd70, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xcea4dd70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea52b90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.003] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.003] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0046.003] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.004] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.004] CreateFileW (lpFileName="C:/Boot/en-US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.004] FindFirstFileW (in: lpFileName="C:/Boot/en-US/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.004] CreateFileW (lpFileName="C:/Boot/en-US/bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.004] FindFirstFileW (in: lpFileName="C:/Boot/en-US/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.004] CreateFileW (lpFileName="C:/Boot/en-US/memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.004] FindFirstFileW (in: lpFileName="C:/Boot/en-US/memtest.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.004] CreateFileW (lpFileName="C:/Boot/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.004] FindFirstFileW (in: lpFileName="C:/Boot/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.004] CreateFileW (lpFileName="C:/Boot/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.004] FindFirstFileW (in: lpFileName="C:/Boot/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.004] GetFileAttributesW (lpFileName="C:/Boot/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.004] CreateFileW (lpFileName="C:/Boot/en-US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.005] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.005] CloseHandle (hObject=0xd0) returned 1 [0046.005] CreateFileW (lpFileName="C:/Boot/en-US/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.005] FindFirstFileW (in: lpFileName="C:/Boot/en-US/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.005] CreateFileW (lpFileName="C:/Boot/en-US/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.005] FindFirstFileW (in: lpFileName="C:/Boot/en-US/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.005] GetFileAttributesW (lpFileName="C:/Boot/en-US/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.005] CreateFileW (lpFileName="C:/Boot/en-US/bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.006] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.006] CloseHandle (hObject=0xd0) returned 1 [0046.006] CreateFileW (lpFileName="C:/Boot/en-US/memtest.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\en-us\\memtest.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.006] FindFirstFileW (in: lpFileName="C:/Boot/en-US/memtest.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.006] CreateFileW (lpFileName="C:/Boot/en-US/memtest.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\en-us\\memtest.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.006] FindFirstFileW (in: lpFileName="C:/Boot/en-US/memtest.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.006] GetFileAttributesW (lpFileName="C:/Boot/en-US/memtest.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\en-us\\memtest.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.006] CreateFileW (lpFileName="C:/Boot/en-US/memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.006] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.007] CloseHandle (hObject=0xd0) returned 1 [0046.007] CreateFileW (lpFileName="C:/Boot/es-ES\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\es-es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.007] FindFirstFileW (in: lpFileName="C:/Boot/es-ES\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.007] CreateFileW (lpFileName="C:/Boot/es-ES\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\es-es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.007] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.007] WriteFile (in: hFile=0xd0, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.008] CloseHandle (hObject=0xd0) returned 1 [0046.009] GetFileAttributesW (lpFileName="C:/Boot/es-ES\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\es-es\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.009] SetFileAttributesW (lpFileName="C:/Boot/es-ES\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.009] CreateFileW (lpFileName="C:/Boot/es-ES" (normalized: "c:\\boot\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.009] FindFirstFileW (in: lpFileName="C:/Boot/es-ES\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea5eee0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea5eee0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0046.009] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea5eee0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea5eee0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.009] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xcea5eee0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xcea5eee0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea615f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.009] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.009] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.009] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.009] CreateFileW (lpFileName="C:/Boot/es-ES/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\es-es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.009] FindFirstFileW (in: lpFileName="C:/Boot/es-ES/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.009] CreateFileW (lpFileName="C:/Boot/es-ES/bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.009] FindFirstFileW (in: lpFileName="C:/Boot/es-ES/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.010] CreateFileW (lpFileName="C:/Boot/es-ES/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\es-es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.010] FindFirstFileW (in: lpFileName="C:/Boot/es-ES/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.010] CreateFileW (lpFileName="C:/Boot/es-ES/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\es-es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.010] FindFirstFileW (in: lpFileName="C:/Boot/es-ES/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.010] GetFileAttributesW (lpFileName="C:/Boot/es-ES/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\es-es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.010] CreateFileW (lpFileName="C:/Boot/es-ES/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\es-es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.010] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.010] CloseHandle (hObject=0xd0) returned 1 [0046.011] CreateFileW (lpFileName="C:/Boot/es-ES/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.011] FindFirstFileW (in: lpFileName="C:/Boot/es-ES/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.011] CreateFileW (lpFileName="C:/Boot/es-ES/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.011] FindFirstFileW (in: lpFileName="C:/Boot/es-ES/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.011] GetFileAttributesW (lpFileName="C:/Boot/es-ES/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.011] CreateFileW (lpFileName="C:/Boot/es-ES/bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.011] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.011] CloseHandle (hObject=0xd0) returned 1 [0046.012] CreateFileW (lpFileName="C:/Boot/fi-FI\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fi-fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.012] FindFirstFileW (in: lpFileName="C:/Boot/fi-FI\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.012] CreateFileW (lpFileName="C:/Boot/fi-FI\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fi-fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.012] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.012] WriteFile (in: hFile=0xd0, lpBuffer=0x124d3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x124d3900*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.013] CloseHandle (hObject=0xd0) returned 1 [0046.013] GetFileAttributesW (lpFileName="C:/Boot/fi-FI\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fi-fi\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.013] SetFileAttributesW (lpFileName="C:/Boot/fi-FI\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.014] CreateFileW (lpFileName="C:/Boot/fi-FI" (normalized: "c:\\boot\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.014] FindFirstFileW (in: lpFileName="C:/Boot/fi-FI\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea68b20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea68b20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0046.014] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea68b20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea68b20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.014] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xcea68b20, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xcea68b20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea6d940, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.014] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.014] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.014] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.014] CreateFileW (lpFileName="C:/Boot/fi-FI/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fi-fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.014] FindFirstFileW (in: lpFileName="C:/Boot/fi-FI/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.014] CreateFileW (lpFileName="C:/Boot/fi-FI/bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.014] FindFirstFileW (in: lpFileName="C:/Boot/fi-FI/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.014] CreateFileW (lpFileName="C:/Boot/fi-FI/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fi-fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.014] FindFirstFileW (in: lpFileName="C:/Boot/fi-FI/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.015] CreateFileW (lpFileName="C:/Boot/fi-FI/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fi-fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.015] FindFirstFileW (in: lpFileName="C:/Boot/fi-FI/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.015] GetFileAttributesW (lpFileName="C:/Boot/fi-FI/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fi-fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.015] CreateFileW (lpFileName="C:/Boot/fi-FI/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fi-fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.015] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.015] CloseHandle (hObject=0xd0) returned 1 [0046.015] CreateFileW (lpFileName="C:/Boot/fi-FI/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.015] FindFirstFileW (in: lpFileName="C:/Boot/fi-FI/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.015] CreateFileW (lpFileName="C:/Boot/fi-FI/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.016] FindFirstFileW (in: lpFileName="C:/Boot/fi-FI/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.016] GetFileAttributesW (lpFileName="C:/Boot/fi-FI/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.016] CreateFileW (lpFileName="C:/Boot/fi-FI/bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.016] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.016] CloseHandle (hObject=0xd0) returned 1 [0046.016] CreateFileW (lpFileName="C:/Boot/fr-FR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fr-fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.016] FindFirstFileW (in: lpFileName="C:/Boot/fr-FR\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.016] CreateFileW (lpFileName="C:/Boot/fr-FR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fr-fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.017] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.017] WriteFile (in: hFile=0xd0, lpBuffer=0x12773300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x12773300*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.018] CloseHandle (hObject=0xd0) returned 1 [0046.018] GetFileAttributesW (lpFileName="C:/Boot/fr-FR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fr-fr\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.018] SetFileAttributesW (lpFileName="C:/Boot/fr-FR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.018] CreateFileW (lpFileName="C:/Boot/fr-FR" (normalized: "c:\\boot\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.018] FindFirstFileW (in: lpFileName="C:/Boot/fr-FR\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea74e70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea74e70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0046.018] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea74e70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea74e70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.018] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xcea74e70, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xcea74e70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea77580, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.018] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.018] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.018] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.019] CreateFileW (lpFileName="C:/Boot/fr-FR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fr-fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.019] FindFirstFileW (in: lpFileName="C:/Boot/fr-FR/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.019] CreateFileW (lpFileName="C:/Boot/fr-FR/bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.019] FindFirstFileW (in: lpFileName="C:/Boot/fr-FR/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.019] CreateFileW (lpFileName="C:/Boot/fr-FR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fr-fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.019] FindFirstFileW (in: lpFileName="C:/Boot/fr-FR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.019] CreateFileW (lpFileName="C:/Boot/fr-FR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fr-fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.019] FindFirstFileW (in: lpFileName="C:/Boot/fr-FR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.019] GetFileAttributesW (lpFileName="C:/Boot/fr-FR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fr-fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.019] CreateFileW (lpFileName="C:/Boot/fr-FR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fr-fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.019] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.020] CloseHandle (hObject=0xd0) returned 1 [0046.020] CreateFileW (lpFileName="C:/Boot/fr-FR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.020] FindFirstFileW (in: lpFileName="C:/Boot/fr-FR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.020] CreateFileW (lpFileName="C:/Boot/fr-FR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.020] FindFirstFileW (in: lpFileName="C:/Boot/fr-FR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.020] GetFileAttributesW (lpFileName="C:/Boot/fr-FR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.020] CreateFileW (lpFileName="C:/Boot/fr-FR/bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.020] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.020] CloseHandle (hObject=0xd0) returned 1 [0046.021] CreateFileW (lpFileName="C:/Boot/hu-HU\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\hu-hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.021] FindFirstFileW (in: lpFileName="C:/Boot/hu-HU\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.021] CreateFileW (lpFileName="C:/Boot/hu-HU\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\hu-hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.021] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.021] WriteFile (in: hFile=0xd0, lpBuffer=0x12776c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x12776c00*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.022] CloseHandle (hObject=0xd0) returned 1 [0046.022] GetFileAttributesW (lpFileName="C:/Boot/hu-HU\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\hu-hu\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.022] SetFileAttributesW (lpFileName="C:/Boot/hu-HU\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.022] CreateFileW (lpFileName="C:/Boot/hu-HU" (normalized: "c:\\boot\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.023] FindFirstFileW (in: lpFileName="C:/Boot/hu-HU\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea7eab0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea7eab0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0046.023] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea7eab0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea7eab0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.023] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xcea7eab0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xcea7eab0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea838d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.023] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.023] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.023] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.023] CreateFileW (lpFileName="C:/Boot/hu-HU/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\hu-hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.023] FindFirstFileW (in: lpFileName="C:/Boot/hu-HU/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.023] CreateFileW (lpFileName="C:/Boot/hu-HU/bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.023] FindFirstFileW (in: lpFileName="C:/Boot/hu-HU/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.023] CreateFileW (lpFileName="C:/Boot/hu-HU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\hu-hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.023] FindFirstFileW (in: lpFileName="C:/Boot/hu-HU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.024] CreateFileW (lpFileName="C:/Boot/hu-HU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\hu-hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.024] FindFirstFileW (in: lpFileName="C:/Boot/hu-HU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.024] GetFileAttributesW (lpFileName="C:/Boot/hu-HU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\hu-hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.024] CreateFileW (lpFileName="C:/Boot/hu-HU/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\hu-hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.024] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.024] CloseHandle (hObject=0xd0) returned 1 [0046.024] CreateFileW (lpFileName="C:/Boot/hu-HU/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.024] FindFirstFileW (in: lpFileName="C:/Boot/hu-HU/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.024] CreateFileW (lpFileName="C:/Boot/hu-HU/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.024] FindFirstFileW (in: lpFileName="C:/Boot/hu-HU/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.025] GetFileAttributesW (lpFileName="C:/Boot/hu-HU/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.025] CreateFileW (lpFileName="C:/Boot/hu-HU/bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.025] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.025] CloseHandle (hObject=0xd0) returned 1 [0046.025] CreateFileW (lpFileName="C:/Boot/it-IT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\it-it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.025] FindFirstFileW (in: lpFileName="C:/Boot/it-IT\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.025] CreateFileW (lpFileName="C:/Boot/it-IT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\it-it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.025] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.026] WriteFile (in: hFile=0xd0, lpBuffer=0x1248e600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x1248e600*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.027] CloseHandle (hObject=0xd0) returned 1 [0046.027] GetFileAttributesW (lpFileName="C:/Boot/it-IT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\it-it\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.027] SetFileAttributesW (lpFileName="C:/Boot/it-IT\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.027] CreateFileW (lpFileName="C:/Boot/it-IT" (normalized: "c:\\boot\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.027] FindFirstFileW (in: lpFileName="C:/Boot/it-IT\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea8ae00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea8ae00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0046.027] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea8ae00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea8ae00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.027] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xcea8ae00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xcea8ae00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea8d510, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.027] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.027] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.027] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.027] CreateFileW (lpFileName="C:/Boot/it-IT/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\it-it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.028] FindFirstFileW (in: lpFileName="C:/Boot/it-IT/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.028] CreateFileW (lpFileName="C:/Boot/it-IT/bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.028] FindFirstFileW (in: lpFileName="C:/Boot/it-IT/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.028] CreateFileW (lpFileName="C:/Boot/it-IT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\it-it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.028] FindFirstFileW (in: lpFileName="C:/Boot/it-IT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.028] CreateFileW (lpFileName="C:/Boot/it-IT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\it-it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.028] FindFirstFileW (in: lpFileName="C:/Boot/it-IT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.028] GetFileAttributesW (lpFileName="C:/Boot/it-IT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\it-it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.028] CreateFileW (lpFileName="C:/Boot/it-IT/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\it-it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.028] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.028] CloseHandle (hObject=0xd0) returned 1 [0046.029] CreateFileW (lpFileName="C:/Boot/it-IT/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.029] FindFirstFileW (in: lpFileName="C:/Boot/it-IT/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.029] CreateFileW (lpFileName="C:/Boot/it-IT/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.029] FindFirstFileW (in: lpFileName="C:/Boot/it-IT/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.029] GetFileAttributesW (lpFileName="C:/Boot/it-IT/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.029] CreateFileW (lpFileName="C:/Boot/it-IT/bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.029] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.030] CloseHandle (hObject=0xd0) returned 1 [0046.030] CreateFileW (lpFileName="C:/Boot/ja-JP\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ja-jp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.030] FindFirstFileW (in: lpFileName="C:/Boot/ja-JP\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.030] CreateFileW (lpFileName="C:/Boot/ja-JP\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ja-jp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.030] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.030] WriteFile (in: hFile=0xd0, lpBuffer=0x127d4000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x127d4000*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.031] CloseHandle (hObject=0xd0) returned 1 [0046.031] GetFileAttributesW (lpFileName="C:/Boot/ja-JP\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ja-jp\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.031] SetFileAttributesW (lpFileName="C:/Boot/ja-JP\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.032] CreateFileW (lpFileName="C:/Boot/ja-JP" (normalized: "c:\\boot\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.032] FindFirstFileW (in: lpFileName="C:/Boot/ja-JP\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea97150, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea97150, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0046.032] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcea97150, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea97150, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.032] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xcea97150, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xcea97150, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcea99860, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.032] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.032] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.032] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.032] CreateFileW (lpFileName="C:/Boot/ja-JP/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ja-jp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.032] FindFirstFileW (in: lpFileName="C:/Boot/ja-JP/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.032] CreateFileW (lpFileName="C:/Boot/ja-JP/bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.032] FindFirstFileW (in: lpFileName="C:/Boot/ja-JP/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.032] CreateFileW (lpFileName="C:/Boot/ja-JP/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ja-jp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.032] FindFirstFileW (in: lpFileName="C:/Boot/ja-JP/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.033] CreateFileW (lpFileName="C:/Boot/ja-JP/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ja-jp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.033] FindFirstFileW (in: lpFileName="C:/Boot/ja-JP/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.033] GetFileAttributesW (lpFileName="C:/Boot/ja-JP/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ja-jp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.033] CreateFileW (lpFileName="C:/Boot/ja-JP/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ja-jp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.033] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.033] CloseHandle (hObject=0xd0) returned 1 [0046.033] CreateFileW (lpFileName="C:/Boot/ja-JP/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.033] FindFirstFileW (in: lpFileName="C:/Boot/ja-JP/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.033] CreateFileW (lpFileName="C:/Boot/ja-JP/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.033] FindFirstFileW (in: lpFileName="C:/Boot/ja-JP/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.034] GetFileAttributesW (lpFileName="C:/Boot/ja-JP/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.034] CreateFileW (lpFileName="C:/Boot/ja-JP/bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.034] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.034] CloseHandle (hObject=0xd0) returned 1 [0046.034] CreateFileW (lpFileName="C:/Boot/ko-KR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ko-kr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.034] FindFirstFileW (in: lpFileName="C:/Boot/ko-KR\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.034] CreateFileW (lpFileName="C:/Boot/ko-KR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ko-kr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.034] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.035] WriteFile (in: hFile=0xd0, lpBuffer=0x127d7900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x127d7900*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.035] CloseHandle (hObject=0xd0) returned 1 [0046.036] GetFileAttributesW (lpFileName="C:/Boot/ko-KR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ko-kr\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.036] SetFileAttributesW (lpFileName="C:/Boot/ko-KR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.036] CreateFileW (lpFileName="C:/Boot/ko-KR" (normalized: "c:\\boot\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.036] FindFirstFileW (in: lpFileName="C:/Boot/ko-KR\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceaa0d90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceaa0d90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0046.036] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceaa0d90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceaa0d90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xceaa0d90, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceaa0d90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceaa34a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.036] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.036] CreateFileW (lpFileName="C:/Boot/ko-KR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ko-kr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.037] FindFirstFileW (in: lpFileName="C:/Boot/ko-KR/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.037] CreateFileW (lpFileName="C:/Boot/ko-KR/bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.037] FindFirstFileW (in: lpFileName="C:/Boot/ko-KR/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.037] CreateFileW (lpFileName="C:/Boot/ko-KR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ko-kr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.037] FindFirstFileW (in: lpFileName="C:/Boot/ko-KR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.037] CreateFileW (lpFileName="C:/Boot/ko-KR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ko-kr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.037] FindFirstFileW (in: lpFileName="C:/Boot/ko-KR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.037] GetFileAttributesW (lpFileName="C:/Boot/ko-KR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ko-kr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.037] CreateFileW (lpFileName="C:/Boot/ko-KR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ko-kr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.037] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.038] CloseHandle (hObject=0xd0) returned 1 [0046.038] CreateFileW (lpFileName="C:/Boot/ko-KR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.038] FindFirstFileW (in: lpFileName="C:/Boot/ko-KR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.038] CreateFileW (lpFileName="C:/Boot/ko-KR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.038] FindFirstFileW (in: lpFileName="C:/Boot/ko-KR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.038] GetFileAttributesW (lpFileName="C:/Boot/ko-KR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.038] CreateFileW (lpFileName="C:/Boot/ko-KR/bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.038] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.039] CloseHandle (hObject=0xd0) returned 1 [0046.039] CreateFileW (lpFileName="C:/Boot/memtest.exe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\memtest.exe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.039] FindFirstFileW (in: lpFileName="C:/Boot/memtest.exe\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.039] CreateFileW (lpFileName="C:/Boot/memtest.exe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\memtest.exe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.039] FindFirstFileW (in: lpFileName="C:/Boot/memtest.exe\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf0 | out: lpFindFileData=0x1242baf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.039] GetFileAttributesW (lpFileName="C:/Boot/memtest.exe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\memtest.exe\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.039] CreateFileW (lpFileName="C:/Boot/memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.039] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bcf4 | out: lpMode=0x1242bcf4) returned 0 [0046.039] CloseHandle (hObject=0xd0) returned 1 [0046.040] CreateFileW (lpFileName="C:/Boot/nb-NO\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nb-no\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.040] FindFirstFileW (in: lpFileName="C:/Boot/nb-NO\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.040] CreateFileW (lpFileName="C:/Boot/nb-NO\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nb-no\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.040] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.040] WriteFile (in: hFile=0xd0, lpBuffer=0x12454600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x12454600*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.041] CloseHandle (hObject=0xd0) returned 1 [0046.041] GetFileAttributesW (lpFileName="C:/Boot/nb-NO\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nb-no\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.041] SetFileAttributesW (lpFileName="C:/Boot/nb-NO\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.042] CreateFileW (lpFileName="C:/Boot/nb-NO" (normalized: "c:\\boot\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.042] FindFirstFileW (in: lpFileName="C:/Boot/nb-NO\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceaad0e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceaad0e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0046.042] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceaad0e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceaad0e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.042] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xceaad0e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceaad0e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceab1f00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.042] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.042] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.042] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.042] CreateFileW (lpFileName="C:/Boot/nb-NO/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nb-no\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.042] FindFirstFileW (in: lpFileName="C:/Boot/nb-NO/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.042] CreateFileW (lpFileName="C:/Boot/nb-NO/bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.042] FindFirstFileW (in: lpFileName="C:/Boot/nb-NO/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.042] CreateFileW (lpFileName="C:/Boot/nb-NO/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nb-no\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.042] FindFirstFileW (in: lpFileName="C:/Boot/nb-NO/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.042] CreateFileW (lpFileName="C:/Boot/nb-NO/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nb-no\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.043] FindFirstFileW (in: lpFileName="C:/Boot/nb-NO/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.043] GetFileAttributesW (lpFileName="C:/Boot/nb-NO/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nb-no\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.043] CreateFileW (lpFileName="C:/Boot/nb-NO/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nb-no\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.043] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.043] CloseHandle (hObject=0xd0) returned 1 [0046.043] CreateFileW (lpFileName="C:/Boot/nb-NO/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.043] FindFirstFileW (in: lpFileName="C:/Boot/nb-NO/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.043] CreateFileW (lpFileName="C:/Boot/nb-NO/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.043] FindFirstFileW (in: lpFileName="C:/Boot/nb-NO/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.043] GetFileAttributesW (lpFileName="C:/Boot/nb-NO/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.043] CreateFileW (lpFileName="C:/Boot/nb-NO/bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.044] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.044] CloseHandle (hObject=0xd0) returned 1 [0046.044] CreateFileW (lpFileName="C:/Boot/nl-NL\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nl-nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.044] FindFirstFileW (in: lpFileName="C:/Boot/nl-NL\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.044] CreateFileW (lpFileName="C:/Boot/nl-NL\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nl-nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.044] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.044] WriteFile (in: hFile=0xd0, lpBuffer=0x1245c000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x1245c000*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.045] CloseHandle (hObject=0xd0) returned 1 [0046.045] GetFileAttributesW (lpFileName="C:/Boot/nl-NL\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nl-nl\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.046] SetFileAttributesW (lpFileName="C:/Boot/nl-NL\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.046] CreateFileW (lpFileName="C:/Boot/nl-NL" (normalized: "c:\\boot\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.046] FindFirstFileW (in: lpFileName="C:/Boot/nl-NL\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceab9430, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceab9430, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0046.046] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceab9430, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceab9430, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.046] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xceab9430, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceab9430, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceabbb40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.046] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.046] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.046] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.046] CreateFileW (lpFileName="C:/Boot/nl-NL/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nl-nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.046] FindFirstFileW (in: lpFileName="C:/Boot/nl-NL/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.046] CreateFileW (lpFileName="C:/Boot/nl-NL/bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.046] FindFirstFileW (in: lpFileName="C:/Boot/nl-NL/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.047] CreateFileW (lpFileName="C:/Boot/nl-NL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nl-nl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.047] FindFirstFileW (in: lpFileName="C:/Boot/nl-NL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.047] CreateFileW (lpFileName="C:/Boot/nl-NL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nl-nl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.047] FindFirstFileW (in: lpFileName="C:/Boot/nl-NL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.047] GetFileAttributesW (lpFileName="C:/Boot/nl-NL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nl-nl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.047] CreateFileW (lpFileName="C:/Boot/nl-NL/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nl-nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.047] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.047] CloseHandle (hObject=0xd0) returned 1 [0046.047] CreateFileW (lpFileName="C:/Boot/nl-NL/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.047] FindFirstFileW (in: lpFileName="C:/Boot/nl-NL/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.048] CreateFileW (lpFileName="C:/Boot/nl-NL/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.048] FindFirstFileW (in: lpFileName="C:/Boot/nl-NL/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.048] GetFileAttributesW (lpFileName="C:/Boot/nl-NL/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.048] CreateFileW (lpFileName="C:/Boot/nl-NL/bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.048] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.048] CloseHandle (hObject=0xd0) returned 1 [0046.048] CreateFileW (lpFileName="C:/Boot/pl-PL\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pl-pl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.048] FindFirstFileW (in: lpFileName="C:/Boot/pl-PL\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.048] CreateFileW (lpFileName="C:/Boot/pl-PL\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pl-pl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.049] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.049] WriteFile (in: hFile=0xd0, lpBuffer=0x1245f900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x1245f900*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.050] CloseHandle (hObject=0xd0) returned 1 [0046.050] GetFileAttributesW (lpFileName="C:/Boot/pl-PL\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pl-pl\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.050] SetFileAttributesW (lpFileName="C:/Boot/pl-PL\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.050] CreateFileW (lpFileName="C:/Boot/pl-PL" (normalized: "c:\\boot\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.050] FindFirstFileW (in: lpFileName="C:/Boot/pl-PL\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceac3070, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceac3070, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0046.050] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceac3070, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceac3070, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.050] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xceac3070, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceac3070, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceac5780, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.050] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.050] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.050] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.051] CreateFileW (lpFileName="C:/Boot/pl-PL/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pl-pl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.051] FindFirstFileW (in: lpFileName="C:/Boot/pl-PL/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.051] CreateFileW (lpFileName="C:/Boot/pl-PL/bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.051] FindFirstFileW (in: lpFileName="C:/Boot/pl-PL/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.051] CreateFileW (lpFileName="C:/Boot/pl-PL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pl-pl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.051] FindFirstFileW (in: lpFileName="C:/Boot/pl-PL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.051] CreateFileW (lpFileName="C:/Boot/pl-PL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pl-pl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.051] FindFirstFileW (in: lpFileName="C:/Boot/pl-PL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.051] GetFileAttributesW (lpFileName="C:/Boot/pl-PL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pl-pl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.051] CreateFileW (lpFileName="C:/Boot/pl-PL/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pl-pl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.051] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.052] CloseHandle (hObject=0xd0) returned 1 [0046.052] CreateFileW (lpFileName="C:/Boot/pl-PL/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.052] FindFirstFileW (in: lpFileName="C:/Boot/pl-PL/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.052] CreateFileW (lpFileName="C:/Boot/pl-PL/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.052] FindFirstFileW (in: lpFileName="C:/Boot/pl-PL/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.052] GetFileAttributesW (lpFileName="C:/Boot/pl-PL/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.052] CreateFileW (lpFileName="C:/Boot/pl-PL/bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.052] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.052] CloseHandle (hObject=0xd0) returned 1 [0046.052] CreateFileW (lpFileName="C:/Boot/pt-BR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-br\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.053] FindFirstFileW (in: lpFileName="C:/Boot/pt-BR\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.053] CreateFileW (lpFileName="C:/Boot/pt-BR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-br\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.053] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.053] WriteFile (in: hFile=0xd0, lpBuffer=0x127e9300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x127e9300*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.054] CloseHandle (hObject=0xd0) returned 1 [0046.054] GetFileAttributesW (lpFileName="C:/Boot/pt-BR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-br\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.054] SetFileAttributesW (lpFileName="C:/Boot/pt-BR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.055] CreateFileW (lpFileName="C:/Boot/pt-BR" (normalized: "c:\\boot\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.055] FindFirstFileW (in: lpFileName="C:/Boot/pt-BR\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceacccb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceacccb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0046.055] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceacccb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceacccb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.055] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xceacccb0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceacccb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcead1ad0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.055] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.055] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.055] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.055] CreateFileW (lpFileName="C:/Boot/pt-BR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-br\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.055] FindFirstFileW (in: lpFileName="C:/Boot/pt-BR/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.055] CreateFileW (lpFileName="C:/Boot/pt-BR/bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.055] FindFirstFileW (in: lpFileName="C:/Boot/pt-BR/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.055] CreateFileW (lpFileName="C:/Boot/pt-BR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-br\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.055] FindFirstFileW (in: lpFileName="C:/Boot/pt-BR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.055] CreateFileW (lpFileName="C:/Boot/pt-BR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-br\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.056] FindFirstFileW (in: lpFileName="C:/Boot/pt-BR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.056] GetFileAttributesW (lpFileName="C:/Boot/pt-BR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-br\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.056] CreateFileW (lpFileName="C:/Boot/pt-BR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-br\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.056] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.056] CloseHandle (hObject=0xd0) returned 1 [0046.056] CreateFileW (lpFileName="C:/Boot/pt-BR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.056] FindFirstFileW (in: lpFileName="C:/Boot/pt-BR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.056] CreateFileW (lpFileName="C:/Boot/pt-BR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.056] FindFirstFileW (in: lpFileName="C:/Boot/pt-BR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.056] GetFileAttributesW (lpFileName="C:/Boot/pt-BR/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.056] CreateFileW (lpFileName="C:/Boot/pt-BR/bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.057] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.057] CloseHandle (hObject=0xd0) returned 1 [0046.057] CreateFileW (lpFileName="C:/Boot/pt-PT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-pt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.057] FindFirstFileW (in: lpFileName="C:/Boot/pt-PT\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.057] CreateFileW (lpFileName="C:/Boot/pt-PT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-pt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.057] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.058] WriteFile (in: hFile=0xd0, lpBuffer=0x127ecc00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x127ecc00*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.058] CloseHandle (hObject=0xd0) returned 1 [0046.059] GetFileAttributesW (lpFileName="C:/Boot/pt-PT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-pt\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.059] SetFileAttributesW (lpFileName="C:/Boot/pt-PT\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.059] CreateFileW (lpFileName="C:/Boot/pt-PT" (normalized: "c:\\boot\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.059] FindFirstFileW (in: lpFileName="C:/Boot/pt-PT\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcead9000, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcead9000, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0046.059] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xcead9000, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcead9000, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.059] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xcead9000, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xcead9000, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceadb710, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.059] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.059] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.059] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.059] CreateFileW (lpFileName="C:/Boot/pt-PT/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-pt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.059] FindFirstFileW (in: lpFileName="C:/Boot/pt-PT/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.060] CreateFileW (lpFileName="C:/Boot/pt-PT/bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.060] FindFirstFileW (in: lpFileName="C:/Boot/pt-PT/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.060] CreateFileW (lpFileName="C:/Boot/pt-PT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-pt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.060] FindFirstFileW (in: lpFileName="C:/Boot/pt-PT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.060] VirtualAlloc (lpAddress=0x127a8000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x127a8000 [0046.060] CreateFileW (lpFileName="C:/Boot/pt-PT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-pt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.061] FindFirstFileW (in: lpFileName="C:/Boot/pt-PT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.061] GetFileAttributesW (lpFileName="C:/Boot/pt-PT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-pt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.061] CreateFileW (lpFileName="C:/Boot/pt-PT/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-pt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.061] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.061] CloseHandle (hObject=0xd0) returned 1 [0046.061] CreateFileW (lpFileName="C:/Boot/pt-PT/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.061] FindFirstFileW (in: lpFileName="C:/Boot/pt-PT/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.061] CreateFileW (lpFileName="C:/Boot/pt-PT/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.061] FindFirstFileW (in: lpFileName="C:/Boot/pt-PT/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.061] GetFileAttributesW (lpFileName="C:/Boot/pt-PT/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.061] CreateFileW (lpFileName="C:/Boot/pt-PT/bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.062] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.062] CloseHandle (hObject=0xd0) returned 1 [0046.062] CreateFileW (lpFileName="C:/Boot/ru-RU\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ru-ru\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.062] FindFirstFileW (in: lpFileName="C:/Boot/ru-RU\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.062] CreateFileW (lpFileName="C:/Boot/ru-RU\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ru-ru\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.062] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.062] WriteFile (in: hFile=0xd0, lpBuffer=0x127aa600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x127aa600*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.063] CloseHandle (hObject=0xd0) returned 1 [0046.064] GetFileAttributesW (lpFileName="C:/Boot/ru-RU\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ru-ru\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.064] SetFileAttributesW (lpFileName="C:/Boot/ru-RU\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.064] CreateFileW (lpFileName="C:/Boot/ru-RU" (normalized: "c:\\boot\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.064] FindFirstFileW (in: lpFileName="C:/Boot/ru-RU\\*", lpFindFileData=0x1242ba2c | out: lpFindFileData=0x1242ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceae5350, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceae5350, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0046.064] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceae5350, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceae5350, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.064] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xceae5350, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceae5350, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceae7a60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.064] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.064] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.064] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.064] CreateFileW (lpFileName="C:/Boot/ru-RU/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ru-ru\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.064] FindFirstFileW (in: lpFileName="C:/Boot/ru-RU/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.064] CreateFileW (lpFileName="C:/Boot/ru-RU/bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.064] FindFirstFileW (in: lpFileName="C:/Boot/ru-RU/bootmgr.exe.mui\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.065] CreateFileW (lpFileName="C:/Boot/ru-RU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ru-ru\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.065] FindFirstFileW (in: lpFileName="C:/Boot/ru-RU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.065] CreateFileW (lpFileName="C:/Boot/ru-RU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ru-ru\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.065] FindFirstFileW (in: lpFileName="C:/Boot/ru-RU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.065] GetFileAttributesW (lpFileName="C:/Boot/ru-RU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ru-ru\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.065] CreateFileW (lpFileName="C:/Boot/ru-RU/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ru-ru\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.065] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.065] CloseHandle (hObject=0xd0) returned 1 [0046.065] CreateFileW (lpFileName="C:/Boot/ru-RU/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.065] FindFirstFileW (in: lpFileName="C:/Boot/ru-RU/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba50 | out: lpFindFileData=0x1242ba50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.066] CreateFileW (lpFileName="C:/Boot/ru-RU/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.066] VirtualAlloc (lpAddress=0x127ae000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x127ae000 [0046.066] FindFirstFileW (in: lpFileName="C:/Boot/ru-RU/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242ba48 | out: lpFindFileData=0x1242ba48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.066] GetFileAttributesW (lpFileName="C:/Boot/ru-RU/bootmgr.exe.mui\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0046.066] CreateFileW (lpFileName="C:/Boot/ru-RU/bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0046.066] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bc4c | out: lpMode=0x1242bc4c) returned 0 [0046.066] CloseHandle (hObject=0xd0) returned 1 [0046.067] CreateFileW (lpFileName="C:/Boot/sv-SE\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\sv-se\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.067] FindFirstFileW (in: lpFileName="C:/Boot/sv-SE\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242baf8 | out: lpFindFileData=0x1242baf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0046.067] VirtualAlloc (lpAddress=0x127b0000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x127b0000 [0046.071] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242bdb8 | out: lpMode=0x1242bdb8) returned 0 [0046.071] WriteFile (in: hFile=0xd0, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242bdbc, lpOverlapped=0x0 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x1242bdbc*=0x1033, lpOverlapped=0x0) returned 1 [0046.072] CloseHandle (hObject=0xd0) returned 1 [0046.072] GetFileAttributesW (lpFileName="C:/Boot/sv-SE\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\boot\\sv-se\\@_read_to_recover_files_@.txt")) returned 0x20 [0046.072] SetFileAttributesW (lpFileName="C:/Boot/sv-SE\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.073] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceaf64c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceaf64c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.073] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xceaf64c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceaf64c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceafd9f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.073] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.073] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.073] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.076] SetFileAttributesW (lpFileName="C:/Boot/tr-TR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.076] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceb02810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb02810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.076] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xceb02810, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceb02810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb07630, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.076] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.076] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.076] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.079] SetFileAttributesW (lpFileName="C:/Boot/zh-CN\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.079] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceb09d40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb09d40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.079] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xceb09d40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceb09d40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb0eb60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.079] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.079] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.079] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.081] SetFileAttributesW (lpFileName="C:/Boot/zh-HK\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceb11270, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb11270, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xceb11270, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceb11270, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb13980, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.082] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.084] SetFileAttributesW (lpFileName="C:/Boot/zh-TW\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xceb16090, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb16090, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xceb16090, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceb16090, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb187a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0046.084] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242baa8 | out: lpFindFileData=0x1242baa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.084] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.087] SetFileAttributesW (lpFileName="C:/Config.Msi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.088] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fb50 | out: lpFindFileData=0x1242fb50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceb1d5c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb1d5c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.088] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fb50 | out: lpFindFileData=0x1242fb50*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xceb1d5c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceb1d5c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb1fcd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.088] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fb50 | out: lpFindFileData=0x1242fb50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.088] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.090] SetFileAttributesW (lpFileName="C:/Documents and Settings\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0046.092] SetFileAttributesW (lpFileName="C:/MSOCache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0046.092] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fb50 | out: lpFindFileData=0x1242fb50*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xceb29910, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb29910, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fb50 | out: lpFindFileData=0x1242fb50*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xceb29910, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceb29910, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb2e730, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fb50 | out: lpFindFileData=0x1242fb50*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fb50 | out: lpFindFileData=0x1242fb50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.093] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.098] SetFileAttributesW (lpFileName="C:/MSOCache/All Users\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0046.099] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xceb3aa80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb3aa80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xceb3aa80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceb3aa80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb3d190, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242faa8 | out: lpFindFileData=0x1242faa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.100] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.142] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0046.142] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xceba3a30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceba3a30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.142] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xceba1320, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceba1320, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceba6140, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0046.142] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0046.142] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0046.142] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0046.142] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0046.142] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.142] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0046.157] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124425e0 | out: pbBuffer=0x124425e0) returned 1 [0046.157] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12707602 | out: pbBuffer=0x12707602) returned 1 [0046.157] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1270767b | out: pbBuffer=0x1270767b) returned 1 [0046.159] SetEvent (hEvent=0xa0) returned 1 [0046.159] ReadFile (in: hFile=0xbc, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x1242fb64*=0x800000, lpOverlapped=0x0) returned 1 [0046.285] VirtualAlloc (lpAddress=0x13400000, dwSize=0x800000, flAllocationType=0x1000, flProtect=0x4) returned 0x13400000 [0046.322] VirtualAlloc (lpAddress=0x2193000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x2193000 [0046.324] VirtualAlloc (lpAddress=0x21d3000, dwSize=0x41000, flAllocationType=0x1000, flProtect=0x4) returned 0x21d3000 [0046.324] VirtualFree (lpAddress=0x12780000, dwSize=0x42000, dwFreeType=0x4000) returned 1 [0046.326] VirtualFree (lpAddress=0x127cc000, dwSize=0x36000, dwFreeType=0x4000) returned 1 [0046.327] VirtualFree (lpAddress=0x1280a000, dwSize=0x26000, dwFreeType=0x4000) returned 1 [0046.328] VirtualFree (lpAddress=0x1280a000, dwSize=0x3f6000, dwFreeType=0x4000) returned 1 [0046.328] VirtualFree (lpAddress=0x124a0000, dwSize=0x1a000, dwFreeType=0x4000) returned 1 [0046.328] VirtualFree (lpAddress=0x12452000, dwSize=0x10000, dwFreeType=0x4000) returned 1 [0046.329] VirtualFree (lpAddress=0x1248c000, dwSize=0xc000, dwFreeType=0x4000) returned 1 [0046.329] VirtualFree (lpAddress=0x12772000, dwSize=0xa000, dwFreeType=0x4000) returned 1 [0046.330] VirtualFree (lpAddress=0x124d0000, dwSize=0xa000, dwFreeType=0x4000) returned 1 [0046.330] VirtualFree (lpAddress=0x124c0000, dwSize=0x6000, dwFreeType=0x4000) returned 1 [0046.330] VirtualFree (lpAddress=0x1276c000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0046.330] VirtualFree (lpAddress=0x1270c000, dwSize=0x64000, dwFreeType=0x4000) returned 1 [0046.331] VirtualFree (lpAddress=0x12708000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0046.331] VirtualFree (lpAddress=0x12708000, dwSize=0x68000, dwFreeType=0x4000) returned 1 [0046.331] VirtualFree (lpAddress=0x1249a000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0046.331] VirtualFree (lpAddress=0x1244a000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0046.331] VirtualFree (lpAddress=0x127c8000, dwSize=0x2000, dwFreeType=0x4000) returned 1 [0046.332] VirtualFree (lpAddress=0x124de000, dwSize=0x2000, dwFreeType=0x4000) returned 1 [0046.372] VirtualFree (lpAddress=0x124c8000, dwSize=0x2000, dwFreeType=0x4000) returned 1 [0046.372] VirtualFree (lpAddress=0x124bc000, dwSize=0x2000, dwFreeType=0x4000) returned 1 [0046.372] VirtualFree (lpAddress=0x1247c000, dwSize=0x2000, dwFreeType=0x4000) returned 1 [0046.373] VirtualFree (lpAddress=0x12466000, dwSize=0x2000, dwFreeType=0x4000) returned 1 [0046.379] SetEvent (hEvent=0xb8) returned 1 [0046.379] VirtualAlloc (lpAddress=0x124d0000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x124d0000 [0046.380] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0046.380] SetEvent (hEvent=0xb8) returned 1 [0046.380] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0046.382] VirtualAlloc (lpAddress=0x13c00000, dwSize=0x800000, flAllocationType=0x1000, flProtect=0x4) returned 0x13c00000 [0046.400] VirtualAlloc (lpAddress=0x2214000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x2214000 [0046.400] VirtualAlloc (lpAddress=0x2254000, dwSize=0x41000, flAllocationType=0x1000, flProtect=0x4) returned 0x2254000 [0046.407] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0046.408] SetEvent (hEvent=0xac) returned 1 [0046.408] SetEvent (hEvent=0xb8) returned 1 [0046.598] GetFileType (hFile=0xbc) returned 0x1 [0046.598] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0046.598] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0046.697] GetFileType (hFile=0xbc) returned 0x1 [0046.697] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0046.697] GetFileType (hFile=0xbc) returned 0x1 [0046.697] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0046.697] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0046.798] GetFileType (hFile=0xbc) returned 0x1 [0046.798] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0046.798] GetFileType (hFile=0xbc) returned 0x1 [0046.799] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0046.799] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0046.894] GetFileType (hFile=0xbc) returned 0x1 [0046.894] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0046.894] GetFileType (hFile=0xbc) returned 0x1 [0046.894] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0046.894] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0046.988] GetFileType (hFile=0xbc) returned 0x1 [0046.988] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0046.988] GetFileType (hFile=0xbc) returned 0x1 [0046.988] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0046.988] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0047.081] GetFileType (hFile=0xbc) returned 0x1 [0047.081] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0047.081] GetFileType (hFile=0xbc) returned 0x1 [0047.081] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0047.081] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0047.173] GetFileType (hFile=0xbc) returned 0x1 [0047.173] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0047.173] GetFileType (hFile=0xbc) returned 0x1 [0047.173] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0047.173] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0047.265] GetFileType (hFile=0xbc) returned 0x1 [0047.266] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0047.266] GetFileType (hFile=0xbc) returned 0x1 [0047.266] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0047.266] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0047.363] GetFileType (hFile=0xbc) returned 0x1 [0047.363] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0047.363] ReadFile (in: hFile=0xbc, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x1242fb64*=0x800000, lpOverlapped=0x0) returned 1 [0047.435] VirtualAlloc (lpAddress=0x14400000, dwSize=0x800000, flAllocationType=0x1000, flProtect=0x4) returned 0x14400000 [0047.453] VirtualAlloc (lpAddress=0x2295000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x2295000 [0047.453] VirtualAlloc (lpAddress=0x22d5000, dwSize=0x41000, flAllocationType=0x1000, flProtect=0x4) returned 0x22d5000 [0047.454] VirtualFree (lpAddress=0x124d0000, dwSize=0x8000, dwFreeType=0x4000) returned 1 [0047.454] VirtualFree (lpAddress=0x124d0000, dwSize=0xa000, dwFreeType=0x4000) returned 1 [0047.461] SetEvent (hEvent=0xa8) returned 1 [0047.461] VirtualAlloc (lpAddress=0x124d0000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x124d0000 [0047.462] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0047.462] SetEvent (hEvent=0xa8) returned 1 [0047.462] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0047.582] GetFileType (hFile=0xbc) returned 0x1 [0047.582] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0047.582] WriteFile (in: hFile=0xbc, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0047.681] GetFileType (hFile=0xbc) returned 0x1 [0047.681] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0047.681] ReadFile (in: hFile=0xbc, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x1242fb64*=0x2fcbb, lpOverlapped=0x0) returned 1 [0047.690] VirtualAlloc (lpAddress=0x127cc000, dwSize=0x30000, flAllocationType=0x1000, flProtect=0x4) returned 0x127cc000 [0047.693] VirtualAlloc (lpAddress=0x12780000, dwSize=0x30000, flAllocationType=0x1000, flProtect=0x4) returned 0x12780000 [0047.697] GetFileType (hFile=0xbc) returned 0x1 [0047.697] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0047.697] WriteFile (in: hFile=0xbc, lpBuffer=0x127cc000*, nNumberOfBytesToWrite=0x2fcbb, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x127cc000*, lpNumberOfBytesWritten=0x1242fb48*=0x2fcbb, lpOverlapped=0x1242fb54) returned 1 [0047.697] GetFileType (hFile=0xbc) returned 0x1 [0047.697] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x102fcbb, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0047.698] ReadFile (in: hFile=0xbc, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x1242fb64*=0x0, lpOverlapped=0x0) returned 1 [0047.698] CloseHandle (hObject=0xbc) returned 1 [0047.698] VirtualAlloc (lpAddress=0x12466000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12466000 [0047.698] VirtualAlloc (lpAddress=0x1247c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1247c000 [0047.698] VirtualAlloc (lpAddress=0x124bc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x124bc000 [0047.699] VirtualAlloc (lpAddress=0x124c8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x124c8000 [0047.699] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0047.699] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x1242fb54 | out: lpMode=0x1242fb54) returned 0 [0047.699] WriteFile (in: hFile=0xbc, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x1242fb58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x1242fb58*=0x108, lpOverlapped=0x0) returned 1 [0047.699] CloseHandle (hObject=0xbc) returned 1 [0048.015] SetEvent (hEvent=0xac) returned 1 [0048.015] VirtualAlloc (lpAddress=0x124d8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x124d8000 [0048.015] VirtualAlloc (lpAddress=0x124de000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x124de000 [0048.016] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124de000*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x1242f81c, lpReserved=0x0 | out: lpBuffer=0x124de000*, lpNumberOfCharsWritten=0x1242f81c*=0x68) returned 1 [0048.032] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x1242fa58 | out: lpFileInformation=0x1242fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00)) returned 1 [0048.032] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1242fa58 | out: lpFileInformation=0x1242fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1 [0048.032] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1242fa58 | out: lpFileInformation=0x1242fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0048.032] VirtualAlloc (lpAddress=0x127c8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x127c8000 [0048.032] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0048.032] VirtualAlloc (lpAddress=0x1244a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1244a000 [0048.032] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242f9a8 | out: lpFindFileData=0x1242f9a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0048.033] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0048.033] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242f9a0 | out: lpFindFileData=0x1242f9a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0048.033] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0048.033] VirtualAlloc (lpAddress=0x1244c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1244c000 [0048.033] VirtualAlloc (lpAddress=0x1249a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1249a000 [0048.033] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0016-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0048.033] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x1242fba4 | out: lpMode=0x1242fba4) returned 0 [0048.034] CloseHandle (hObject=0xbc) returned 1 [0048.034] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0048.034] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242fa50 | out: lpFindFileData=0x1242fa50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0048.034] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0048.035] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x1242fd10 | out: lpMode=0x1242fd10) returned 0 [0048.035] WriteFile (in: hFile=0xbc, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242fd14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242fd14*=0x1033, lpOverlapped=0x0) returned 1 [0048.036] CloseHandle (hObject=0xbc) returned 1 [0048.036] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0048.036] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0048.036] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0048.036] VirtualAlloc (lpAddress=0x1249c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1249c000 [0048.037] VirtualAlloc (lpAddress=0x124c0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x124c0000 [0048.037] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1242f984 | out: lpFindFileData=0x1242f984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xcfd09400, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcfd09400, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0048.037] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xcfd09400, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcfd09400, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.037] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xcfd09400, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xcfd09400, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcfd09400, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0048.037] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0048.037] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0048.037] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0048.037] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0048.037] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0048.037] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0048.037] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0048.037] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242f9a8 | out: lpFindFileData=0x1242f9a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0048.038] VirtualAlloc (lpAddress=0x124c2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x124c2000 [0048.038] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0048.038] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x1242fc70 | out: lpMode=0x1242fc70) returned 0 [0048.038] ReadFile (in: hFile=0xbc, lpBuffer=0x12706600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242fc80, lpOverlapped=0x0 | out: lpBuffer=0x12706600*, lpNumberOfBytesRead=0x1242fc80*=0x100, lpOverlapped=0x0) returned 1 [0048.042] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0048.042] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242fc70 | out: lpMode=0x1242fc70) returned 0 [0048.042] ReadFile (in: hFile=0xd0, lpBuffer=0x12706700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242fc80, lpOverlapped=0x0 | out: lpBuffer=0x12706700*, lpNumberOfBytesRead=0x1242fc80*=0x100, lpOverlapped=0x0) returned 1 [0048.044] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0048.044] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x1242fc70 | out: lpMode=0x1242fc70) returned 0 [0048.045] ReadFile (in: hFile=0xc8, lpBuffer=0x12706800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242fc80, lpOverlapped=0x0 | out: lpBuffer=0x12706800*, lpNumberOfBytesRead=0x1242fc80*=0x100, lpOverlapped=0x0) returned 1 [0048.047] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0048.047] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x1242fc70 | out: lpMode=0x1242fc70) returned 0 [0048.047] ReadFile (in: hFile=0x98, lpBuffer=0x12706900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242fc80, lpOverlapped=0x0 | out: lpBuffer=0x12706900*, lpNumberOfBytesRead=0x1242fc80*=0x100, lpOverlapped=0x0) returned 1 [0048.057] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x1242fa58 | out: lpFileInformation=0x1242fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1 [0048.057] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1242fa58 | out: lpFileInformation=0x1242fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0048.057] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x1242fa58 | out: lpFileInformation=0x1242fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290)) returned 1 [0048.057] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0048.057] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242fb54 | out: lpMode=0x1242fb54) returned 0 [0048.058] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442280 | out: pbBuffer=0x12442280) returned 1 [0048.058] VirtualAlloc (lpAddress=0x124c4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x124c4000 [0048.059] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12706a02 | out: pbBuffer=0x12706a02) returned 1 [0048.059] VirtualAlloc (lpAddress=0x127fc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x127fc000 [0048.059] VirtualAlloc (lpAddress=0x127fe000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x127fe000 [0048.061] SetEvent (hEvent=0xa0) returned 1 [0048.061] ReadFile (in: hFile=0xc0, lpBuffer=0x13c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x13c00000*, lpNumberOfBytesRead=0x1242fb64*=0x800000, lpOverlapped=0x0) returned 1 [0048.210] SetEvent (hEvent=0xac) returned 1 [0048.211] SetEvent (hEvent=0xb8) returned 1 [0048.211] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0048.229] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0048.229] SetEvent (hEvent=0xb8) returned 1 [0048.229] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0048.317] GetFileType (hFile=0xc0) returned 0x1 [0048.317] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0048.317] WriteFile (in: hFile=0xc0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0048.413] GetFileType (hFile=0xc0) returned 0x1 [0048.413] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0048.413] GetFileType (hFile=0xc0) returned 0x1 [0048.413] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0048.414] WriteFile (in: hFile=0xc0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0048.507] GetFileType (hFile=0xc0) returned 0x1 [0048.507] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0048.507] GetFileType (hFile=0xc0) returned 0x1 [0048.507] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0048.507] WriteFile (in: hFile=0xc0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0048.644] GetFileType (hFile=0xc0) returned 0x1 [0048.645] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0048.645] GetFileType (hFile=0xc0) returned 0x1 [0048.645] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0048.645] WriteFile (in: hFile=0xc0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0048.756] GetFileType (hFile=0xc0) returned 0x1 [0048.756] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0048.756] GetFileType (hFile=0xc0) returned 0x1 [0048.756] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0048.756] WriteFile (in: hFile=0xc0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0048.850] GetFileType (hFile=0xc0) returned 0x1 [0048.850] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0048.850] GetFileType (hFile=0xc0) returned 0x1 [0048.850] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0048.850] WriteFile (in: hFile=0xc0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0048.952] GetFileType (hFile=0xc0) returned 0x1 [0048.952] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0048.952] GetFileType (hFile=0xc0) returned 0x1 [0048.952] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0048.952] WriteFile (in: hFile=0xc0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0049.045] GetFileType (hFile=0xc0) returned 0x1 [0049.045] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0049.045] GetFileType (hFile=0xc0) returned 0x1 [0049.045] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0049.046] WriteFile (in: hFile=0xc0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0049.139] GetFileType (hFile=0xc0) returned 0x1 [0049.139] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0049.139] ReadFile (in: hFile=0xc0, lpBuffer=0x13c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x13c00000*, lpNumberOfBytesRead=0x1242fb64*=0x800000, lpOverlapped=0x0) returned 1 [0049.333] SetEvent (hEvent=0xa8) returned 1 [0049.334] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0049.338] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0049.339] SetEvent (hEvent=0xa8) returned 1 [0049.339] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0049.457] GetFileType (hFile=0xc0) returned 0x1 [0049.457] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0049.457] WriteFile (in: hFile=0xc0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0049.552] GetFileType (hFile=0xc0) returned 0x1 [0049.552] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0049.552] ReadFile (in: hFile=0xc0, lpBuffer=0x13c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x13c00000*, lpNumberOfBytesRead=0x1242fb64*=0x800000, lpOverlapped=0x0) returned 1 [0049.788] SetEvent (hEvent=0xb8) returned 1 [0049.788] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0049.826] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0049.827] SetEvent (hEvent=0xb8) returned 1 [0049.827] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0049.895] GetFileType (hFile=0xc0) returned 0x1 [0049.895] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0049.895] WriteFile (in: hFile=0xc0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0049.991] GetFileType (hFile=0xc0) returned 0x1 [0049.991] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x1800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0049.991] ReadFile (in: hFile=0xc0, lpBuffer=0x13c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x13c00000*, lpNumberOfBytesRead=0x1242fb64*=0x800000, lpOverlapped=0x0) returned 1 [0050.188] SetEvent (hEvent=0xa8) returned 1 [0050.188] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0050.189] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0050.190] SetEvent (hEvent=0xa8) returned 1 [0050.190] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0050.255] GetFileType (hFile=0xc0) returned 0x1 [0050.255] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0050.255] WriteFile (in: hFile=0xc0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0050.360] GetFileType (hFile=0xc0) returned 0x1 [0050.360] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x2000000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0050.360] ReadFile (in: hFile=0xc0, lpBuffer=0x13c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x13c00000*, lpNumberOfBytesRead=0x1242fb64*=0x800000, lpOverlapped=0x0) returned 1 [0050.512] SetEvent (hEvent=0xb8) returned 1 [0050.512] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0050.522] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0050.522] SetEvent (hEvent=0xb8) returned 1 [0050.522] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0050.584] GetFileType (hFile=0xc0) returned 0x1 [0050.584] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0050.584] WriteFile (in: hFile=0xc0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0050.687] GetFileType (hFile=0xc0) returned 0x1 [0050.687] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x2800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0050.687] ReadFile (in: hFile=0xc0, lpBuffer=0x13c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x13c00000*, lpNumberOfBytesRead=0x1242fb64*=0x800000, lpOverlapped=0x0) returned 1 [0050.830] SetEvent (hEvent=0xa8) returned 1 [0050.830] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0050.837] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0050.837] SetEvent (hEvent=0xa8) returned 1 [0050.837] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0050.850] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0050.897] GetFileType (hFile=0xc0) returned 0x1 [0050.898] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0050.898] WriteFile (in: hFile=0xc0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0051.002] GetFileType (hFile=0xc0) returned 0x1 [0051.002] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x3000000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0051.002] ReadFile (in: hFile=0xc0, lpBuffer=0x13c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x13c00000*, lpNumberOfBytesRead=0x1242fb64*=0x800000, lpOverlapped=0x0) returned 1 [0051.152] SetEvent (hEvent=0xb8) returned 1 [0051.153] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0051.163] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0051.163] SetEvent (hEvent=0xb8) returned 1 [0051.163] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0051.212] GetFileType (hFile=0xc0) returned 0x1 [0051.212] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0051.212] WriteFile (in: hFile=0xc0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0051.307] GetFileType (hFile=0xc0) returned 0x1 [0051.307] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x3800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0051.307] ReadFile (in: hFile=0xc0, lpBuffer=0x13c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x13c00000*, lpNumberOfBytesRead=0x1242fb64*=0x800000, lpOverlapped=0x0) returned 1 [0051.423] SetEvent (hEvent=0xa8) returned 1 [0051.424] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0051.424] SetEvent (hEvent=0xa8) returned 1 [0051.424] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0051.472] GetFileType (hFile=0xc0) returned 0x1 [0051.472] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0051.472] WriteFile (in: hFile=0xc0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0051.573] GetFileType (hFile=0xc0) returned 0x1 [0051.573] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x4000000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0051.573] ReadFile (in: hFile=0xc0, lpBuffer=0x13c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x13c00000*, lpNumberOfBytesRead=0x1242fb64*=0x31a290, lpOverlapped=0x0) returned 1 [0051.614] VirtualAlloc (lpAddress=0x1280a000, dwSize=0x31c000, flAllocationType=0x1000, flProtect=0x4) returned 0x1280a000 [0051.668] GetFileType (hFile=0xc0) returned 0x1 [0051.668] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0051.668] WriteFile (in: hFile=0xc0, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x31a290, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x1242fb48*=0x31a290, lpOverlapped=0x1242fb54) returned 1 [0051.708] GetFileType (hFile=0xc0) returned 0x1 [0051.708] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x431a290, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0051.708] ReadFile (in: hFile=0xc0, lpBuffer=0x13c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x13c00000*, lpNumberOfBytesRead=0x1242fb64*=0x0, lpOverlapped=0x0) returned 1 [0051.708] CloseHandle (hObject=0xc0) returned 1 [0052.036] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0052.036] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242fb54 | out: lpMode=0x1242fb54) returned 0 [0052.037] WriteFile (in: hFile=0xc0, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x1242fb58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x1242fb58*=0x108, lpOverlapped=0x0) returned 1 [0052.037] CloseHandle (hObject=0xc0) returned 1 [0052.293] SetEvent (hEvent=0xac) returned 1 [0052.294] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x66, lpNumberOfCharsWritten=0x1242f81c, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x1242f81c*=0x66) returned 1 [0052.303] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1242fa58 | out: lpFileInformation=0x1242fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e)) returned 1 [0052.303] VirtualAlloc (lpAddress=0x1277a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1277a000 [0052.303] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.303] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242f9a8 | out: lpFindFileData=0x1242f9a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0052.304] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.304] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242f9a0 | out: lpFindFileData=0x1242f9a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0052.304] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0052.304] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0018-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0052.304] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242fba4 | out: lpMode=0x1242fba4) returned 0 [0052.304] CloseHandle (hObject=0xc0) returned 1 [0052.305] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.305] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242fa50 | out: lpFindFileData=0x1242fa50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0052.306] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0052.306] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242fd10 | out: lpMode=0x1242fd10) returned 0 [0052.312] WriteFile (in: hFile=0xc0, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242fd14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242fd14*=0x1033, lpOverlapped=0x0) returned 1 [0052.313] CloseHandle (hObject=0xc0) returned 1 [0052.313] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0052.313] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0052.313] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.313] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1242f984 | out: lpFindFileData=0x1242f984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd23a6040, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd23a6040, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0052.313] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd23a6040, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd23a6040, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.313] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xd23a6040, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xd23a6040, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd23cc1a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0052.314] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0052.314] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0052.314] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0052.314] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0052.314] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.314] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0052.314] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0052.314] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242f9a8 | out: lpFindFileData=0x1242f9a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0052.314] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0052.323] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242fc70 | out: lpMode=0x1242fc70) returned 0 [0052.323] ReadFile (in: hFile=0xc0, lpBuffer=0x12706600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242fc80, lpOverlapped=0x0 | out: lpBuffer=0x12706600*, lpNumberOfBytesRead=0x1242fc80*=0x100, lpOverlapped=0x0) returned 1 [0052.338] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0052.338] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x1242fc70 | out: lpMode=0x1242fc70) returned 0 [0052.340] ReadFile (in: hFile=0xbc, lpBuffer=0x12778000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242fc80, lpOverlapped=0x0 | out: lpBuffer=0x12778000*, lpNumberOfBytesRead=0x1242fc80*=0x100, lpOverlapped=0x0) returned 1 [0052.347] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0052.347] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242fc70 | out: lpMode=0x1242fc70) returned 0 [0052.356] ReadFile (in: hFile=0xd0, lpBuffer=0x12778100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242fc80, lpOverlapped=0x0 | out: lpBuffer=0x12778100*, lpNumberOfBytesRead=0x1242fc80*=0x100, lpOverlapped=0x0) returned 1 [0052.358] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0052.358] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x1242fc70 | out: lpMode=0x1242fc70) returned 0 [0052.360] ReadFile (in: hFile=0xc8, lpBuffer=0x12778200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242fc80, lpOverlapped=0x0 | out: lpBuffer=0x12778200*, lpNumberOfBytesRead=0x1242fc80*=0x100, lpOverlapped=0x0) returned 1 [0052.367] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), fInfoLevelId=0x0, lpFileInformation=0x1242fa58 | out: lpFileInformation=0x1242fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4)) returned 1 [0052.367] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0052.367] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x1242fb54 | out: lpMode=0x1242fb54) returned 0 [0052.374] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1 [0052.375] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12778302 | out: pbBuffer=0x12778302) returned 1 [0052.375] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127783d7 | out: pbBuffer=0x127783d7) returned 1 [0052.375] VirtualAlloc (lpAddress=0x1248c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1248c000 [0052.376] VirtualAlloc (lpAddress=0x1248e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1248e000 [0052.376] VirtualAlloc (lpAddress=0x12490000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x12490000 [0052.376] VirtualAlloc (lpAddress=0x12494000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12494000 [0052.378] SetEvent (hEvent=0xa8) returned 1 [0052.378] ReadFile (in: hFile=0x98, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x1242fb64*=0x800000, lpOverlapped=0x0) returned 1 [0052.511] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0052.535] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0052.759] SetEvent (hEvent=0xb8) returned 1 [0052.759] SetEvent (hEvent=0xa0) returned 1 [0052.759] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0053.094] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0054.059] SetEvent (hEvent=0xa0) returned 1 [0054.059] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0054.060] SetEvent (hEvent=0xa0) returned 1 [0054.060] SetEvent (hEvent=0xa8) returned 1 [0054.060] CloseHandle (hObject=0xd0) returned 1 [0054.060] CloseHandle (hObject=0xbc) returned 1 [0054.060] CloseHandle (hObject=0xc0) returned 1 [0054.060] CloseHandle (hObject=0x98) returned 1 [0054.061] SwitchToThread () returned 1 [0054.062] SetEvent (hEvent=0xa0) returned 1 [0054.062] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0054.062] SetEvent (hEvent=0xa0) returned 1 [0054.062] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0054.063] SetEvent (hEvent=0xa0) returned 1 [0054.063] SwitchToThread () returned 1 [0054.110] SetEvent (hEvent=0xa8) returned 1 [0054.110] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0055.076] SetEvent (hEvent=0xa0) returned 1 [0055.076] SetEvent (hEvent=0xa8) returned 1 [0055.076] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0055.199] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0055.549] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0055.858] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0055.915] SetEvent (hEvent=0xa0) returned 1 [0055.916] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0056.020] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0056.020] SetEvent (hEvent=0xa0) returned 1 [0056.020] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0056.097] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0056.097] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0056.098] SetEvent (hEvent=0xac) returned 1 [0056.098] SetEvent (hEvent=0xa0) returned 1 [0056.098] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0056.098] SetEvent (hEvent=0xa0) returned 1 [0056.098] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0056.152] GetFileType (hFile=0xd0) returned 0x1 [0056.152] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.152] WriteFile (in: hFile=0xd0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0056.249] GetFileType (hFile=0xd0) returned 0x1 [0056.249] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.249] GetFileType (hFile=0xd0) returned 0x1 [0056.249] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.249] WriteFile (in: hFile=0xd0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0056.345] GetFileType (hFile=0xd0) returned 0x1 [0056.345] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.345] GetFileType (hFile=0xd0) returned 0x1 [0056.345] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.345] WriteFile (in: hFile=0xd0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0056.437] GetFileType (hFile=0xd0) returned 0x1 [0056.437] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.437] GetFileType (hFile=0xd0) returned 0x1 [0056.437] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.437] WriteFile (in: hFile=0xd0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0056.531] GetFileType (hFile=0xd0) returned 0x1 [0056.531] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.531] GetFileType (hFile=0xd0) returned 0x1 [0056.531] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.531] WriteFile (in: hFile=0xd0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0056.633] GetFileType (hFile=0xd0) returned 0x1 [0056.633] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.633] GetFileType (hFile=0xd0) returned 0x1 [0056.633] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.633] WriteFile (in: hFile=0xd0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0056.733] GetFileType (hFile=0xd0) returned 0x1 [0056.733] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.733] GetFileType (hFile=0xd0) returned 0x1 [0056.733] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.734] WriteFile (in: hFile=0xd0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0056.853] GetFileType (hFile=0xd0) returned 0x1 [0056.853] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.853] GetFileType (hFile=0xd0) returned 0x1 [0056.853] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.853] WriteFile (in: hFile=0xd0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0056.959] GetFileType (hFile=0xd0) returned 0x1 [0056.959] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0056.959] ReadFile (in: hFile=0xd0, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0057.104] SetEvent (hEvent=0xa8) returned 1 [0057.105] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0057.110] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0057.110] SetEvent (hEvent=0xa8) returned 1 [0057.110] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0057.121] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0057.175] GetFileType (hFile=0xd0) returned 0x1 [0057.175] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0057.175] WriteFile (in: hFile=0xd0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0057.287] GetFileType (hFile=0xd0) returned 0x1 [0057.287] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0057.287] ReadFile (in: hFile=0xd0, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0057.445] SetEvent (hEvent=0xa0) returned 1 [0057.446] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0057.447] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0057.447] SetEvent (hEvent=0xa0) returned 1 [0057.447] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0057.453] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0057.500] GetFileType (hFile=0xd0) returned 0x1 [0057.500] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0057.500] WriteFile (in: hFile=0xd0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0057.609] GetFileType (hFile=0xd0) returned 0x1 [0057.609] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x1800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0057.609] ReadFile (in: hFile=0xd0, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0057.758] SetEvent (hEvent=0xa8) returned 1 [0057.758] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0057.767] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0057.767] SetEvent (hEvent=0xa8) returned 1 [0057.767] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0057.773] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0057.831] GetFileType (hFile=0xd0) returned 0x1 [0057.831] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0057.831] WriteFile (in: hFile=0xd0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0057.932] GetFileType (hFile=0xd0) returned 0x1 [0057.932] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x2000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0057.932] ReadFile (in: hFile=0xd0, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0058.037] SetEvent (hEvent=0xa0) returned 1 [0058.038] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0058.043] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0058.044] SetEvent (hEvent=0xa0) returned 1 [0058.044] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0058.052] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0058.106] GetFileType (hFile=0xd0) returned 0x1 [0058.107] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0058.107] WriteFile (in: hFile=0xd0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0058.213] GetFileType (hFile=0xd0) returned 0x1 [0058.213] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x2800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0058.214] ReadFile (in: hFile=0xd0, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x1c6dbd, lpOverlapped=0x0) returned 1 [0058.245] GetFileType (hFile=0xd0) returned 0x1 [0058.245] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0058.245] WriteFile (in: hFile=0xd0, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x1c6dbd, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429b48*=0x1c6dbd, lpOverlapped=0x12429b54) returned 1 [0058.268] GetFileType (hFile=0xd0) returned 0x1 [0058.268] SetFilePointerEx (in: hFile=0xd0, liDistanceToMove=0x29c6dbd, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0058.268] ReadFile (in: hFile=0xd0, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0058.268] CloseHandle (hObject=0xd0) returned 1 [0058.596] SetEvent (hEvent=0xac) returned 1 [0058.596] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0058.596] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0058.601] WriteFile (in: hFile=0xd0, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0058.601] CloseHandle (hObject=0xd0) returned 1 [0058.868] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12706000*, nNumberOfCharsToWrite=0x67, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x12706000*, lpNumberOfCharsWritten=0x1242981c*=0x67) returned 1 [0058.882] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00)) returned 1 [0058.882] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708)) returned 1 [0058.883] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0058.883] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0058.883] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0058.883] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0058.883] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0058.883] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0058.883] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0058.897] CloseHandle (hObject=0xd0) returned 1 [0058.897] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0058.898] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0058.898] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0058.898] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0058.904] WriteFile (in: hFile=0xd0, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0058.905] CloseHandle (hObject=0xd0) returned 1 [0058.905] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0058.906] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0058.906] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0058.906] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5e5bcd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd5e5bcd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0058.906] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5e5bcd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd5e5bcd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.906] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xd5e5bcd0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xd5e5bcd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd5e6ce40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0058.906] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0058.906] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0058.906] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0058.906] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0058.906] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0058.906] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0058.906] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.906] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0058.906] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0058.907] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0058.907] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0058.907] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0058.907] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0058.907] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0058.907] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0058.907] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0058.907] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0058.908] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0058.908] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0058.908] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0058.908] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0058.917] ReadFile (in: hFile=0xd0, lpBuffer=0x12778600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12778600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0058.927] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0058.927] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0058.932] ReadFile (in: hFile=0xc8, lpBuffer=0x12778700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12778700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0058.947] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0058.947] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0058.961] ReadFile (in: hFile=0x98, lpBuffer=0x124d0000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0058.968] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1 [0058.969] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b)) returned 1 [0058.969] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1 [0058.969] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0058.969] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0058.969] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0058.969] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0058.969] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0058.969] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0058.969] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0058.978] CloseHandle (hObject=0xc0) returned 1 [0058.978] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0058.978] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0058.979] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0058.979] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0058.985] WriteFile (in: hFile=0xc0, lpBuffer=0x1248d300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x1248d300*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0058.986] CloseHandle (hObject=0xc0) returned 1 [0058.986] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\@_read_to_recover_files_@.txt")) returned 0x2020 [0058.986] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0058.986] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0058.986] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5f1cac0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd5f1cac0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0058.986] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5f1cac0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd5f1cac0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.986] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xd5f1cac0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xd5f1cac0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd5f2dc30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0058.986] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0058.987] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0058.987] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0058.987] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.987] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0058.987] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0058.987] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0058.987] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0058.996] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0059.002] ReadFile (in: hFile=0xc0, lpBuffer=0x124d0600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d0600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0059.011] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0059.011] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0059.013] ReadFile (in: hFile=0xbc, lpBuffer=0x124d0700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d0700*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0059.026] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0059.027] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0059.032] ReadFile (in: hFile=0xdc, lpBuffer=0x124d0800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d0800*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0059.044] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed)) returned 1 [0059.044] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0059.044] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0059.057] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442220 | out: pbBuffer=0x12442220) returned 1 [0059.059] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d0902 | out: pbBuffer=0x124d0902) returned 1 [0059.059] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d0904 | out: pbBuffer=0x124d0904) returned 1 [0059.059] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d0997 | out: pbBuffer=0x124d0997) returned 1 [0059.059] VirtualAlloc (lpAddress=0x127b0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x127b0000 [0059.060] VirtualAlloc (lpAddress=0x14c00000, dwSize=0x800000, flAllocationType=0x1000, flProtect=0x4) returned 0x14c00000 [0059.086] VirtualAlloc (lpAddress=0x2316000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x2316000 [0059.087] VirtualAlloc (lpAddress=0x2356000, dwSize=0x41000, flAllocationType=0x1000, flProtect=0x4) returned 0x2356000 [0059.087] VirtualFree (lpAddress=0x13dc8000, dwSize=0x638000, dwFreeType=0x4000) returned 1 [0059.123] VirtualFree (lpAddress=0x124f2000, dwSize=0x180000, dwFreeType=0x4000) returned 1 [0059.130] VirtualFree (lpAddress=0x124f2000, dwSize=0x214000, dwFreeType=0x4000) returned 1 [0059.130] VirtualFree (lpAddress=0x129d2000, dwSize=0x154000, dwFreeType=0x4000) returned 1 [0059.136] VirtualFree (lpAddress=0x129d2000, dwSize=0x22e000, dwFreeType=0x4000) returned 1 [0059.143] SetEvent (hEvent=0xa8) returned 1 [0059.143] ReadFile (in: hFile=0xe4, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429abc*=0x800000, lpOverlapped=0x0) returned 1 [0059.377] CloseHandle (hObject=0xc8) returned 1 [0059.377] CloseHandle (hObject=0xd0) returned 1 [0059.377] SwitchToThread () returned 1 [0059.378] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0059.571] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0060.395] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0060.592] SetEvent (hEvent=0x7c) returned 1 [0060.592] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0060.691] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0060.691] SetEvent (hEvent=0x7c) returned 1 [0060.691] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0060.836] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0060.836] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0061.485] SetEvent (hEvent=0x7c) returned 1 [0061.485] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0061.495] SetEvent (hEvent=0x7c) returned 1 [0061.495] SetEvent (hEvent=0xa0) returned 1 [0061.495] CloseHandle (hObject=0xc0) returned 1 [0061.495] CloseHandle (hObject=0x98) returned 1 [0061.495] CloseHandle (hObject=0xe4) returned 1 [0061.496] SwitchToThread () returned 1 [0061.518] SetEvent (hEvent=0x7c) returned 1 [0061.518] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0061.524] SetEvent (hEvent=0x7c) returned 1 [0061.525] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0061.533] SetEvent (hEvent=0x7c) returned 1 [0061.533] SwitchToThread () returned 1 [0061.539] SetEvent (hEvent=0x7c) returned 1 [0061.539] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0061.659] SetEvent (hEvent=0xa0) returned 1 [0061.659] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0061.770] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0061.770] SetEvent (hEvent=0xa0) returned 1 [0061.770] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0061.867] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0061.867] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0062.752] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0062.848] SetEvent (hEvent=0xa0) returned 1 [0062.848] SetEvent (hEvent=0xb8) returned 1 [0062.848] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0063.072] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0063.867] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0064.883] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0064.949] SetEvent (hEvent=0x7c) returned 1 [0064.949] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0064.949] SetEvent (hEvent=0x7c) returned 1 [0064.949] SwitchToThread () returned 1 [0064.981] SetEvent (hEvent=0xb8) returned 1 [0064.981] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0066.011] SetEvent (hEvent=0xb8) returned 1 [0066.011] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0066.097] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0066.306] SetEvent (hEvent=0xb8) returned 1 [0066.306] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0066.391] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0066.392] SetEvent (hEvent=0xb8) returned 1 [0066.392] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0066.394] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0066.394] SetEvent (hEvent=0xac) returned 1 [0066.394] SetEvent (hEvent=0xb8) returned 1 [0066.394] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0066.395] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0066.395] SetEvent (hEvent=0xb8) returned 1 [0066.395] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0066.442] GetFileType (hFile=0x98) returned 0x1 [0066.442] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0066.442] WriteFile (in: hFile=0x98, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0066.540] GetFileType (hFile=0x98) returned 0x1 [0066.540] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0066.540] GetFileType (hFile=0x98) returned 0x1 [0066.540] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0066.540] WriteFile (in: hFile=0x98, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0066.637] GetFileType (hFile=0x98) returned 0x1 [0066.637] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0066.637] GetFileType (hFile=0x98) returned 0x1 [0066.637] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0066.637] WriteFile (in: hFile=0x98, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0066.733] GetFileType (hFile=0x98) returned 0x1 [0066.733] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0066.733] GetFileType (hFile=0x98) returned 0x1 [0066.733] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0066.733] WriteFile (in: hFile=0x98, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0066.835] GetFileType (hFile=0x98) returned 0x1 [0066.835] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0066.835] GetFileType (hFile=0x98) returned 0x1 [0066.835] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0066.835] WriteFile (in: hFile=0x98, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0066.931] GetFileType (hFile=0x98) returned 0x1 [0066.931] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0066.931] GetFileType (hFile=0x98) returned 0x1 [0066.931] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0066.931] WriteFile (in: hFile=0x98, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0067.026] GetFileType (hFile=0x98) returned 0x1 [0067.026] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0067.026] GetFileType (hFile=0x98) returned 0x1 [0067.026] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0067.026] WriteFile (in: hFile=0x98, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0067.123] GetFileType (hFile=0x98) returned 0x1 [0067.123] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0067.123] GetFileType (hFile=0x98) returned 0x1 [0067.123] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0067.123] WriteFile (in: hFile=0x98, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0067.227] GetFileType (hFile=0x98) returned 0x1 [0067.227] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0067.227] ReadFile (in: hFile=0x98, lpBuffer=0x13ae4000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13ae4000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0067.378] SetEvent (hEvent=0x7c) returned 1 [0067.378] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0067.432] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0067.432] SetEvent (hEvent=0x7c) returned 1 [0067.432] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0067.485] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0067.532] GetFileType (hFile=0x98) returned 0x1 [0067.532] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0067.532] WriteFile (in: hFile=0x98, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0067.685] GetFileType (hFile=0x98) returned 0x1 [0067.685] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0067.685] ReadFile (in: hFile=0x98, lpBuffer=0x13ae4000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13ae4000*, lpNumberOfBytesRead=0x12429b64*=0x200204, lpOverlapped=0x0) returned 1 [0067.720] VirtualAlloc (lpAddress=0x124f2000, dwSize=0x202000, flAllocationType=0x1000, flProtect=0x4) returned 0x124f2000 [0067.745] VirtualAlloc (lpAddress=0x129d2000, dwSize=0x202000, flAllocationType=0x1000, flProtect=0x4) returned 0x129d2000 [0067.766] SetEvent (hEvent=0xb8) returned 1 [0067.778] GetFileType (hFile=0x98) returned 0x1 [0067.778] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0067.778] WriteFile (in: hFile=0x98, lpBuffer=0x124f2000*, nNumberOfBytesToWrite=0x200204, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124f2000*, lpNumberOfBytesWritten=0x12429b48*=0x200204, lpOverlapped=0x12429b54) returned 1 [0067.812] GetFileType (hFile=0x98) returned 0x1 [0067.812] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x1200204, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0067.812] ReadFile (in: hFile=0x98, lpBuffer=0x13ae4000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13ae4000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0067.812] CloseHandle (hObject=0x98) returned 1 [0067.924] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0067.924] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0067.925] WriteFile (in: hFile=0x98, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0067.925] CloseHandle (hObject=0x98) returned 1 [0067.925] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124de000*, nNumberOfCharsToWrite=0x66, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124de000*, lpNumberOfCharsWritten=0x1242981c*=0x66) returned 1 [0067.926] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00)) returned 1 [0067.926] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf)) returned 1 [0067.926] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c)) returned 1 [0067.926] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0067.926] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0067.926] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0067.927] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0067.927] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0067.927] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0067.927] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0067.927] CloseHandle (hObject=0x98) returned 1 [0067.927] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0067.927] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0067.927] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0067.929] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0067.930] WriteFile (in: hFile=0x98, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0067.931] CloseHandle (hObject=0x98) returned 1 [0067.931] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0067.931] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0067.931] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0067.931] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xdaf4c810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdaf4c810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0067.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xdaf4c810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdaf4c810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xdaf4a100, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xdaf4a100, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdaf51630, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0067.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0067.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0067.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0067.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0067.932] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.932] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0067.932] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0067.932] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0067.932] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0067.933] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0067.933] ReadFile (in: hFile=0x98, lpBuffer=0x127bc600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0067.936] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0067.937] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0067.937] ReadFile (in: hFile=0xdc, lpBuffer=0x127bc700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0067.940] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0067.940] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0067.940] ReadFile (in: hFile=0xc0, lpBuffer=0x127bc800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0067.943] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0067.943] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0067.943] ReadFile (in: hFile=0xbc, lpBuffer=0x127bc900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0067.945] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861)) returned 1 [0067.946] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd)) returned 1 [0067.946] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0067.946] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0067.946] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e320 | out: pbBuffer=0x1240e320) returned 1 [0067.947] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410134 | out: pbBuffer=0x12410134) returned 1 [0067.947] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127bca02 | out: pbBuffer=0x127bca02) returned 1 [0067.947] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127bca29 | out: pbBuffer=0x127bca29) returned 1 [0067.947] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127bca7b | out: pbBuffer=0x127bca7b) returned 1 [0067.947] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127bca85 | out: pbBuffer=0x127bca85) returned 1 [0067.949] SetEvent (hEvent=0x7c) returned 1 [0067.949] ReadFile (in: hFile=0xe4, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0068.092] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0068.154] SetEvent (hEvent=0xac) returned 1 [0068.154] SetEvent (hEvent=0xa0) returned 1 [0068.155] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0068.155] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0068.155] SetEvent (hEvent=0xb8) returned 1 [0068.155] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0068.204] GetFileType (hFile=0xe4) returned 0x1 [0068.204] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.204] WriteFile (in: hFile=0xe4, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0068.302] GetFileType (hFile=0xe4) returned 0x1 [0068.302] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.302] GetFileType (hFile=0xe4) returned 0x1 [0068.302] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.302] WriteFile (in: hFile=0xe4, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0068.408] GetFileType (hFile=0xe4) returned 0x1 [0068.408] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.408] GetFileType (hFile=0xe4) returned 0x1 [0068.408] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.408] WriteFile (in: hFile=0xe4, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0068.510] GetFileType (hFile=0xe4) returned 0x1 [0068.510] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.510] GetFileType (hFile=0xe4) returned 0x1 [0068.510] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.510] WriteFile (in: hFile=0xe4, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0068.610] GetFileType (hFile=0xe4) returned 0x1 [0068.610] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.610] GetFileType (hFile=0xe4) returned 0x1 [0068.610] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.610] WriteFile (in: hFile=0xe4, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0068.709] GetFileType (hFile=0xe4) returned 0x1 [0068.709] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.709] GetFileType (hFile=0xe4) returned 0x1 [0068.709] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.709] WriteFile (in: hFile=0xe4, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0068.806] GetFileType (hFile=0xe4) returned 0x1 [0068.806] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.806] GetFileType (hFile=0xe4) returned 0x1 [0068.807] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.807] WriteFile (in: hFile=0xe4, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0068.912] GetFileType (hFile=0xe4) returned 0x1 [0068.912] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.912] GetFileType (hFile=0xe4) returned 0x1 [0068.912] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0068.912] WriteFile (in: hFile=0xe4, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0069.011] GetFileType (hFile=0xe4) returned 0x1 [0069.011] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0069.011] ReadFile (in: hFile=0xe4, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0069.161] SetEvent (hEvent=0x7c) returned 1 [0069.161] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0069.161] SetEvent (hEvent=0x7c) returned 1 [0069.161] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0069.212] GetFileType (hFile=0xe4) returned 0x1 [0069.212] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0069.212] WriteFile (in: hFile=0xe4, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0069.314] GetFileType (hFile=0xe4) returned 0x1 [0069.314] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0069.314] ReadFile (in: hFile=0xe4, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0069.476] SetEvent (hEvent=0xb8) returned 1 [0069.476] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0069.486] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0069.486] SetEvent (hEvent=0xb8) returned 1 [0069.486] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0069.492] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0069.547] GetFileType (hFile=0xe4) returned 0x1 [0069.547] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0069.547] WriteFile (in: hFile=0xe4, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0069.655] GetFileType (hFile=0xe4) returned 0x1 [0069.655] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x1800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0069.655] ReadFile (in: hFile=0xe4, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0069.816] SetEvent (hEvent=0x7c) returned 1 [0069.816] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0069.824] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0069.824] SetEvent (hEvent=0x7c) returned 1 [0069.824] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0069.833] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0069.888] GetFileType (hFile=0xe4) returned 0x1 [0069.888] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0069.888] WriteFile (in: hFile=0xe4, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0069.992] GetFileType (hFile=0xe4) returned 0x1 [0069.992] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x2000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0069.992] ReadFile (in: hFile=0xe4, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0070.144] SetEvent (hEvent=0xb8) returned 1 [0070.144] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0070.152] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0070.152] SetEvent (hEvent=0xb8) returned 1 [0070.152] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0070.158] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0070.213] GetFileType (hFile=0xe4) returned 0x1 [0070.213] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0070.213] WriteFile (in: hFile=0xe4, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0070.319] GetFileType (hFile=0xe4) returned 0x1 [0070.319] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x2800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0070.320] ReadFile (in: hFile=0xe4, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0070.429] SetEvent (hEvent=0x7c) returned 1 [0070.429] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0070.435] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0070.435] SetEvent (hEvent=0x7c) returned 1 [0070.436] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0070.444] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0070.492] GetFileType (hFile=0xe4) returned 0x1 [0070.492] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0070.492] WriteFile (in: hFile=0xe4, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0070.598] GetFileType (hFile=0xe4) returned 0x1 [0070.598] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x3000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0070.598] ReadFile (in: hFile=0xe4, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x780dd, lpOverlapped=0x0) returned 1 [0070.612] GetFileType (hFile=0xe4) returned 0x1 [0070.612] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0070.612] WriteFile (in: hFile=0xe4, lpBuffer=0x124f2000*, nNumberOfBytesToWrite=0x780dd, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124f2000*, lpNumberOfBytesWritten=0x12429b48*=0x780dd, lpOverlapped=0x12429b54) returned 1 [0070.613] GetFileType (hFile=0xe4) returned 0x1 [0070.614] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x30780dd, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0070.614] ReadFile (in: hFile=0xe4, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0070.614] CloseHandle (hObject=0xe4) returned 1 [0070.614] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0070.614] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0070.623] WriteFile (in: hFile=0xe4, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0070.623] CloseHandle (hObject=0xe4) returned 1 [0070.623] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124de000*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124de000*, lpNumberOfCharsWritten=0x1242981c*=0x68) returned 1 [0070.627] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000)) returned 1 [0070.630] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f)) returned 1 [0070.630] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0070.630] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0070.631] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0070.631] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0070.631] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0070.631] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0054-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0070.631] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0070.639] CloseHandle (hObject=0xe4) returned 1 [0070.639] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0070.640] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0070.640] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0070.640] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0070.642] WriteFile (in: hFile=0xe4, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0070.647] CloseHandle (hObject=0xe4) returned 1 [0070.647] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0070.647] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0070.648] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0070.648] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdc88d590, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdc88d590, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0070.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdc88d590, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdc88d590, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xdc88d590, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xdc88d590, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdc89e700, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0070.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0070.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0070.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0070.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0070.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.648] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0070.648] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0070.648] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0070.648] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0070.649] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0070.657] ReadFile (in: hFile=0xe4, lpBuffer=0x127bc600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0070.998] SetEvent (hEvent=0xac) returned 1 [0070.998] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0070.998] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0070.999] ReadFile (in: hFile=0x98, lpBuffer=0x127bc700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0071.038] SetEvent (hEvent=0xac) returned 1 [0071.038] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0071.042] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0071.042] ReadFile (in: hFile=0xdc, lpBuffer=0x127bc800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0071.048] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0071.048] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0071.048] ReadFile (in: hFile=0xc0, lpBuffer=0x127bc900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0071.050] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1 [0071.050] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646)) returned 1 [0071.050] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8)) returned 1 [0071.149] SetEvent (hEvent=0xac) returned 1 [0071.149] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0071.149] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0071.149] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e380 | out: pbBuffer=0x1240e380) returned 1 [0071.150] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410114 | out: pbBuffer=0x12410114) returned 1 [0071.150] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127bcb02 | out: pbBuffer=0x127bcb02) returned 1 [0071.150] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127bcb06 | out: pbBuffer=0x127bcb06) returned 1 [0071.150] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127bcb0f | out: pbBuffer=0x127bcb0f) returned 1 [0071.151] SetEvent (hEvent=0xb8) returned 1 [0071.152] ReadFile (in: hFile=0xbc, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0071.750] SetEvent (hEvent=0xac) returned 1 [0071.751] SetEvent (hEvent=0xa0) returned 1 [0071.751] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0071.757] SetEvent (hEvent=0xa0) returned 1 [0071.757] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0071.811] GetFileType (hFile=0xbc) returned 0x1 [0071.811] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0071.811] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0071.930] GetFileType (hFile=0xbc) returned 0x1 [0071.931] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0071.931] GetFileType (hFile=0xbc) returned 0x1 [0071.931] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0071.931] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0072.034] GetFileType (hFile=0xbc) returned 0x1 [0072.035] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.035] GetFileType (hFile=0xbc) returned 0x1 [0072.035] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.035] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0072.172] GetFileType (hFile=0xbc) returned 0x1 [0072.172] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.172] GetFileType (hFile=0xbc) returned 0x1 [0072.172] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.172] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0072.269] GetFileType (hFile=0xbc) returned 0x1 [0072.269] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.269] GetFileType (hFile=0xbc) returned 0x1 [0072.269] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.269] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0072.370] GetFileType (hFile=0xbc) returned 0x1 [0072.370] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.370] GetFileType (hFile=0xbc) returned 0x1 [0072.370] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.370] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0072.477] GetFileType (hFile=0xbc) returned 0x1 [0072.477] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.477] GetFileType (hFile=0xbc) returned 0x1 [0072.477] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.478] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0072.576] GetFileType (hFile=0xbc) returned 0x1 [0072.576] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.576] GetFileType (hFile=0xbc) returned 0x1 [0072.576] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.576] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0072.676] GetFileType (hFile=0xbc) returned 0x1 [0072.676] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.676] ReadFile (in: hFile=0xbc, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0072.756] SetEvent (hEvent=0x7c) returned 1 [0072.756] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0072.756] SetEvent (hEvent=0x7c) returned 1 [0072.756] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0072.805] GetFileType (hFile=0xbc) returned 0x1 [0072.805] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.805] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0072.919] GetFileType (hFile=0xbc) returned 0x1 [0072.919] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.919] ReadFile (in: hFile=0xbc, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0xa5df8, lpOverlapped=0x0) returned 1 [0072.932] GetFileType (hFile=0xbc) returned 0x1 [0072.932] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.932] WriteFile (in: hFile=0xbc, lpBuffer=0x124f2000*, nNumberOfBytesToWrite=0xa5df8, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124f2000*, lpNumberOfBytesWritten=0x12429b48*=0xa5df8, lpOverlapped=0x12429b54) returned 1 [0072.934] GetFileType (hFile=0xbc) returned 0x1 [0072.934] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x10a5df8, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0072.934] ReadFile (in: hFile=0xbc, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0072.934] CloseHandle (hObject=0xbc) returned 1 [0072.935] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0072.935] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0072.936] WriteFile (in: hFile=0xbc, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0072.936] CloseHandle (hObject=0xbc) returned 1 [0072.936] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124de000*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124de000*, lpNumberOfCharsWritten=0x1242981c*=0x68) returned 1 [0072.938] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4)) returned 1 [0072.938] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0072.938] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0072.938] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0072.938] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0072.938] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0072.939] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00A1-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0072.939] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0072.939] CloseHandle (hObject=0xbc) returned 1 [0072.939] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0072.940] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0072.940] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0072.941] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0072.941] WriteFile (in: hFile=0xbc, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0072.942] CloseHandle (hObject=0xbc) returned 1 [0072.942] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0072.942] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0072.943] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0072.943] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xdde36c20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdde36c20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0072.943] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xdde36c20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdde36c20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.943] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xdde36c20, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xdde36c20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdde3ba40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0072.943] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0072.943] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0072.943] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0072.943] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0072.943] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0072.943] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0072.943] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0072.943] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0072.944] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0072.944] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0072.945] ReadFile (in: hFile=0xbc, lpBuffer=0x127bc600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0072.947] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0072.948] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0072.948] ReadFile (in: hFile=0xe4, lpBuffer=0x127bc700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0072.950] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0072.951] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0072.951] ReadFile (in: hFile=0x98, lpBuffer=0x127bc800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0072.953] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0072.953] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0072.953] ReadFile (in: hFile=0xdc, lpBuffer=0x127bc900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0072.955] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd)) returned 1 [0072.955] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0072.955] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0072.955] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e360 | out: pbBuffer=0x1240e360) returned 1 [0072.956] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127bca02 | out: pbBuffer=0x127bca02) returned 1 [0072.956] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127bca93 | out: pbBuffer=0x127bca93) returned 1 [0072.958] SetEvent (hEvent=0xa0) returned 1 [0072.958] ReadFile (in: hFile=0xc0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x7e1dcd, lpOverlapped=0x0) returned 1 [0073.101] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0073.111] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0073.307] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0073.571] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0073.733] SetEvent (hEvent=0x7c) returned 1 [0073.733] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0073.765] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0073.765] SetEvent (hEvent=0x7c) returned 1 [0073.765] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0073.767] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0073.767] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0073.768] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0073.768] SetEvent (hEvent=0xac) returned 1 [0073.768] SetEvent (hEvent=0x7c) returned 1 [0073.789] GetFileType (hFile=0xdc) returned 0x1 [0073.789] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0073.789] WriteFile (in: hFile=0xdc, lpBuffer=0x13be2000*, nNumberOfBytesToWrite=0x3e7e1f, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13be2000*, lpNumberOfBytesWritten=0x12429b48*=0x3e7e1f, lpOverlapped=0x12429b54) returned 1 [0073.831] GetFileType (hFile=0xdc) returned 0x1 [0073.831] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x3e7e1f, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0073.831] ReadFile (in: hFile=0xdc, lpBuffer=0x133e2000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x133e2000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0073.831] CloseHandle (hObject=0xdc) returned 1 [0073.832] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0073.832] SetEvent (hEvent=0x7c) returned 1 [0073.832] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0073.832] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0073.833] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0073.833] WriteFile (in: hFile=0xdc, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0073.833] CloseHandle (hObject=0xdc) returned 1 [0073.833] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x69, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x1242981c*=0x69) returned 1 [0073.834] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400)) returned 1 [0073.834] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391)) returned 1 [0073.834] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1 [0073.834] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.834] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0073.834] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.834] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0073.835] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0073.835] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0073.835] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0073.835] CloseHandle (hObject=0xdc) returned 1 [0073.835] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.836] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0073.836] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0073.836] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0073.836] WriteFile (in: hFile=0xdc, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0073.837] CloseHandle (hObject=0xdc) returned 1 [0073.837] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0073.837] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0073.838] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.838] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xde671340, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xde671340, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xde671340, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xde671340, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xde671340, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xde671340, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xde671340, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0073.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0073.839] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0073.839] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.839] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0073.840] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0073.840] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.840] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0073.840] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0073.841] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.841] ReadFile (in: hFile=0xdc, lpBuffer=0x124c4700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.845] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0073.846] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.847] ReadFile (in: hFile=0xc0, lpBuffer=0x124c4800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.848] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0073.849] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.849] ReadFile (in: hFile=0xbc, lpBuffer=0x124c4900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.851] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0073.851] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.851] ReadFile (in: hFile=0xe4, lpBuffer=0x124c4a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4a00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.854] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0073.854] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.854] ReadFile (in: hFile=0x98, lpBuffer=0x124c4b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4b00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.856] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0073.857] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.857] ReadFile (in: hFile=0xd0, lpBuffer=0x124c4c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4c00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.858] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0073.859] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.859] ReadFile (in: hFile=0xc8, lpBuffer=0x124c4d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4d00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.861] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0073.861] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.861] ReadFile (in: hFile=0xe0, lpBuffer=0x124c4e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4e00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.863] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0073.864] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.864] ReadFile (in: hFile=0xd8, lpBuffer=0x124c4f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4f00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.865] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0073.866] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.866] ReadFile (in: hFile=0xcc, lpBuffer=0x124c5000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c5000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.867] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0073.868] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.868] ReadFile (in: hFile=0xe8, lpBuffer=0x124c5100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c5100*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.870] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0073.870] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.870] ReadFile (in: hFile=0xec, lpBuffer=0x124c5200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c5200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.873] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0073.873] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.873] ReadFile (in: hFile=0xf0, lpBuffer=0x124c5300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c5300*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.875] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0073.876] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.876] ReadFile (in: hFile=0xf4, lpBuffer=0x124c5400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c5400*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.878] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0073.878] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.879] ReadFile (in: hFile=0xf8, lpBuffer=0x124c5500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c5500*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.881] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0073.881] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.881] ReadFile (in: hFile=0xfc, lpBuffer=0x124c5600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c5600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.885] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88)) returned 1 [0073.885] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741)) returned 1 [0073.885] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282)) returned 1 [0073.885] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0073.886] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0073.886] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124422c0 | out: pbBuffer=0x124422c0) returned 1 [0073.887] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c5702 | out: pbBuffer=0x124c5702) returned 1 [0073.887] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c5778 | out: pbBuffer=0x124c5778) returned 1 [0073.888] SetEvent (hEvent=0xa0) returned 1 [0073.888] ReadFile (in: hFile=0x100, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0074.084] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0074.087] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0074.282] SetEvent (hEvent=0x7c) returned 1 [0074.282] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0074.379] SetEvent (hEvent=0x7c) returned 1 [0074.379] SwitchToThread () returned 1 [0074.486] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0074.978] SetEvent (hEvent=0x7c) returned 1 [0074.979] SwitchToThread () returned 1 [0075.065] SetEvent (hEvent=0x7c) returned 1 [0075.065] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0075.067] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0075.067] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0075.068] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0075.068] SetEvent (hEvent=0xb8) returned 1 [0075.068] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0075.073] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0075.073] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0077.182] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0077.199] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0077.397] SetEvent (hEvent=0xb8) returned 1 [0077.397] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0077.398] SetEvent (hEvent=0xb8) returned 1 [0077.398] SwitchToThread () returned 1 [0077.399] SetEvent (hEvent=0xb8) returned 1 [0077.399] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0077.483] SetEvent (hEvent=0xa0) returned 1 [0077.483] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0077.593] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0077.593] SetEvent (hEvent=0xa0) returned 1 [0077.593] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0077.763] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0077.763] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0079.229] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0079.285] SetEvent (hEvent=0xb8) returned 1 [0079.286] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0079.286] SetEvent (hEvent=0xb8) returned 1 [0079.286] SwitchToThread () returned 1 [0079.326] SetEvent (hEvent=0xa0) returned 1 [0079.326] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0079.812] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0079.967] SetEvent (hEvent=0xa0) returned 1 [0079.967] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0080.047] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0080.047] SetEvent (hEvent=0xa0) returned 1 [0080.047] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0080.052] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0080.053] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0080.430] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0081.232] SetEvent (hEvent=0xa0) returned 1 [0081.232] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0081.232] SetEvent (hEvent=0xa0) returned 1 [0081.232] SwitchToThread () returned 1 [0081.284] SetEvent (hEvent=0xb8) returned 1 [0081.284] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0081.657] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0081.831] SetEvent (hEvent=0xb8) returned 1 [0081.831] SetEvent (hEvent=0x7c) returned 1 [0081.831] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0082.259] SetEvent (hEvent=0x7c) returned 1 [0082.259] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0082.268] SetEvent (hEvent=0x7c) returned 1 [0082.268] SetEvent (hEvent=0xb8) returned 1 [0082.270] SwitchToThread () returned 1 [0082.271] SetEvent (hEvent=0x7c) returned 1 [0082.271] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0082.467] SetEvent (hEvent=0xb8) returned 1 [0082.467] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0082.719] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0082.719] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0082.763] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0082.763] SetEvent (hEvent=0xa0) returned 1 [0082.763] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0082.857] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0082.857] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0082.862] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0082.862] SetEvent (hEvent=0xac) returned 1 [0082.862] SetEvent (hEvent=0xa0) returned 1 [0082.907] GetFileType (hFile=0xf0) returned 0x1 [0082.908] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0082.908] WriteFile (in: hFile=0xf0, lpBuffer=0x15400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x15400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0083.059] GetFileType (hFile=0xf0) returned 0x1 [0083.059] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x3000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0083.059] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0083.281] SwitchToThread () returned 1 [0083.298] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0083.583] SetEvent (hEvent=0x7c) returned 1 [0083.583] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0083.697] SetEvent (hEvent=0x7c) returned 1 [0083.697] SwitchToThread () returned 1 [0083.757] SetEvent (hEvent=0x7c) returned 1 [0083.757] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0083.907] SetEvent (hEvent=0xa0) returned 1 [0083.907] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0084.057] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0084.057] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0084.249] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0084.249] SetEvent (hEvent=0xb8) returned 1 [0084.249] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0084.314] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0084.314] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0084.392] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0084.392] SetEvent (hEvent=0xac) returned 1 [0084.392] SetEvent (hEvent=0xb8) returned 1 [0084.436] GetFileType (hFile=0xf0) returned 0x1 [0084.436] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0084.436] WriteFile (in: hFile=0xf0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0084.595] GetFileType (hFile=0xf0) returned 0x1 [0084.595] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x4800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0084.595] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0084.734] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0084.941] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0085.214] SetEvent (hEvent=0xa0) returned 1 [0085.214] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0085.241] SetEvent (hEvent=0xa0) returned 1 [0085.241] SwitchToThread () returned 1 [0085.242] SetEvent (hEvent=0xa0) returned 1 [0085.242] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0085.354] SetEvent (hEvent=0xb8) returned 1 [0085.354] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0085.519] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0085.519] SetEvent (hEvent=0xb8) returned 1 [0085.519] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0085.551] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0085.551] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0085.553] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0085.553] SetEvent (hEvent=0xac) returned 1 [0085.553] SetEvent (hEvent=0xb8) returned 1 [0085.598] GetFileType (hFile=0xf0) returned 0x1 [0085.598] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0085.598] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0085.703] GetFileType (hFile=0xf0) returned 0x1 [0085.704] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x6000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0085.704] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0085.911] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0086.071] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0086.417] SetEvent (hEvent=0x7c) returned 1 [0086.417] SetEvent (hEvent=0xa0) returned 1 [0086.417] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0087.360] SetEvent (hEvent=0x7c) returned 1 [0087.360] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0087.360] SetEvent (hEvent=0x7c) returned 1 [0087.360] SetEvent (hEvent=0xb8) returned 1 [0087.362] SwitchToThread () returned 1 [0087.363] SetEvent (hEvent=0x7c) returned 1 [0087.363] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0087.459] SetEvent (hEvent=0xb8) returned 1 [0087.459] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0087.562] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0087.562] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0087.596] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0087.596] SetEvent (hEvent=0xa0) returned 1 [0087.596] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0087.598] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0087.599] SetEvent (hEvent=0xac) returned 1 [0087.599] SetEvent (hEvent=0xa0) returned 1 [0087.645] GetFileType (hFile=0xf0) returned 0x1 [0087.645] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0087.645] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0087.759] GetFileType (hFile=0xf0) returned 0x1 [0087.759] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x9000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0087.759] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0088.038] SwitchToThread () returned 1 [0088.055] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0088.367] SetEvent (hEvent=0x7c) returned 1 [0088.367] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0088.455] SetEvent (hEvent=0x7c) returned 1 [0088.455] SwitchToThread () returned 1 [0088.504] SetEvent (hEvent=0x7c) returned 1 [0088.504] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0088.619] SetEvent (hEvent=0xa0) returned 1 [0088.619] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0088.758] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0088.759] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0088.792] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0088.792] SetEvent (hEvent=0xb8) returned 1 [0088.792] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0088.847] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0088.847] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0088.909] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0088.909] SetEvent (hEvent=0xac) returned 1 [0088.909] SetEvent (hEvent=0xb8) returned 1 [0088.954] GetFileType (hFile=0xf0) returned 0x1 [0088.954] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0088.954] WriteFile (in: hFile=0xf0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0089.077] GetFileType (hFile=0xf0) returned 0x1 [0089.077] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0xa800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0089.077] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x17cbdb, lpOverlapped=0x0) returned 1 [0089.096] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0089.252] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0089.272] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0089.378] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0089.737] SetEvent (hEvent=0x7c) returned 1 [0089.737] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0089.763] SetEvent (hEvent=0x7c) returned 1 [0089.763] SwitchToThread () returned 1 [0089.881] SetEvent (hEvent=0xb8) returned 1 [0089.881] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0091.260] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0091.447] SetEvent (hEvent=0x7c) returned 1 [0091.447] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0091.460] SetEvent (hEvent=0x7c) returned 1 [0091.460] SwitchToThread () returned 1 [0091.551] SetEvent (hEvent=0xb8) returned 1 [0091.551] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0092.118] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0092.291] SetEvent (hEvent=0x7c) returned 1 [0092.291] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0092.343] SetEvent (hEvent=0x7c) returned 1 [0092.343] SwitchToThread () returned 1 [0092.414] SetEvent (hEvent=0xb8) returned 1 [0092.414] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0092.937] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0093.002] SetEvent (hEvent=0x7c) returned 1 [0093.002] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0093.003] SetEvent (hEvent=0x7c) returned 1 [0093.003] SwitchToThread () returned 1 [0093.037] SetEvent (hEvent=0xb8) returned 1 [0093.037] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0093.564] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0093.605] SetEvent (hEvent=0x7c) returned 1 [0093.605] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0093.605] SetEvent (hEvent=0x7c) returned 1 [0093.605] SwitchToThread () returned 1 [0093.661] SetEvent (hEvent=0xb8) returned 1 [0093.661] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0094.077] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0094.251] SetEvent (hEvent=0x7c) returned 1 [0094.251] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0094.257] SetEvent (hEvent=0x7c) returned 1 [0094.257] SwitchToThread () returned 1 [0094.340] SetEvent (hEvent=0xb8) returned 1 [0094.340] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0094.765] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0094.928] SetEvent (hEvent=0x7c) returned 1 [0094.928] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0094.928] SetEvent (hEvent=0x7c) returned 1 [0094.928] SwitchToThread () returned 1 [0094.945] SetEvent (hEvent=0xb8) returned 1 [0094.945] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0095.500] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0095.582] SetEvent (hEvent=0x7c) returned 1 [0095.582] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0095.595] SetEvent (hEvent=0x7c) returned 1 [0095.595] SwitchToThread () returned 1 [0095.610] SetEvent (hEvent=0xb8) returned 1 [0095.610] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0096.257] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0096.598] SetEvent (hEvent=0x7c) returned 1 [0096.598] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0096.653] SetEvent (hEvent=0x7c) returned 1 [0096.653] SwitchToThread () returned 1 [0096.759] SetEvent (hEvent=0xb8) returned 1 [0096.759] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0097.298] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0097.578] SetEvent (hEvent=0x7c) returned 1 [0097.578] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0097.581] SetEvent (hEvent=0x7c) returned 1 [0097.581] SwitchToThread () returned 1 [0097.680] SetEvent (hEvent=0xb8) returned 1 [0097.680] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0097.985] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0098.037] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0098.550] SetEvent (hEvent=0x7c) returned 1 [0098.550] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0098.601] SetEvent (hEvent=0x7c) returned 1 [0098.602] SwitchToThread () returned 1 [0098.712] SetEvent (hEvent=0xb8) returned 1 [0098.712] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0099.281] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0099.407] SetEvent (hEvent=0x7c) returned 1 [0099.407] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0099.462] SetEvent (hEvent=0x7c) returned 1 [0099.462] SwitchToThread () returned 1 [0099.536] SetEvent (hEvent=0xb8) returned 1 [0099.537] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0100.207] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0100.446] SetEvent (hEvent=0x7c) returned 1 [0100.446] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0100.501] SetEvent (hEvent=0x7c) returned 1 [0100.501] SwitchToThread () returned 1 [0100.628] SetEvent (hEvent=0xb8) returned 1 [0100.628] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0101.174] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0101.324] SetEvent (hEvent=0xb8) returned 1 [0101.325] SwitchToThread () returned 1 [0101.414] SetEvent (hEvent=0xb8) returned 1 [0101.414] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0101.443] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0101.443] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0101.495] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0101.495] SetEvent (hEvent=0x7c) returned 1 [0101.495] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0101.548] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0101.548] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0103.019] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0104.425] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0104.498] SetEvent (hEvent=0x7c) returned 1 [0104.498] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0104.498] SetEvent (hEvent=0x7c) returned 1 [0104.498] SwitchToThread () returned 1 [0104.525] SetEvent (hEvent=0xb8) returned 1 [0104.525] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0104.944] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0105.021] SetEvent (hEvent=0xb8) returned 1 [0105.021] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0105.061] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0105.061] SetEvent (hEvent=0xb8) returned 1 [0105.061] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0105.193] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0105.193] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0105.194] SetEvent (hEvent=0xac) returned 1 [0105.194] SetEvent (hEvent=0xb8) returned 1 [0105.194] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0105.194] SetEvent (hEvent=0xb8) returned 1 [0105.195] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0105.241] GetFileType (hFile=0xe8) returned 0x1 [0105.241] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.241] WriteFile (in: hFile=0xe8, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0105.342] GetFileType (hFile=0xe8) returned 0x1 [0105.342] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.342] GetFileType (hFile=0xe8) returned 0x1 [0105.342] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.342] WriteFile (in: hFile=0xe8, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0105.434] GetFileType (hFile=0xe8) returned 0x1 [0105.434] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.434] GetFileType (hFile=0xe8) returned 0x1 [0105.434] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.434] WriteFile (in: hFile=0xe8, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0105.529] GetFileType (hFile=0xe8) returned 0x1 [0105.529] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.529] GetFileType (hFile=0xe8) returned 0x1 [0105.529] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.529] WriteFile (in: hFile=0xe8, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0105.624] GetFileType (hFile=0xe8) returned 0x1 [0105.624] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.624] GetFileType (hFile=0xe8) returned 0x1 [0105.624] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.624] WriteFile (in: hFile=0xe8, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0105.716] GetFileType (hFile=0xe8) returned 0x1 [0105.716] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.716] GetFileType (hFile=0xe8) returned 0x1 [0105.716] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.716] WriteFile (in: hFile=0xe8, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0105.834] GetFileType (hFile=0xe8) returned 0x1 [0105.834] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.834] GetFileType (hFile=0xe8) returned 0x1 [0105.834] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.834] WriteFile (in: hFile=0xe8, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0105.924] GetFileType (hFile=0xe8) returned 0x1 [0105.924] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.926] GetFileType (hFile=0xe8) returned 0x1 [0105.926] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0105.926] WriteFile (in: hFile=0xe8, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0106.025] GetFileType (hFile=0xe8) returned 0x1 [0106.025] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0106.025] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0106.171] SetEvent (hEvent=0x7c) returned 1 [0106.171] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0106.179] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0106.179] SetEvent (hEvent=0x7c) returned 1 [0106.179] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0106.185] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0106.235] GetFileType (hFile=0xe8) returned 0x1 [0106.235] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0106.235] WriteFile (in: hFile=0xe8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0106.347] GetFileType (hFile=0xe8) returned 0x1 [0106.347] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0106.347] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0106.490] SetEvent (hEvent=0xb8) returned 1 [0106.491] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0106.497] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0106.498] SetEvent (hEvent=0xb8) returned 1 [0106.498] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0106.505] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0106.553] GetFileType (hFile=0xe8) returned 0x1 [0106.553] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0106.553] WriteFile (in: hFile=0xe8, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0106.658] GetFileType (hFile=0xe8) returned 0x1 [0106.658] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0106.658] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0106.824] SetEvent (hEvent=0x7c) returned 1 [0106.825] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0106.830] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0106.830] SetEvent (hEvent=0x7c) returned 1 [0106.830] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0106.836] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0106.886] GetFileType (hFile=0xe8) returned 0x1 [0106.886] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0106.886] WriteFile (in: hFile=0xe8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0106.987] GetFileType (hFile=0xe8) returned 0x1 [0106.988] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x2000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0106.988] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0107.146] SetEvent (hEvent=0xb8) returned 1 [0107.146] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0107.152] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0107.152] SetEvent (hEvent=0xb8) returned 1 [0107.152] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0107.160] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0107.210] GetFileType (hFile=0xe8) returned 0x1 [0107.210] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0107.210] WriteFile (in: hFile=0xe8, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0107.310] GetFileType (hFile=0xe8) returned 0x1 [0107.310] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x2800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0107.310] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0107.467] SetEvent (hEvent=0x7c) returned 1 [0107.468] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0107.475] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0107.476] SetEvent (hEvent=0x7c) returned 1 [0107.476] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0107.483] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0107.536] GetFileType (hFile=0xe8) returned 0x1 [0107.536] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0107.536] WriteFile (in: hFile=0xe8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0107.635] GetFileType (hFile=0xe8) returned 0x1 [0107.635] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x3000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0107.635] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0107.782] SetEvent (hEvent=0xb8) returned 1 [0107.782] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0107.786] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0107.786] SetEvent (hEvent=0xb8) returned 1 [0107.786] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0107.792] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0107.846] GetFileType (hFile=0xe8) returned 0x1 [0107.846] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0107.846] WriteFile (in: hFile=0xe8, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0107.946] GetFileType (hFile=0xe8) returned 0x1 [0107.946] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x3800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0107.946] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0108.107] SetEvent (hEvent=0x7c) returned 1 [0108.107] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0108.113] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0108.113] SetEvent (hEvent=0x7c) returned 1 [0108.113] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0108.121] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0108.168] GetFileType (hFile=0xe8) returned 0x1 [0108.168] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0108.168] WriteFile (in: hFile=0xe8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0108.321] GetFileType (hFile=0xe8) returned 0x1 [0108.321] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0108.321] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0108.474] SetEvent (hEvent=0xb8) returned 1 [0108.475] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0108.479] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0108.479] SetEvent (hEvent=0xb8) returned 1 [0108.479] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0108.528] GetFileType (hFile=0xe8) returned 0x1 [0108.528] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0108.528] WriteFile (in: hFile=0xe8, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0108.624] GetFileType (hFile=0xe8) returned 0x1 [0108.624] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x4800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0108.624] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0108.771] SetEvent (hEvent=0x7c) returned 1 [0108.771] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0108.771] SetEvent (hEvent=0x7c) returned 1 [0108.771] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0108.859] GetFileType (hFile=0xe8) returned 0x1 [0108.859] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0108.859] WriteFile (in: hFile=0xe8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0108.954] GetFileType (hFile=0xe8) returned 0x1 [0108.954] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x5000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0108.954] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0109.102] SetEvent (hEvent=0xb8) returned 1 [0109.102] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0109.103] SetEvent (hEvent=0xb8) returned 1 [0109.103] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0109.103] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0109.150] GetFileType (hFile=0xe8) returned 0x1 [0109.150] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0109.151] WriteFile (in: hFile=0xe8, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0109.245] GetFileType (hFile=0xe8) returned 0x1 [0109.246] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x5800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0109.246] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0109.387] SetEvent (hEvent=0x7c) returned 1 [0109.387] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0109.387] SetEvent (hEvent=0x7c) returned 1 [0109.387] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0109.435] GetFileType (hFile=0xe8) returned 0x1 [0109.435] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0109.435] WriteFile (in: hFile=0xe8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0109.530] GetFileType (hFile=0xe8) returned 0x1 [0109.530] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x6000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0109.530] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0109.672] SetEvent (hEvent=0xb8) returned 1 [0109.673] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0109.673] SetEvent (hEvent=0xb8) returned 1 [0109.673] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0109.721] GetFileType (hFile=0xe8) returned 0x1 [0109.721] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0109.721] WriteFile (in: hFile=0xe8, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0109.828] GetFileType (hFile=0xe8) returned 0x1 [0109.828] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x6800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0109.828] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0109.971] SetEvent (hEvent=0x7c) returned 1 [0109.971] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0109.973] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0109.973] SetEvent (hEvent=0x7c) returned 1 [0109.973] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0109.975] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0110.023] GetFileType (hFile=0xe8) returned 0x1 [0110.023] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0110.023] WriteFile (in: hFile=0xe8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0110.124] GetFileType (hFile=0xe8) returned 0x1 [0110.124] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x7000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0110.124] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0110.264] SetEvent (hEvent=0xb8) returned 1 [0110.264] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0110.396] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0110.396] SetEvent (hEvent=0xb8) returned 1 [0110.396] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0110.444] GetFileType (hFile=0xe8) returned 0x1 [0110.444] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0110.444] WriteFile (in: hFile=0xe8, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0110.539] GetFileType (hFile=0xe8) returned 0x1 [0110.539] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x7800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0110.540] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0110.678] SetEvent (hEvent=0x7c) returned 1 [0110.678] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0110.679] SetEvent (hEvent=0x7c) returned 1 [0110.679] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0110.726] GetFileType (hFile=0xe8) returned 0x1 [0110.726] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0110.726] WriteFile (in: hFile=0xe8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0110.821] GetFileType (hFile=0xe8) returned 0x1 [0110.821] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x8000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0110.821] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0110.980] SetEvent (hEvent=0xb8) returned 1 [0110.980] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0110.980] SetEvent (hEvent=0xb8) returned 1 [0110.980] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0111.028] GetFileType (hFile=0xe8) returned 0x1 [0111.028] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0111.028] WriteFile (in: hFile=0xe8, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0111.130] GetFileType (hFile=0xe8) returned 0x1 [0111.130] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x8800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0111.130] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0111.270] SetEvent (hEvent=0x7c) returned 1 [0111.270] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0111.271] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0111.271] SetEvent (hEvent=0x7c) returned 1 [0111.271] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0111.318] GetFileType (hFile=0xe8) returned 0x1 [0111.318] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0111.318] WriteFile (in: hFile=0xe8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0111.414] GetFileType (hFile=0xe8) returned 0x1 [0111.414] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x9000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0111.414] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0111.526] SetEvent (hEvent=0xb8) returned 1 [0111.526] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0111.527] SetEvent (hEvent=0xb8) returned 1 [0111.527] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0111.574] GetFileType (hFile=0xe8) returned 0x1 [0111.574] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0111.574] WriteFile (in: hFile=0xe8, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0111.667] GetFileType (hFile=0xe8) returned 0x1 [0111.667] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x9800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0111.667] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x36ba9f, lpOverlapped=0x0) returned 1 [0111.712] SetEvent (hEvent=0x7c) returned 1 [0111.731] GetFileType (hFile=0xe8) returned 0x1 [0111.731] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0111.732] WriteFile (in: hFile=0xe8, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x36ba9f, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429b48*=0x36ba9f, lpOverlapped=0x12429b54) returned 1 [0111.771] GetFileType (hFile=0xe8) returned 0x1 [0111.771] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x9b6ba9f, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0111.771] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0111.771] CloseHandle (hObject=0xe8) returned 1 [0111.772] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0111.773] SetEvent (hEvent=0x7c) returned 1 [0111.773] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0111.775] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0111.775] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0111.775] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0111.775] WriteFile (in: hFile=0xe8, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0111.776] CloseHandle (hObject=0xe8) returned 1 [0111.776] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124de000*, nNumberOfCharsToWrite=0x69, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124de000*, lpNumberOfCharsWritten=0x1242981c*=0x69) returned 1 [0111.777] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b)) returned 1 [0111.777] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1 [0111.777] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1 [0111.777] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1 [0111.777] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1 [0111.777] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.777] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0111.778] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.778] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0111.778] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0111.778] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0111.778] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0111.778] CloseHandle (hObject=0xe8) returned 1 [0111.778] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.779] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0111.779] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0111.816] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0111.817] WriteFile (in: hFile=0xe8, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0111.818] CloseHandle (hObject=0xe8) returned 1 [0111.818] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0111.818] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0111.818] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.818] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf47b6370, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xf47b6370, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0111.818] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xf47b6370, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xf47b6370, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.818] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xf47b6370, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xf47b6370, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xf47bb190, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0111.818] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0111.818] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0111.818] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0111.818] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0111.818] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0111.819] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0111.819] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0111.819] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0111.819] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0111.819] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0111.819] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0111.819] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0111.819] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0111.819] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0111.819] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0111.819] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0111.819] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0111.819] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0111.820] ReadFile (in: hFile=0xe8, lpBuffer=0x124c4700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0111.822] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0111.822] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0111.822] ReadFile (in: hFile=0xf0, lpBuffer=0x124c4800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0111.825] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0111.825] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0111.825] ReadFile (in: hFile=0x100, lpBuffer=0x124c4900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0111.828] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0111.829] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0111.829] ReadFile (in: hFile=0xdc, lpBuffer=0x124c4a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4a00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0111.831] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0111.831] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0111.831] ReadFile (in: hFile=0xc0, lpBuffer=0x124c4b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4b00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0111.834] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0111.834] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0111.834] ReadFile (in: hFile=0xe4, lpBuffer=0x124c4c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4c00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0111.845] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0111.845] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0111.845] ReadFile (in: hFile=0x98, lpBuffer=0x124c4d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4d00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0111.848] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0111.848] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0111.848] ReadFile (in: hFile=0xd0, lpBuffer=0x124c4e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4e00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0111.850] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0111.850] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0111.851] ReadFile (in: hFile=0xc8, lpBuffer=0x124c4f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4f00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0111.852] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0111.852] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0111.852] ReadFile (in: hFile=0xd8, lpBuffer=0x124c5000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c5000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0111.855] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0111.855] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0111.856] ReadFile (in: hFile=0xcc, lpBuffer=0x124c5100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c5100*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0111.857] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0111.858] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0111.859] ReadFile (in: hFile=0xe0, lpBuffer=0x124c5200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c5200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0111.860] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1 [0111.860] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0111.860] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0111.861] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e3a0 | out: pbBuffer=0x1240e3a0) returned 1 [0111.862] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2190 | out: pbBuffer=0x124e2190) returned 1 [0111.862] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c5302 | out: pbBuffer=0x124c5302) returned 1 [0111.862] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c5309 | out: pbBuffer=0x124c5309) returned 1 [0111.863] SetEvent (hEvent=0xb8) returned 1 [0111.863] ReadFile (in: hFile=0xbc, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0112.062] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0112.065] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0112.264] SetEvent (hEvent=0x7c) returned 1 [0112.264] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0112.361] SetEvent (hEvent=0x7c) returned 1 [0112.361] SwitchToThread () returned 1 [0112.472] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0113.065] SetEvent (hEvent=0xb8) returned 1 [0113.065] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0113.078] SetEvent (hEvent=0xb8) returned 1 [0113.078] SwitchToThread () returned 1 [0113.180] SetEvent (hEvent=0x7c) returned 1 [0113.180] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0113.577] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0113.662] SetEvent (hEvent=0xb8) returned 1 [0113.662] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0113.668] SetEvent (hEvent=0xb8) returned 1 [0113.668] SwitchToThread () returned 1 [0113.701] SetEvent (hEvent=0x7c) returned 1 [0113.701] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0113.913] SetEvent (hEvent=0x7c) returned 1 [0113.913] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0113.963] SetEvent (hEvent=0x7c) returned 1 [0113.963] SetEvent (hEvent=0xb8) returned 1 [0113.963] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0113.963] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0113.975] WriteFile (in: hFile=0xbc, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0113.975] CloseHandle (hObject=0xbc) returned 1 [0113.975] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124de000*, nNumberOfCharsToWrite=0x69, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124de000*, lpNumberOfCharsWritten=0x1242981c*=0x69) returned 1 [0113.978] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1 [0113.981] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1 [0113.981] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1 [0113.981] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061)) returned 1 [0113.982] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7)) returned 1 [0113.982] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0113.982] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0113.989] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e220 | out: pbBuffer=0x1240e220) returned 1 [0113.990] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c4002 | out: pbBuffer=0x124c4002) returned 1 [0113.990] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c4052 | out: pbBuffer=0x124c4052) returned 1 [0113.990] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c409b | out: pbBuffer=0x124c409b) returned 1 [0113.991] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0114.127] SetEvent (hEvent=0xb8) returned 1 [0114.127] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0114.128] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0114.128] SetEvent (hEvent=0xb8) returned 1 [0114.128] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0114.234] GetFileType (hFile=0xbc) returned 0x1 [0114.234] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0114.234] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0114.336] GetFileType (hFile=0xbc) returned 0x1 [0114.336] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0114.337] GetFileType (hFile=0xbc) returned 0x1 [0114.337] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0114.337] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0114.628] GetFileType (hFile=0xbc) returned 0x1 [0114.629] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0114.629] GetFileType (hFile=0xbc) returned 0x1 [0114.629] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0114.629] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0114.725] GetFileType (hFile=0xbc) returned 0x1 [0114.725] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0114.725] GetFileType (hFile=0xbc) returned 0x1 [0114.725] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0114.725] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0114.817] GetFileType (hFile=0xbc) returned 0x1 [0114.817] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0114.817] GetFileType (hFile=0xbc) returned 0x1 [0114.817] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0114.817] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0114.908] GetFileType (hFile=0xbc) returned 0x1 [0114.908] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0114.908] GetFileType (hFile=0xbc) returned 0x1 [0114.908] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0114.908] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0115.019] GetFileType (hFile=0xbc) returned 0x1 [0115.019] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0115.019] GetFileType (hFile=0xbc) returned 0x1 [0115.019] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0115.019] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0115.134] GetFileType (hFile=0xbc) returned 0x1 [0115.134] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0115.134] GetFileType (hFile=0xbc) returned 0x1 [0115.134] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0115.134] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0115.262] GetFileType (hFile=0xbc) returned 0x1 [0115.262] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0115.262] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0115.407] SetEvent (hEvent=0x7c) returned 1 [0115.407] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0115.410] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0115.410] SetEvent (hEvent=0x7c) returned 1 [0115.410] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0115.446] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0115.495] GetFileType (hFile=0xbc) returned 0x1 [0115.495] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0115.495] WriteFile (in: hFile=0xbc, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0115.609] GetFileType (hFile=0xbc) returned 0x1 [0115.609] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0115.609] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0115.753] SetEvent (hEvent=0xb8) returned 1 [0115.753] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0115.843] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0115.853] SetEvent (hEvent=0xb8) returned 1 [0115.858] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0115.867] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0115.915] GetFileType (hFile=0xbc) returned 0x1 [0115.915] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0115.915] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0116.018] GetFileType (hFile=0xbc) returned 0x1 [0116.018] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x1800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0116.018] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0116.156] SetEvent (hEvent=0x7c) returned 1 [0116.157] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0116.157] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0116.157] SetEvent (hEvent=0x7c) returned 1 [0116.157] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0116.212] GetFileType (hFile=0xbc) returned 0x1 [0116.212] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0116.212] WriteFile (in: hFile=0xbc, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0116.312] GetFileType (hFile=0xbc) returned 0x1 [0116.312] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x2000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0116.313] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0116.605] SetEvent (hEvent=0xb8) returned 1 [0116.606] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0116.634] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0116.634] SetEvent (hEvent=0xb8) returned 1 [0116.635] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0116.636] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0116.712] GetFileType (hFile=0xbc) returned 0x1 [0116.713] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0116.713] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0116.837] GetFileType (hFile=0xbc) returned 0x1 [0116.837] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x2800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0116.837] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0116.980] SetEvent (hEvent=0x7c) returned 1 [0116.980] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0116.980] SetEvent (hEvent=0x7c) returned 1 [0116.980] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0117.101] GetFileType (hFile=0xbc) returned 0x1 [0117.101] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0117.101] WriteFile (in: hFile=0xbc, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0117.194] GetFileType (hFile=0xbc) returned 0x1 [0117.194] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x3000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0117.194] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0117.345] SetEvent (hEvent=0xb8) returned 1 [0117.345] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0117.346] SetEvent (hEvent=0xb8) returned 1 [0117.346] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0117.394] GetFileType (hFile=0xbc) returned 0x1 [0117.394] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0117.395] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0117.491] GetFileType (hFile=0xbc) returned 0x1 [0117.491] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x3800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0117.491] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0117.636] SetEvent (hEvent=0x7c) returned 1 [0117.637] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0117.637] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0117.637] SetEvent (hEvent=0x7c) returned 1 [0117.637] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0117.685] GetFileType (hFile=0xbc) returned 0x1 [0117.685] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0117.686] WriteFile (in: hFile=0xbc, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0117.784] GetFileType (hFile=0xbc) returned 0x1 [0117.784] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x4000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0117.784] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0117.930] SetEvent (hEvent=0xb8) returned 1 [0117.930] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0117.930] SetEvent (hEvent=0xb8) returned 1 [0117.930] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0117.979] GetFileType (hFile=0xbc) returned 0x1 [0117.979] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0117.979] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0118.095] GetFileType (hFile=0xbc) returned 0x1 [0118.095] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x4800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0118.095] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0118.259] SetEvent (hEvent=0x7c) returned 1 [0118.259] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0118.260] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0118.260] SetEvent (hEvent=0x7c) returned 1 [0118.260] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0118.316] GetFileType (hFile=0xbc) returned 0x1 [0118.316] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0118.316] WriteFile (in: hFile=0xbc, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0118.415] GetFileType (hFile=0xbc) returned 0x1 [0118.416] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x5000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0118.416] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0118.513] SetEvent (hEvent=0xb8) returned 1 [0118.513] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0118.513] SetEvent (hEvent=0xb8) returned 1 [0118.513] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0118.562] GetFileType (hFile=0xbc) returned 0x1 [0118.562] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0118.562] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0118.661] GetFileType (hFile=0xbc) returned 0x1 [0118.661] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x5800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0118.661] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0119.112] SetEvent (hEvent=0xac) returned 1 [0119.113] SetEvent (hEvent=0x7c) returned 1 [0119.113] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0119.126] SetEvent (hEvent=0x7c) returned 1 [0119.126] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0119.180] GetFileType (hFile=0xbc) returned 0x1 [0119.180] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0119.180] WriteFile (in: hFile=0xbc, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0119.292] GetFileType (hFile=0xbc) returned 0x1 [0119.292] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x6000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0119.292] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0119.444] SetEvent (hEvent=0xb8) returned 1 [0119.444] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0119.448] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0119.448] SetEvent (hEvent=0xb8) returned 1 [0119.448] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0119.454] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0119.502] GetFileType (hFile=0xbc) returned 0x1 [0119.502] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0119.502] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0119.610] GetFileType (hFile=0xbc) returned 0x1 [0119.610] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x6800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0119.610] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0119.763] SetEvent (hEvent=0x7c) returned 1 [0119.763] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0119.771] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0119.771] SetEvent (hEvent=0x7c) returned 1 [0119.771] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0119.776] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0119.835] GetFileType (hFile=0xbc) returned 0x1 [0119.835] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0119.835] WriteFile (in: hFile=0xbc, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0119.933] GetFileType (hFile=0xbc) returned 0x1 [0119.933] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x7000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0119.933] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0120.098] SetEvent (hEvent=0xb8) returned 1 [0120.098] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0120.103] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0120.103] SetEvent (hEvent=0xb8) returned 1 [0120.104] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0120.105] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0120.153] GetFileType (hFile=0xbc) returned 0x1 [0120.153] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0120.153] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0120.259] GetFileType (hFile=0xbc) returned 0x1 [0120.259] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x7800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0120.259] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0120.413] SetEvent (hEvent=0x7c) returned 1 [0120.413] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0120.421] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0120.421] SetEvent (hEvent=0x7c) returned 1 [0120.421] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0120.427] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0120.484] GetFileType (hFile=0xbc) returned 0x1 [0120.484] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0120.484] WriteFile (in: hFile=0xbc, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0120.596] GetFileType (hFile=0xbc) returned 0x1 [0120.597] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x8000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0120.597] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0120.750] SetEvent (hEvent=0xb8) returned 1 [0120.750] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0120.799] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0120.799] SetEvent (hEvent=0xb8) returned 1 [0120.799] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0120.849] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0120.897] GetFileType (hFile=0xbc) returned 0x1 [0120.897] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0120.897] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0121.046] GetFileType (hFile=0xbc) returned 0x1 [0121.046] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x8800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0121.046] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0121.252] SetEvent (hEvent=0x7c) returned 1 [0121.253] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0121.308] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0121.308] SetEvent (hEvent=0x7c) returned 1 [0121.308] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0121.359] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0121.463] GetFileType (hFile=0xbc) returned 0x1 [0121.463] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0121.463] WriteFile (in: hFile=0xbc, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0121.577] GetFileType (hFile=0xbc) returned 0x1 [0121.577] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x9000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0121.577] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0121.775] SetEvent (hEvent=0xb8) returned 1 [0121.776] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0121.785] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0121.785] SetEvent (hEvent=0xb8) returned 1 [0121.785] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0121.789] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0121.839] GetFileType (hFile=0xbc) returned 0x1 [0121.839] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0121.839] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0121.939] GetFileType (hFile=0xbc) returned 0x1 [0121.939] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x9800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0121.939] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0122.101] SetEvent (hEvent=0x7c) returned 1 [0122.101] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0122.103] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0122.103] SetEvent (hEvent=0x7c) returned 1 [0122.103] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0122.157] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0122.216] GetFileType (hFile=0xbc) returned 0x1 [0122.216] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0122.216] WriteFile (in: hFile=0xbc, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0122.337] GetFileType (hFile=0xbc) returned 0x1 [0122.337] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xa000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0122.337] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0122.488] SetEvent (hEvent=0xb8) returned 1 [0122.488] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0122.492] SetEvent (hEvent=0xb8) returned 1 [0122.492] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0122.500] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0122.548] GetFileType (hFile=0xbc) returned 0x1 [0122.548] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0122.549] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0122.661] GetFileType (hFile=0xbc) returned 0x1 [0122.661] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xa800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0122.661] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0122.828] SetEvent (hEvent=0x7c) returned 1 [0122.828] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0122.842] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0122.842] SetEvent (hEvent=0x7c) returned 1 [0122.843] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0122.895] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0122.943] GetFileType (hFile=0xbc) returned 0x1 [0122.943] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0122.943] WriteFile (in: hFile=0xbc, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0123.091] GetFileType (hFile=0xbc) returned 0x1 [0123.091] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xb000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0123.091] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0123.220] SetEvent (hEvent=0xb8) returned 1 [0123.220] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0123.250] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0123.250] SetEvent (hEvent=0xb8) returned 1 [0123.250] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0123.303] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0123.402] GetFileType (hFile=0xbc) returned 0x1 [0123.402] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0123.402] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0123.527] GetFileType (hFile=0xbc) returned 0x1 [0123.527] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xb800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0123.527] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x1fa2f7, lpOverlapped=0x0) returned 1 [0123.566] GetFileType (hFile=0xbc) returned 0x1 [0123.566] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0123.566] WriteFile (in: hFile=0xbc, lpBuffer=0x124f2000*, nNumberOfBytesToWrite=0x1fa2f7, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124f2000*, lpNumberOfBytesWritten=0x12429b48*=0x1fa2f7, lpOverlapped=0x12429b54) returned 1 [0123.582] GetFileType (hFile=0xbc) returned 0x1 [0123.582] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xb9fa2f7, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0123.582] ReadFile (in: hFile=0xbc, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0123.582] CloseHandle (hObject=0xbc) returned 1 [0123.609] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0123.610] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0123.612] WriteFile (in: hFile=0xbc, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0123.612] CloseHandle (hObject=0xbc) returned 1 [0123.714] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124de000*, nNumberOfCharsToWrite=0x69, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124de000*, lpNumberOfCharsWritten=0x1242981c*=0x69) returned 1 [0123.720] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800)) returned 1 [0123.721] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213)) returned 1 [0123.721] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1 [0123.721] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1 [0123.721] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1 [0123.721] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1 [0123.721] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.721] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.721] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.721] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.721] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0123.722] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0057-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0123.722] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0123.772] CloseHandle (hObject=0xbc) returned 1 [0123.772] CreateFileW (lpFileName="C:/PerfLogs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0123.773] FindFirstFileW (in: lpFileName="C:/PerfLogs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429ba0 | out: lpFindFileData=0x12429ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.773] CreateFileW (lpFileName="C:/PerfLogs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0123.773] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429e60 | out: lpMode=0x12429e60) returned 0 [0123.825] WriteFile (in: hFile=0xbc, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429e64, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429e64*=0x1033, lpOverlapped=0x0) returned 1 [0124.299] SetEvent (hEvent=0xac) returned 1 [0124.299] CloseHandle (hObject=0xbc) returned 1 [0124.299] GetFileAttributesW (lpFileName="C:/PerfLogs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\@_read_to_recover_files_@.txt")) returned 0x20 [0124.300] SetFileAttributesW (lpFileName="C:/PerfLogs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0124.300] CreateFileW (lpFileName="C:/PerfLogs" (normalized: "c:\\perflogs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.300] FindFirstFileW (in: lpFileName="C:/PerfLogs\\*", lpFindFileData=0x12429ad4 | out: lpFindFileData=0x12429ad4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfb6f8a30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfb6f8a30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.300] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfb6f8a30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfb6f8a30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.300] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xfb6f8a30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfb6f8a30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbbd6bb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0124.300] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0124.300] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.300] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.300] CreateFileW (lpFileName="C:/PerfLogs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.300] FindFirstFileW (in: lpFileName="C:/PerfLogs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.301] CreateFileW (lpFileName="C:/PerfLogs/Admin" (normalized: "c:\\perflogs\\admin"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.301] FindFirstFileW (in: lpFileName="C:/PerfLogs/Admin\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.301] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.301] CreateFileW (lpFileName="C:/PerfLogs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.301] FindFirstFileW (in: lpFileName="C:/PerfLogs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.301] CreateFileW (lpFileName="C:/PerfLogs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.301] FindFirstFileW (in: lpFileName="C:/PerfLogs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429af0 | out: lpFindFileData=0x12429af0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.301] GetFileAttributesW (lpFileName="C:/PerfLogs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0124.301] CreateFileW (lpFileName="C:/PerfLogs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0124.301] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429cf4 | out: lpMode=0x12429cf4) returned 0 [0124.360] CloseHandle (hObject=0xbc) returned 1 [0124.360] CreateFileW (lpFileName="C:/PerfLogs/Admin\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\admin\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.361] FindFirstFileW (in: lpFileName="C:/PerfLogs/Admin\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.361] CreateFileW (lpFileName="C:/PerfLogs/Admin\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\admin\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0124.414] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429db8 | out: lpMode=0x12429db8) returned 0 [0124.467] WriteFile (in: hFile=0xbc, lpBuffer=0x12774000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429dbc, lpOverlapped=0x0 | out: lpBuffer=0x12774000*, lpNumberOfBytesWritten=0x12429dbc*=0x1033, lpOverlapped=0x0) returned 1 [0124.468] CloseHandle (hObject=0xbc) returned 1 [0124.468] GetFileAttributesW (lpFileName="C:/PerfLogs/Admin\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\admin\\@_read_to_recover_files_@.txt")) returned 0x20 [0124.468] SetFileAttributesW (lpFileName="C:/PerfLogs/Admin\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0124.468] CreateFileW (lpFileName="C:/PerfLogs/Admin" (normalized: "c:\\perflogs\\admin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.468] FindFirstFileW (in: lpFileName="C:/PerfLogs/Admin\\*", lpFindFileData=0x12429a2c | out: lpFindFileData=0x12429a2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbd06ee0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbd06ee0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.468] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfbd06ee0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbd06ee0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.468] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xfbd06ee0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfbd06ee0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbd85e20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0124.468] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.469] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.469] CreateFileW (lpFileName="C:/PerfLogs/Admin/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\admin\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.469] FindFirstFileW (in: lpFileName="C:/PerfLogs/Admin/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.469] CreateFileW (lpFileName="C:/PerfLogs/Admin/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\admin\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.469] FindFirstFileW (in: lpFileName="C:/PerfLogs/Admin/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.469] CreateFileW (lpFileName="C:/PerfLogs/Admin/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\admin\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.469] FindFirstFileW (in: lpFileName="C:/PerfLogs/Admin/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.469] GetFileAttributesW (lpFileName="C:/PerfLogs/Admin/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\admin\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0124.469] CreateFileW (lpFileName="C:/PerfLogs/Admin/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\perflogs\\admin\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0124.469] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c4c | out: lpMode=0x12429c4c) returned 0 [0124.486] CloseHandle (hObject=0xbc) returned 1 [0124.487] CreateFileW (lpFileName="C:/Recovery\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.487] FindFirstFileW (in: lpFileName="C:/Recovery\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429ba0 | out: lpFindFileData=0x12429ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.487] CreateFileW (lpFileName="C:/Recovery\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0124.487] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429e60 | out: lpMode=0x12429e60) returned 0 [0124.493] WriteFile (in: hFile=0xbc, lpBuffer=0x12776600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429e64, lpOverlapped=0x0 | out: lpBuffer=0x12776600*, lpNumberOfBytesWritten=0x12429e64*=0x1033, lpOverlapped=0x0) returned 1 [0124.494] CloseHandle (hObject=0xbc) returned 1 [0124.494] GetFileAttributesW (lpFileName="C:/Recovery\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\@_read_to_recover_files_@.txt")) returned 0x2020 [0124.494] SetFileAttributesW (lpFileName="C:/Recovery\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0124.494] CreateFileW (lpFileName="C:/Recovery" (normalized: "c:\\recovery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.494] FindFirstFileW (in: lpFileName="C:/Recovery\\*", lpFindFileData=0x12429ad4 | out: lpFindFileData=0x12429ad4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfbdaf630, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbdaf630, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.495] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfbdaf630, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbdaf630, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.495] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfbdaf630, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfbdaf630, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbdc2eb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0124.495] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 1 [0124.495] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.495] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.495] CreateFileW (lpFileName="C:/Recovery/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.495] FindFirstFileW (in: lpFileName="C:/Recovery/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.495] CreateFileW (lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.495] FindFirstFileW (in: lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.495] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.495] CreateFileW (lpFileName="C:/Recovery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.496] FindFirstFileW (in: lpFileName="C:/Recovery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.496] CreateFileW (lpFileName="C:/Recovery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.496] FindFirstFileW (in: lpFileName="C:/Recovery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429af0 | out: lpFindFileData=0x12429af0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.496] GetFileAttributesW (lpFileName="C:/Recovery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0124.496] CreateFileW (lpFileName="C:/Recovery/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0124.496] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429cf4 | out: lpMode=0x12429cf4) returned 0 [0124.504] CloseHandle (hObject=0xbc) returned 1 [0124.504] CreateFileW (lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.504] FindFirstFileW (in: lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.504] CreateFileW (lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0124.508] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429db8 | out: lpMode=0x12429db8) returned 0 [0124.508] WriteFile (in: hFile=0xbc, lpBuffer=0x12778c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429dbc, lpOverlapped=0x0 | out: lpBuffer=0x12778c00*, lpNumberOfBytesWritten=0x12429dbc*=0x1033, lpOverlapped=0x0) returned 1 [0124.509] CloseHandle (hObject=0xbc) returned 1 [0124.510] GetFileAttributesW (lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\@_read_to_recover_files_@.txt")) returned 0x2020 [0124.510] SetFileAttributesW (lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0124.510] CreateFileW (lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.510] FindFirstFileW (in: lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x12429a2c | out: lpFindFileData=0x12429a2c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfbde2a80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbde2a80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.510] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfbde2a80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbde2a80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.510] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfbde2a80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfbde2a80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbde78a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0124.510] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0124.510] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1 [0124.510] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.510] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.510] CreateFileW (lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.510] FindFirstFileW (in: lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.510] CreateFileW (lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b/Winre.wim" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0124.513] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429d18 | out: lpMode=0x12429d18) returned 0 [0124.513] ReadFile (in: hFile=0xbc, lpBuffer=0x124c4600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429d28, lpOverlapped=0x0 | out: lpBuffer=0x124c4600*, lpNumberOfBytesRead=0x12429d28*=0x100, lpOverlapped=0x0) returned 1 [0124.533] SetEvent (hEvent=0xac) returned 1 [0124.533] CreateFileW (lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b/boot.sdi" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0124.534] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429d18 | out: lpMode=0x12429d18) returned 0 [0124.534] ReadFile (in: hFile=0xe8, lpBuffer=0x124c4700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429d28, lpOverlapped=0x0 | out: lpBuffer=0x124c4700*, lpNumberOfBytesRead=0x12429d28*=0x100, lpOverlapped=0x0) returned 1 [0124.555] GetFileAttributesExW (in: lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b/Winre.wim" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim"), fInfoLevelId=0x0, lpFileInformation=0x12429b00 | out: lpFileInformation=0x12429b00*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012)) returned 1 [0124.555] GetFileAttributesExW (in: lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b/boot.sdi" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi"), fInfoLevelId=0x0, lpFileInformation=0x12429b00 | out: lpFileInformation=0x12429b00*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000)) returned 1 [0124.572] SetEvent (hEvent=0xac) returned 1 [0124.572] CreateFileW (lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.572] FindFirstFileW (in: lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.573] CreateFileW (lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.573] FindFirstFileW (in: lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.573] GetFileAttributesW (lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0124.573] CreateFileW (lpFileName="C:/Recovery/e9e23962-4a25-11e7-88e8-91fb2ec43f0b/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0124.573] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429c4c | out: lpMode=0x12429c4c) returned 0 [0124.573] CloseHandle (hObject=0xf0) returned 1 [0124.573] CreateFileW (lpFileName="C:/Users\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.574] FindFirstFileW (in: lpFileName="C:/Users\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429ba0 | out: lpFindFileData=0x12429ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.574] CreateFileW (lpFileName="C:/Users\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.574] FindFirstFileW (in: lpFileName="C:/Users\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429b98 | out: lpFindFileData=0x12429b98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.574] GetFileAttributesW (lpFileName="C:/Users\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\@_read_to_recover_files_@.txt")) returned 0x21 [0124.574] SetFileAttributesW (lpFileName="C:/Users\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0124.575] CreateFileW (lpFileName="C:/Users" (normalized: "c:\\users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.575] FindFirstFileW (in: lpFileName="C:/Users\\*", lpFindFileData=0x12429ad4 | out: lpFindFileData=0x12429ad4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xceb27200, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb27200, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.575] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xceb27200, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb27200, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.575] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0124.575] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xceb24af0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xceb24af0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xceb29910, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0124.575] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0124.575] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0124.575] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0124.575] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.575] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0124.575] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429b50 | out: lpFindFileData=0x12429b50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.575] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.575] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.575] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.575] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.575] CreateFileW (lpFileName="C:/Users/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.576] FindFirstFileW (in: lpFileName="C:/Users/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.576] CreateFileW (lpFileName="C:/Users/All Users" (normalized: "c:\\users\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.576] FindFirstFileW (in: lpFileName="C:/Users/All Users\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcbb892f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcbb892f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.576] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.576] CreateFileW (lpFileName="C:/Users/Default" (normalized: "c:\\users\\default"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.576] FindFirstFileW (in: lpFileName="C:/Users/Default\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.576] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.576] CreateFileW (lpFileName="C:/Users/Default User" (normalized: "c:\\users\\default user"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.576] FindFirstFileW (in: lpFileName="C:/Users/Default User\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.577] CreateFileW (lpFileName="C:/Users/Public" (normalized: "c:\\users\\public"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.577] FindFirstFileW (in: lpFileName="C:/Users/Public\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.577] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.577] CreateFileW (lpFileName="C:/Users/desktop.ini" (normalized: "c:\\users\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0124.577] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429dc0 | out: lpMode=0x12429dc0) returned 0 [0124.579] ReadFile (in: hFile=0xf0, lpBuffer=0x124c4800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429dd0, lpOverlapped=0x0 | out: lpBuffer=0x124c4800*, lpNumberOfBytesRead=0x12429dd0*=0xae, lpOverlapped=0x0) returned 1 [0124.580] GetFileAttributesExW (in: lpFileName="C:/Users/desktop.ini" (normalized: "c:\\users\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429ba8 | out: lpFileInformation=0x12429ba8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0124.580] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.580] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.580] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0124.581] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429db8 | out: lpMode=0x12429db8) returned 0 [0124.589] WriteFile (in: hFile=0x100, lpBuffer=0x12494600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429dbc, lpOverlapped=0x0 | out: lpBuffer=0x12494600*, lpNumberOfBytesWritten=0x12429dbc*=0x1033, lpOverlapped=0x0) returned 1 [0124.590] CloseHandle (hObject=0x100) returned 1 [0124.590] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\@_read_to_recover_files_@.txt")) returned 0x20 [0124.590] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0124.590] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.590] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x12429a2c | out: lpFindFileData=0x12429a2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfbe84470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbe84470, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.590] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfbe84470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbe84470, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xfbe84470, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfbe84470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbeaa5d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc46c41e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xc46c41e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbcdaa2a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbcdaa2a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbcdf6560, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbcdf6560, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c30f920, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2c30f920, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c16ca00, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbcedada0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbcedada0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0124.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0124.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0124.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0124.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0124.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0124.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0124.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbce8eae0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbce8eae0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0124.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.592] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.592] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.592] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.592] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.592] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.592] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.592] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Application Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.592] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Application Data\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.593] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.593] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.593] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.593] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.593] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Cookies\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.593] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.593] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc46c41e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xc46c41e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.593] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.593] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.594] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbcdaa2a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbcdaa2a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.594] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.594] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.594] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.594] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.594] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.594] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.594] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.595] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.595] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.595] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.595] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Local Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.595] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Local Settings\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.595] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.595] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbcdf6560, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbcdf6560, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.596] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.596] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/My Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.596] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/My Documents\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.596] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.596] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.596] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.597] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.597] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.597] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.597] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.597] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.597] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NetHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.597] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NetHood\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.597] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.597] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbcedada0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbcedada0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.598] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.598] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/PrintHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.598] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/PrintHood\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.598] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Recent" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.598] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Recent\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.598] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.598] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.599] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.599] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.599] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.599] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.599] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/SendTo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.599] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/SendTo\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.599] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Start Menu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.599] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Start Menu\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.600] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Templates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.600] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Templates\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.600] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.600] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbce8eae0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbce8eae0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.600] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.600] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.600] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG1\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.600] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.601] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG2\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.601] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0124.601] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429d18 | out: lpMode=0x12429d18) returned 0 [0124.611] ReadFile (in: hFile=0x100, lpBuffer=0x124c4f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429d28, lpOverlapped=0x0 | out: lpBuffer=0x124c4f00*, lpNumberOfBytesRead=0x12429d28*=0x14, lpOverlapped=0x0) returned 1 [0124.619] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429b00 | out: lpFileInformation=0x12429b00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1 [0124.619] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.620] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.620] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.620] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.620] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0124.620] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0124.620] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c4c | out: lpMode=0x12429c4c) returned 0 [0124.644] CloseHandle (hObject=0xdc) returned 1 [0124.644] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.644] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.644] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0124.655] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0124.664] WriteFile (in: hFile=0xdc, lpBuffer=0x12496c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12496c00*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0124.665] CloseHandle (hObject=0xdc) returned 1 [0124.665] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\@_read_to_recover_files_@.txt")) returned 0x2020 [0124.665] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0124.666] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.666] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfbf2bc20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbf2bc20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.666] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfbf2bc20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbf2bc20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.666] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfbf2bc20, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfbf2bc20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbf3cd90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0124.666] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0124.666] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0124.666] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbcfbf5e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbcfbf5e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0124.666] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.666] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.666] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.666] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.666] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.667] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.667] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.667] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.667] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.667] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.667] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.668] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbcfbf5e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbcfbf5e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.668] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.668] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.668] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.668] VirtualAlloc (lpAddress=0x12be8000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x12be8000 [0124.669] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.669] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.669] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0124.669] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0124.669] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0124.676] CloseHandle (hObject=0xdc) returned 1 [0124.676] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.677] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0124.677] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0124.692] WriteFile (in: hFile=0xdc, lpBuffer=0x12be9300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12be9300*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0124.693] CloseHandle (hObject=0xdc) returned 1 [0124.693] VirtualAlloc (lpAddress=0x12bee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12bee000 [0124.693] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\@_read_to_recover_files_@.txt")) returned 0x2020 [0124.694] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0124.694] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.694] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfbf5a250, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbf5a250, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.694] VirtualAlloc (lpAddress=0x12bf0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12bf0000 [0124.694] VirtualAlloc (lpAddress=0x12bf2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12bf2000 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfbf5a250, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbf5a250, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfbf57b40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfbf57b40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfbf7c530, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9fc540, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x126775, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc7dcfea0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xc7dcfea0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0124.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.696] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.696] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.696] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.696] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.696] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.696] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.696] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Application Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.696] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Application Data\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.697] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.697] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.697] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.697] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.697] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.698] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.698] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0124.698] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0124.705] ReadFile (in: hFile=0xdc, lpBuffer=0x124c5300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c5300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0124.714] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.715] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.715] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.715] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.715] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/History\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.715] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0124.715] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0124.721] ReadFile (in: hFile=0xc0, lpBuffer=0x124c5400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c5400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0124.722] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.722] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.722] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.722] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.722] VirtualAlloc (lpAddress=0x12bf4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12bf4000 [0124.723] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.723] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.723] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.723] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.724] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.724] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.724] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc7dcfea0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xc7dcfea0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.724] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.724] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temporary Internet Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temporary internet files"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.724] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temporary Internet Files\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.724] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.724] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.725] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.725] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918)) returned 1 [0124.725] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0124.725] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0124.733] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240f180 | out: pbBuffer=0x1240f180) returned 1 [0124.734] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c5802 | out: pbBuffer=0x124c5802) returned 1 [0124.734] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c5828 | out: pbBuffer=0x124c5828) returned 1 [0124.734] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c58c2 | out: pbBuffer=0x124c58c2) returned 1 [0124.734] VirtualAlloc (lpAddress=0x12bf6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12bf6000 [0124.735] VirtualAlloc (lpAddress=0x12bf8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12bf8000 [0124.735] VirtualAlloc (lpAddress=0x12bfa000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x12bfa000 [0124.735] VirtualAlloc (lpAddress=0x12bfe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12bfe000 [0124.737] SetEvent (hEvent=0x7c) returned 1 [0124.737] ReadFile (in: hFile=0xe4, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429abc*=0x1a918, lpOverlapped=0x0) returned 1 [0124.737] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0124.743] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0124.743] SetEvent (hEvent=0x7c) returned 1 [0124.743] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0124.750] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0124.752] GetFileType (hFile=0xe4) returned 0x1 [0124.752] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0124.752] WriteFile (in: hFile=0xe4, lpBuffer=0x127cc000*, nNumberOfBytesToWrite=0x1a918, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127cc000*, lpNumberOfBytesWritten=0x12429aa0*=0x1a918, lpOverlapped=0x12429aac) returned 1 [0124.752] GetFileType (hFile=0xe4) returned 0x1 [0124.752] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x1a918, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0124.752] ReadFile (in: hFile=0xe4, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0124.752] CloseHandle (hObject=0xe4) returned 1 [0124.753] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0124.753] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0124.755] WriteFile (in: hFile=0xe4, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0124.755] CloseHandle (hObject=0xe4) returned 1 [0124.755] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x12429774*=0x5d) returned 1 [0124.761] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9fc540, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x126775)) returned 1 [0124.761] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0124.761] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0124.771] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e220 | out: pbBuffer=0x1240e220) returned 1 [0124.772] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c4102 | out: pbBuffer=0x124c4102) returned 1 [0124.773] SetEvent (hEvent=0x7c) returned 1 [0124.774] ReadFile (in: hFile=0xe4, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429abc*=0x126775, lpOverlapped=0x0) returned 1 [0124.791] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0124.796] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0124.796] SetEvent (hEvent=0x7c) returned 1 [0124.796] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0124.804] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0124.811] GetFileType (hFile=0xe4) returned 0x1 [0124.811] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0124.811] WriteFile (in: hFile=0xe4, lpBuffer=0x124f2000*, nNumberOfBytesToWrite=0x126775, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124f2000*, lpNumberOfBytesWritten=0x12429aa0*=0x126775, lpOverlapped=0x12429aac) returned 1 [0124.819] GetFileType (hFile=0xe4) returned 0x1 [0124.819] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x126775, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0124.819] ReadFile (in: hFile=0xe4, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0124.819] CloseHandle (hObject=0xe4) returned 1 [0124.820] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0124.820] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0124.833] WriteFile (in: hFile=0xe4, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0124.833] CloseHandle (hObject=0xe4) returned 1 [0124.833] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d8000*, nNumberOfCharsToWrite=0x56, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124d8000*, lpNumberOfCharsWritten=0x12429774*=0x56) returned 1 [0124.839] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.839] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.840] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.840] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0124.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0124.840] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0124.848] CloseHandle (hObject=0xe4) returned 1 [0124.848] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.848] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.848] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0124.854] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0124.859] WriteFile (in: hFile=0xe4, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0124.860] CloseHandle (hObject=0xe4) returned 1 [0124.860] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\@_read_to_recover_files_@.txt")) returned 0x2020 [0124.860] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0124.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.861] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfc0fba00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc0fba00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.861] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfc0fba00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc0fba00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.861] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc0fba00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc0fba00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc10a460, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0124.861] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0124.861] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0124.861] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.861] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.861] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.861] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.862] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.862] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.862] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.862] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.862] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.862] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.862] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.862] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.862] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0124.862] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0124.863] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0124.866] CloseHandle (hObject=0xe4) returned 1 [0124.866] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.866] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.866] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0124.867] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0124.869] WriteFile (in: hFile=0xe4, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0124.873] CloseHandle (hObject=0xe4) returned 1 [0124.874] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\@_read_to_recover_files_@.txt")) returned 0x2020 [0124.874] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0124.874] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.874] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfc118ec0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc118ec0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.874] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfc118ec0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc118ec0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.874] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0124.874] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc118ec0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc118ec0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc12a030, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0124.874] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.874] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.874] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.874] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.875] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.876] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.876] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.876] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.877] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.877] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0124.886] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0124.887] WriteFile (in: hFile=0xe4, lpBuffer=0x12773300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12773300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0124.888] CloseHandle (hObject=0xe4) returned 1 [0124.888] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0124.888] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0124.888] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.888] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfc144de0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc144de0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.889] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfc144de0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc144de0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.889] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc144de0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc144de0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc149c00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0124.889] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt10.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0124.889] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd9c071a0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt10.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0124.889] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0124.889] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0124.889] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0124.889] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.889] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.889] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.889] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.889] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/AdobeCMapFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0124.889] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0124.895] ReadFile (in: hFile=0xe4, lpBuffer=0x124c4300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124c4300*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0124.909] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/AdobeSysFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0124.918] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0124.931] ReadFile (in: hFile=0x100, lpBuffer=0x124c4400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124c4400*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0124.943] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.943] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.944] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.946] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/SharedDataEvents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0124.950] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0124.963] ReadFile (in: hFile=0xbc, lpBuffer=0x12454000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12454000*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0124.974] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0124.974] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0124.974] ReadFile (in: hFile=0xe8, lpBuffer=0x12454100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12454100*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0124.976] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/AdobeCMapFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c)) returned 1 [0124.976] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/AdobeSysFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd9c071a0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb)) returned 1 [0124.976] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/SharedDataEvents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0124.981] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5)) returned 1 [0124.981] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0124.982] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0124.982] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0124.983] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410090 | out: pbBuffer=0x12410090) returned 1 [0124.983] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12454202 | out: pbBuffer=0x12454202) returned 1 [0124.985] SetEvent (hEvent=0xb8) returned 1 [0124.985] ReadFile (in: hFile=0xf0, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x12ea5, lpOverlapped=0x0) returned 1 [0124.986] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0124.986] SetEvent (hEvent=0xb8) returned 1 [0124.986] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0124.987] GetFileType (hFile=0xf0) returned 0x1 [0124.987] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0124.988] WriteFile (in: hFile=0xf0, lpBuffer=0x127cc000*, nNumberOfBytesToWrite=0x12ea5, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x127cc000*, lpNumberOfBytesWritten=0x124298a8*=0x12ea5, lpOverlapped=0x124298b4) returned 1 [0124.988] GetFileType (hFile=0xf0) returned 0x1 [0124.988] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x12ea5, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0124.988] ReadFile (in: hFile=0xf0, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0124.988] CloseHandle (hObject=0xf0) returned 1 [0124.988] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0124.988] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0124.989] WriteFile (in: hFile=0xf0, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0124.989] CloseHandle (hObject=0xf0) returned 1 [0124.989] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d8000*, nNumberOfCharsToWrite=0x6a, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124d8000*, lpNumberOfCharsWritten=0x1242957c*=0x6a) returned 1 [0124.990] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.990] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.990] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.990] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.990] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0124.990] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0124.990] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0124.991] CloseHandle (hObject=0xf0) returned 1 [0124.991] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.991] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.991] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0124.991] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0124.991] WriteFile (in: hFile=0xf0, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0124.993] CloseHandle (hObject=0xf0) returned 1 [0124.993] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0124.993] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0124.993] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.993] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xfc242c60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc242c60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0124.993] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xfc242c60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc242c60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.993] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc242c60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc242c60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc245370, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0124.993] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0124.993] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.993] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0124.993] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.994] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0124.994] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache/AcroFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0124.994] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0124.994] ReadFile (in: hFile=0xf0, lpBuffer=0x12454600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12454600*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.009] SetEvent (hEvent=0xac) returned 1 [0125.009] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache/AcroFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4)) returned 1 [0125.018] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.018] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.018] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.019] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.019] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.019] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/10.0/Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0125.019] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0125.019] CloseHandle (hObject=0xbc) returned 1 [0125.019] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.019] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.019] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.019] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.019] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.020] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0125.020] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0125.020] CloseHandle (hObject=0xbc) returned 1 [0125.020] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.020] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.020] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0125.021] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0125.021] WriteFile (in: hFile=0xbc, lpBuffer=0x1245a600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1245a600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0125.022] CloseHandle (hObject=0xbc) returned 1 [0125.022] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.022] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.023] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.023] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfc284b10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc284b10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.023] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfc284b10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc284b10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.023] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc284b10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc284b10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc289930, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.023] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0125.023] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0125.023] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.023] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.023] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.023] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.023] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/ACECache11.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0125.023] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0125.024] ReadFile (in: hFile=0xbc, lpBuffer=0x127f4000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x127f4000*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0125.029] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.029] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.030] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.030] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/ACECache11.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c)) returned 1 [0125.030] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.030] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.030] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.031] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.031] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.031] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0125.031] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0125.031] CloseHandle (hObject=0xe8) returned 1 [0125.031] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.031] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.031] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0125.032] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0125.032] WriteFile (in: hFile=0xe8, lpBuffer=0x1245cc00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1245cc00*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0125.033] CloseHandle (hObject=0xe8) returned 1 [0125.033] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.033] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.034] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.034] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfc29f8c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc29f8c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.034] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xfc29f8c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc29f8c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.034] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc29f8c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc29f8c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc2a46e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.034] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0125.034] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0125.034] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.034] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.034] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.034] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.034] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles/wsRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0125.035] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0125.035] ReadFile (in: hFile=0xe8, lpBuffer=0x127f4100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x127f4100*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0125.045] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles/wscRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.045] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0125.045] ReadFile (in: hFile=0xe4, lpBuffer=0x127f4200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x127f4200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0125.047] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles/wsRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74)) returned 1 [0125.047] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles/wscRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0)) returned 1 [0125.050] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.050] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.050] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.050] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.050] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.050] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Adobe/Color/Profiles/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.050] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0125.050] CloseHandle (hObject=0x100) returned 1 [0125.051] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.051] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Application Data\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.051] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.051] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Application Data\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.051] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data\\@_read_to_recover_files_@.txt")) returned 0x2021 [0125.051] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Application Data\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.051] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Application Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.051] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Application Data\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.052] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.052] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.052] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.053] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0125.053] WriteFile (in: hFile=0x100, lpBuffer=0x124a2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124a2600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0125.054] CloseHandle (hObject=0x100) returned 1 [0125.054] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.054] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.054] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.054] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc2d2d10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc2d2d10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.054] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc2d2d10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc2d2d10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.054] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 1 [0125.054] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc2d2d10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc2d2d10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc2d7b30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.055] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.055] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.055] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.055] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.055] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.055] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.055] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.055] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.055] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.055] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.056] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0125.056] WriteFile (in: hFile=0x100, lpBuffer=0x124a3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124a3900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0125.057] CloseHandle (hObject=0x100) returned 1 [0125.057] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.057] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.057] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.057] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc2da240, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc2da240, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc2da240, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc2da240, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc2da240, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc2da240, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc2df060, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0125.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 1 [0125.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.058] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.058] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.058] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.058] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.058] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.058] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.058] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.059] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.060] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.060] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.060] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.060] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.060] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.060] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.060] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.060] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0125.060] CloseHandle (hObject=0x100) returned 1 [0125.061] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.061] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.061] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.062] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0125.062] WriteFile (in: hFile=0x100, lpBuffer=0x124aa000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124aa000*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0125.063] CloseHandle (hObject=0x100) returned 1 [0125.063] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.063] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.063] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.063] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc2e8ca0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc2e8ca0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.063] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc2e8ca0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc2e8ca0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.063] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc2e8ca0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc2e8ca0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc2eb3b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.063] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 1 [0125.063] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.063] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.064] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.064] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.064] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.064] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.065] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.066] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.066] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.066] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.066] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.066] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.066] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.067] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0125.067] CloseHandle (hObject=0x100) returned 1 [0125.067] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.068] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.068] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.068] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0125.069] WriteFile (in: hFile=0x100, lpBuffer=0x124ac600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124ac600*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0125.070] CloseHandle (hObject=0x100) returned 1 [0125.070] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.070] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.070] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.070] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc2f9e10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc2f9e10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.070] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc2f9e10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc2f9e10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.071] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc2f9e10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc2f9e10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc2fc520, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.071] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", cAlternateFileName="CLICEX~1.000")) returned 1 [0125.071] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1 [0125.071] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 1 [0125.071] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.071] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.071] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.071] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.071] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.071] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.074] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.074] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.074] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.076] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.077] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.077] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.078] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.079] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.079] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.079] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.079] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.079] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.079] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.079] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0125.079] CloseHandle (hObject=0x100) returned 1 [0125.080] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.080] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.080] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.081] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0125.082] WriteFile (in: hFile=0x100, lpBuffer=0x124aec00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x124aec00*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0125.083] CloseHandle (hObject=0x100) returned 1 [0125.083] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.083] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.083] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.083] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc3172d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc3172d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.083] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc3172d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc3172d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.083] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc314bc0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc314bc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc3199e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.083] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0125.083] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.084] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.084] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.084] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.084] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715/GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.084] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.084] ReadFile (in: hFile=0x100, lpBuffer=0x127f4f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127f4f00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.114] SetEvent (hEvent=0xac) returned 1 [0125.114] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715/GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58)) returned 1 [0125.117] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.117] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.117] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.117] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.117] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.118] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0125.118] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0125.118] CloseHandle (hObject=0xdc) returned 1 [0125.118] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.119] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.119] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0125.125] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0125.125] WriteFile (in: hFile=0xdc, lpBuffer=0x12783300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12783300*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0125.126] CloseHandle (hObject=0xdc) returned 1 [0125.126] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.126] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.127] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.127] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc366c40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc366c40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc366c40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc366c40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc366c40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc366c40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc366c40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a307ea0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe", cAlternateFileName="CLICKO~1.EXE")) returned 1 [0125.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.cdf-ms", cAlternateFileName="")) returned 1 [0125.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.manifest", cAlternateFileName="")) returned 1 [0125.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.cdf-ms", cAlternateFileName="CLICKO~1.CDF")) returned 1 [0125.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.manifest", cAlternateFileName="CLICKO~1.MAN")) returned 1 [0125.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="")) returned 1 [0125.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.127] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.127] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.127] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.127] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0125.128] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.128] ReadFile (in: hFile=0xdc, lpBuffer=0x127f5000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127f5000*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.128] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0125.128] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.128] ReadFile (in: hFile=0xc0, lpBuffer=0x127f5100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127f5100*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.140] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/clickonce_bootstrap.exe.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0125.140] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.140] ReadFile (in: hFile=0x98, lpBuffer=0x127f5200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127f5200*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.143] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0125.143] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.143] ReadFile (in: hFile=0xd0, lpBuffer=0x127f5300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127f5300*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.145] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/clickonce_bootstrap_unsigned.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0125.146] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.146] ReadFile (in: hFile=0xc8, lpBuffer=0x127f5400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127f5400*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.148] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0125.148] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.148] ReadFile (in: hFile=0xd8, lpBuffer=0x127f5500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127f5500*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.149] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58)) returned 1 [0125.149] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a307ea0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c50)) returned 1 [0125.149] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/clickonce_bootstrap.exe.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0)) returned 1 [0125.150] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b)) returned 1 [0125.150] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/clickonce_bootstrap_unsigned.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0125.150] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0125.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.150] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.150] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.150] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0125.150] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0125.151] CloseHandle (hObject=0xcc) returned 1 [0125.151] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.152] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.152] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0125.152] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0125.152] WriteFile (in: hFile=0xcc, lpBuffer=0x12785900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12785900*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0125.153] CloseHandle (hObject=0xcc) returned 1 [0125.155] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.155] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.155] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.156] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc3c4070, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc3c4070, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.156] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc3c4070, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc3c4070, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.156] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc3c4070, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc3c4070, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc3c6780, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.156] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms", cAlternateFileName="CLICEX~1.CDF")) returned 1 [0125.156] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest", cAlternateFileName="CLICEX~1.MAN")) returned 1 [0125.156] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x38b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms", cAlternateFileName="GOOGAP~1.CDF")) returned 1 [0125.156] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", cAlternateFileName="GOOGAP~1.MAN")) returned 1 [0125.156] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.156] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.156] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.156] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.156] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0125.156] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.157] ReadFile (in: hFile=0xcc, lpBuffer=0x127f5800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127f5800*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.157] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0125.157] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.157] ReadFile (in: hFile=0xe0, lpBuffer=0x127f5900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127f5900*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.157] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0125.158] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.158] ReadFile (in: hFile=0xec, lpBuffer=0x127f5a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127f5a00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.166] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0125.167] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.167] ReadFile (in: hFile=0xf4, lpBuffer=0x127f5b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127f5b00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.171] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0)) returned 1 [0125.171] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b)) returned 1 [0125.171] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x38b0)) returned 1 [0125.171] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30)) returned 1 [0125.172] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.172] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.172] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.172] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.173] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.173] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/DQQ19BCJ.JAX/YVORLGOR.PNT/manifests/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.173] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0125.173] CloseHandle (hObject=0xf8) returned 1 [0125.173] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.173] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.173] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.174] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0125.174] WriteFile (in: hFile=0xf8, lpBuffer=0x1279e000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1279e000*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0125.175] CloseHandle (hObject=0xf8) returned 1 [0125.176] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.176] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.176] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.176] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc3f9bd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc3f9bd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.176] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc3f9bd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc3f9bd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.176] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc3f9bd0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc3f9bd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc3fc2e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.176] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 1 [0125.176] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.176] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.176] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.177] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.177] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.177] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.177] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.177] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.177] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.177] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.177] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.177] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.177] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.178] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0125.178] CloseHandle (hObject=0xf8) returned 1 [0125.178] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.178] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.178] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.178] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0125.179] WriteFile (in: hFile=0xf8, lpBuffer=0x127a0600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x127a0600*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0125.179] CloseHandle (hObject=0xf8) returned 1 [0125.180] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.180] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.180] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.180] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc403810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc403810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.180] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc403810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc403810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.180] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 1 [0125.180] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc403810, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc403810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc405f20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.180] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.180] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.180] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.181] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.181] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.181] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.181] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.181] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.181] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.181] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.182] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0125.182] WriteFile (in: hFile=0xf8, lpBuffer=0x127a1900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x127a1900*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0125.183] CloseHandle (hObject=0xf8) returned 1 [0125.183] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.183] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.184] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.184] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc40ad40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc40ad40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.184] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc40ad40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc40ad40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.184] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc40ad40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc40ad40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc40fb60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.184] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1 [0125.184] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.184] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.185] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.185] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.185] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.185] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.186] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.186] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.186] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.186] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.186] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.186] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.186] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.186] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0125.187] CloseHandle (hObject=0xf8) returned 1 [0125.187] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.187] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.187] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.187] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0125.188] WriteFile (in: hFile=0xf8, lpBuffer=0x127b2000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x127b2000*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0125.189] CloseHandle (hObject=0xf8) returned 1 [0125.189] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.189] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.189] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.189] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc4197a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc4197a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.189] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc4197a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc4197a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.189] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc4197a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc4197a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc41beb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.189] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0125.189] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.189] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.190] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.190] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.190] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.190] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.190] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.191] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.191] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.191] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0125.191] CloseHandle (hObject=0xf8) returned 1 [0125.191] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.191] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.191] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.192] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x124297d0 | out: lpMode=0x124297d0) returned 0 [0125.192] WriteFile (in: hFile=0xf8, lpBuffer=0x127b4600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124297d4, lpOverlapped=0x0 | out: lpBuffer=0x127b4600*, lpNumberOfBytesWritten=0x124297d4*=0x1033, lpOverlapped=0x0) returned 1 [0125.193] CloseHandle (hObject=0xf8) returned 1 [0125.194] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.194] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.194] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.194] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data\\*", lpFindFileData=0x12429444 | out: lpFindFileData=0x12429444*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc425af0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc425af0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.194] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc425af0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc425af0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.194] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc425af0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc425af0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc428200, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.194] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.194] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.194] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.194] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.195] VirtualAlloc (lpAddress=0x12708000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12708000 [0125.195] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.195] VirtualAlloc (lpAddress=0x1270a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1270a000 [0125.195] VirtualAlloc (lpAddress=0x1270c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1270c000 [0125.196] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.196] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.196] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/6NG60CXZ.9GJ/goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec/Data/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.196] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0125.196] CloseHandle (hObject=0xf8) returned 1 [0125.196] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.197] VirtualAlloc (lpAddress=0x1270e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1270e000 [0125.197] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.197] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.197] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.197] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.197] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/2.0/Data/CJW3O3KP.BX7/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.197] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0125.198] CloseHandle (hObject=0xf8) returned 1 [0125.198] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.198] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.198] VirtualAlloc (lpAddress=0x12710000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x12710000 [0125.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.199] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.199] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Apps/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.199] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0125.199] CloseHandle (hObject=0xf8) returned 1 [0125.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.199] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.200] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0125.200] WriteFile (in: hFile=0xf8, lpBuffer=0x12711300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12711300*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0125.210] CloseHandle (hObject=0xf8) returned 1 [0125.210] VirtualAlloc (lpAddress=0x12716000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12716000 [0125.210] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.211] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc436c60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc436c60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.211] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc436c60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc436c60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.211] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc436c60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc436c60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc44f300, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.211] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.211] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.212] VirtualAlloc (lpAddress=0x12718000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12718000 [0125.212] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.212] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.212] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.212] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Deployment/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.212] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0125.212] CloseHandle (hObject=0xf8) returned 1 [0125.213] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.213] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.213] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.213] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0125.213] WriteFile (in: hFile=0xf8, lpBuffer=0x12713900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12713900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0125.214] CloseHandle (hObject=0xf8) returned 1 [0125.214] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.214] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.215] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.215] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc456830, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc456830, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc456830, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc456830, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc456830, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc456830, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc458f40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0125.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0125.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.215] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.215] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.215] VirtualAlloc (lpAddress=0x1271a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1271a000 [0125.216] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.216] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.216] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.216] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.216] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.216] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.216] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.216] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.217] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.217] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.217] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.217] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.217] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.217] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0125.217] CloseHandle (hObject=0xf8) returned 1 [0125.217] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.217] VirtualAlloc (lpAddress=0x1271c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1271c000 [0125.218] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.218] VirtualAlloc (lpAddress=0x1271e000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x1271e000 [0125.218] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.218] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0125.219] WriteFile (in: hFile=0xf8, lpBuffer=0x1271e000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1271e000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0125.220] CloseHandle (hObject=0xf8) returned 1 [0125.220] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.220] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.220] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.220] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc462b80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc462b80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.220] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc462b80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc462b80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.220] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc462b80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc462b80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc4679a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.220] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0125.220] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.221] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.221] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.221] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.221] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.221] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.223] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.224] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.224] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.224] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.224] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.224] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.224] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.224] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0125.224] CloseHandle (hObject=0xf8) returned 1 [0125.225] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.225] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.225] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.226] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0125.226] WriteFile (in: hFile=0xf8, lpBuffer=0x12720600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12720600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0125.227] CloseHandle (hObject=0xf8) returned 1 [0125.228] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.228] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.228] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.228] VirtualAlloc (lpAddress=0x12724000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12724000 [0125.228] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc476400, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc476400, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.228] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc476400, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc476400, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc476400, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc476400, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc478b10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVWhitelist", cAlternateFileName="EVWHIT~1")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8b8920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8b8920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f8b8920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85749110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c0bcce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0bf3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1082a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f6e8b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAFEBR~3")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f94a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAFEBR~4")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies", cAlternateFileName="SAFEBR~1")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies-journal", cAlternateFileName="SAFEBR~2")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0125.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0125.230] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0125.230] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.230] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.230] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.230] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.230] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.230] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.231] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.231] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.231] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.232] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.232] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.232] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.233] VirtualAlloc (lpAddress=0x12726000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12726000 [0125.234] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.234] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.234] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.235] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.235] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.235] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.236] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.236] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/First Run" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\first run"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.236] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0125.236] ReadFile (in: hFile=0xf8, lpBuffer=0x127f5d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x127f5d00*, lpNumberOfBytesRead=0x124299e0*=0x0, lpOverlapped=0x0) returned 1 [0125.236] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Local State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0125.236] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0125.237] ReadFile (in: hFile=0xfc, lpBuffer=0x127f5e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x127f5e00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0125.251] SetEvent (hEvent=0xac) returned 1 [0125.251] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.251] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.251] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.251] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.251] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.251] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.251] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.252] VirtualAlloc (lpAddress=0x12728000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12728000 [0125.252] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.253] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.253] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Channel IDs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0125.256] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0125.256] ReadFile (in: hFile=0x104, lpBuffer=0x127f5f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x127f5f00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0125.258] VirtualAlloc (lpAddress=0x1272a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1272a000 [0125.258] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Channel IDs-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0125.258] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0125.259] VirtualAlloc (lpAddress=0x1272c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1272c000 [0125.259] ReadFile (in: hFile=0x108, lpBuffer=0x1272c000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1272c000*, lpNumberOfBytesRead=0x124299e0*=0x0, lpOverlapped=0x0) returned 1 [0125.259] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0125.260] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0125.260] ReadFile (in: hFile=0x10c, lpBuffer=0x1272c100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1272c100*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0125.262] VirtualAlloc (lpAddress=0x1272e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1272e000 [0125.262] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Cookies-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0125.262] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0125.262] ReadFile (in: hFile=0x110, lpBuffer=0x1272c200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1272c200*, lpNumberOfBytesRead=0x124299e0*=0x0, lpOverlapped=0x0) returned 1 [0125.262] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.262] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.263] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.263] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.263] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.263] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.263] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.263] VirtualAlloc (lpAddress=0x12730000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12730000 [0125.263] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.264] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.264] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Local State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85749110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c0bcce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0bf3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1082a)) returned 1 [0125.264] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Channel IDs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f6e8b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0125.264] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1 [0125.264] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.264] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.264] VirtualAlloc (lpAddress=0x12732000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12732000 [0125.264] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.264] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.265] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.265] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0125.265] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0125.265] CloseHandle (hObject=0x114) returned 1 [0125.265] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.265] VirtualAlloc (lpAddress=0x12734000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12734000 [0125.265] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.265] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0125.266] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0125.266] WriteFile (in: hFile=0x114, lpBuffer=0x12722c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12722c00*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0125.267] CloseHandle (hObject=0x114) returned 1 [0125.267] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.267] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.269] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.269] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc4b3490, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc4b3490, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.269] VirtualAlloc (lpAddress=0x12736000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12736000 [0125.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc4b3490, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc4b3490, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc4b3490, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc4b3490, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc4b3490, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.270] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.270] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.270] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.270] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.270] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.270] VirtualAlloc (lpAddress=0x12738000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x12738000 [0125.271] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.271] VirtualAlloc (lpAddress=0x1273e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1273e000 [0125.271] VirtualAlloc (lpAddress=0x12740000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12740000 [0125.271] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.271] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.272] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/CertificateTransparency/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0125.272] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0125.272] CloseHandle (hObject=0x114) returned 1 [0125.272] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.272] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.272] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0125.272] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0125.273] WriteFile (in: hFile=0x114, lpBuffer=0x12739300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12739300*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0125.274] CloseHandle (hObject=0x114) returned 1 [0125.274] VirtualAlloc (lpAddress=0x12742000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12742000 [0125.274] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.274] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.274] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.274] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc4d95f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc4d95f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.275] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc4d95f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc4d95f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.275] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc4d95f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc4d95f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc4d95f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.275] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f5beda0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1 [0125.275] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1 [0125.275] VirtualAlloc (lpAddress=0x12744000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12744000 [0125.275] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0125.275] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.275] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.275] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.275] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.275] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0125.276] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.276] ReadFile (in: hFile=0x114, lpBuffer=0x1272cd00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x1272cd00*, lpNumberOfBytesRead=0x12429938*=0x0, lpOverlapped=0x0) returned 1 [0125.276] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.276] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.277] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.277] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0125.277] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.277] VirtualAlloc (lpAddress=0x12746000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12746000 [0125.277] ReadFile (in: hFile=0x118, lpBuffer=0x1272ce00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x1272ce00*, lpNumberOfBytesRead=0x12429938*=0x28, lpOverlapped=0x0) returned 1 [0125.278] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0125.278] VirtualAlloc (lpAddress=0x12748000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12748000 [0125.278] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.279] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0125.279] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12443920 | out: pbBuffer=0x12443920) returned 1 [0125.280] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410db4 | out: pbBuffer=0x12410db4) returned 1 [0125.280] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1272cf02 | out: pbBuffer=0x1272cf02) returned 1 [0125.280] VirtualAlloc (lpAddress=0x1274a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1274a000 [0125.280] VirtualAlloc (lpAddress=0x1274c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1274c000 [0125.280] VirtualAlloc (lpAddress=0x1274e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1274e000 [0125.280] VirtualAlloc (lpAddress=0x12750000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x12750000 [0125.282] SetEvent (hEvent=0xb8) returned 1 [0125.296] ReadFile (in: hFile=0x11c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x28, lpOverlapped=0x0) returned 1 [0125.297] VirtualAlloc (lpAddress=0x12754000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x12754000 [0125.297] GetFileType (hFile=0x11c) returned 0x1 [0125.297] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0125.298] WriteFile (in: hFile=0x11c, lpBuffer=0x1240a630*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1240a630*, lpNumberOfBytesWritten=0x12429800*=0x28, lpOverlapped=0x1242980c) returned 1 [0125.298] GetFileType (hFile=0x11c) returned 0x1 [0125.298] SetFilePointerEx (in: hFile=0x11c, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0125.298] ReadFile (in: hFile=0x11c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0125.298] CloseHandle (hObject=0x11c) returned 1 [0125.298] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.298] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0125.299] WriteFile (in: hFile=0x11c, lpBuffer=0x1270f8c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x1270f8c0*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0125.299] CloseHandle (hObject=0x11c) returned 1 [0125.299] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127ad3b0*, nNumberOfCharsToWrite=0x77, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x127ad3b0*, lpNumberOfCharsWritten=0x124294d4*=0x77) returned 1 [0125.300] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.300] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.300] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.300] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.300] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.300] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.301] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0125.303] CloseHandle (hObject=0x11c) returned 1 [0125.303] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/metadata\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.303] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/metadata\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.303] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/metadata\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.303] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/metadata\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.303] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/metadata\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.303] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.303] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0125.304] CloseHandle (hObject=0x11c) returned 1 [0125.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.304] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.304] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0125.305] WriteFile (in: hFile=0x11c, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0125.306] CloseHandle (hObject=0x11c) returned 1 [0125.306] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.306] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.306] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc5352b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc5352b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.306] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc5352b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc5352b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.306] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc5352b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc5352b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc53a0d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.306] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.307] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.307] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.307] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.307] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.307] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.307] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.307] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.307] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.307] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Crashpad/reports/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.307] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0125.308] CloseHandle (hObject=0x11c) returned 1 [0125.308] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.309] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.309] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.310] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0125.310] WriteFile (in: hFile=0x11c, lpBuffer=0x124ab300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124ab300*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0125.311] CloseHandle (hObject=0x11c) returned 1 [0125.311] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.311] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.311] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.311] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc541600, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc541600, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.312] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc541600, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc541600, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc541600, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc541600, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc546420, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d406e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d406e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d1e730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d44890, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83b08a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83b08a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0b57b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c3b6860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3b6860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b8f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~3")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~2")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80db2b00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80e97340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81c58330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f47590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824d3190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824d3190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b6860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f6d6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIcons", cAlternateFileName="JUMPLI~2")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIconsOld", cAlternateFileName="JUMPLI~1")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1 [0125.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1 [0125.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x825f0410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1 [0125.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8262ad90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1 [0125.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86263d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86263d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86263d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Persistent State", cAlternateFileName="NETWOR~3")) returned 1 [0125.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x94034050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1 [0125.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9405a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1 [0125.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c43f3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c446910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1 [0125.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1 [0125.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x804795c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x804795c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x812c19c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1 [0125.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x869fc2d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1 [0125.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1 [0125.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f846500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f846500, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="README", cAlternateFileName="")) returned 1 [0125.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3f38f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c404a60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1 [0125.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82271b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1 [0125.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x822e3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1 [0125.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Extension Settings", cAlternateFileName="SYNCEX~1")) returned 1 [0125.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8195e7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1 [0125.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d8c9a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81984910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1 [0125.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x88c2e920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x88c2e920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x88c2e920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1 [0125.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80ee3600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80ee3600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6cde50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1 [0125.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1 [0125.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d370c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1 [0125.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1 [0125.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.315] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.315] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.315] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.315] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.316] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.329] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.329] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.330] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.330] ReadFile (in: hFile=0x11c, lpBuffer=0x127f4100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4100*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.335] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cookies-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0125.335] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.335] ReadFile (in: hFile=0xbc, lpBuffer=0x127f4200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4200*, lpNumberOfBytesRead=0x12429938*=0x0, lpOverlapped=0x0) returned 1 [0125.335] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Current Session" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0125.336] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.336] ReadFile (in: hFile=0xe8, lpBuffer=0x127f4300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4300*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.337] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Current Tabs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.338] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.338] ReadFile (in: hFile=0xe4, lpBuffer=0x127f4400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4400*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.339] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.339] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.340] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.341] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.341] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.343] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.344] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.344] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.346] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.346] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Favicons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.347] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.347] ReadFile (in: hFile=0x100, lpBuffer=0x127f4500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4500*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.364] SetEvent (hEvent=0xac) returned 1 [0125.364] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Favicons-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0125.365] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.365] ReadFile (in: hFile=0xdc, lpBuffer=0x127f4600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4600*, lpNumberOfBytesRead=0x12429938*=0x0, lpOverlapped=0x0) returned 1 [0125.365] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0125.365] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.366] ReadFile (in: hFile=0xc0, lpBuffer=0x127f4700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4700*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.367] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0125.368] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.368] ReadFile (in: hFile=0x98, lpBuffer=0x127f4800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4800*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/History Provider Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0125.371] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.371] ReadFile (in: hFile=0xd0, lpBuffer=0x127f4900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4900*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.373] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/History-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0125.373] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.373] ReadFile (in: hFile=0xc8, lpBuffer=0x127f4a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4a00*, lpNumberOfBytesRead=0x12429938*=0x0, lpOverlapped=0x0) returned 1 [0125.373] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.374] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.374] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.374] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.374] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.375] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.375] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.376] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.377] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.377] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.377] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.379] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.379] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0125.380] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.380] ReadFile (in: hFile=0xd8, lpBuffer=0x127f4b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4b00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.382] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Login Data-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0125.382] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.382] ReadFile (in: hFile=0xcc, lpBuffer=0x127f4c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4c00*, lpNumberOfBytesRead=0x12429938*=0x0, lpOverlapped=0x0) returned 1 [0125.382] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Network Action Predictor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0125.383] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.383] ReadFile (in: hFile=0xe0, lpBuffer=0x127f4d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4d00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.400] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Network Action Predictor-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0125.400] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.400] ReadFile (in: hFile=0xec, lpBuffer=0x127f4e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4e00*, lpNumberOfBytesRead=0x12429938*=0x0, lpOverlapped=0x0) returned 1 [0125.400] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Network Persistent State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0125.401] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.401] ReadFile (in: hFile=0xf4, lpBuffer=0x127f4f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f4f00*, lpNumberOfBytesRead=0x12429938*=0x28, lpOverlapped=0x0) returned 1 [0125.402] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Origin Bound Certs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0125.402] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.402] ReadFile (in: hFile=0xf8, lpBuffer=0x127f5000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5000*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.404] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Origin Bound Certs-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0125.404] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.405] ReadFile (in: hFile=0xfc, lpBuffer=0x127f5100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5100*, lpNumberOfBytesRead=0x12429938*=0x0, lpOverlapped=0x0) returned 1 [0125.405] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0125.405] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.406] ReadFile (in: hFile=0x104, lpBuffer=0x127f5200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5200*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.408] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/QuotaManager" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0125.409] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.409] ReadFile (in: hFile=0x108, lpBuffer=0x127f5300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5300*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.423] SetEvent (hEvent=0xac) returned 1 [0125.423] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/QuotaManager-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0125.423] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.423] ReadFile (in: hFile=0x10c, lpBuffer=0x127f5400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5400*, lpNumberOfBytesRead=0x12429938*=0x0, lpOverlapped=0x0) returned 1 [0125.423] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/README" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0125.423] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.424] ReadFile (in: hFile=0x110, lpBuffer=0x127f5500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5500*, lpNumberOfBytesRead=0x12429938*=0xb4, lpOverlapped=0x0) returned 1 [0125.424] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Secure Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0125.425] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.425] ReadFile (in: hFile=0x114, lpBuffer=0x127f5600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5600*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.445] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Shortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0125.445] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.445] ReadFile (in: hFile=0xf0, lpBuffer=0x127f5700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5700*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.501] SetEvent (hEvent=0xac) returned 1 [0125.502] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Shortcuts-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0125.502] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.502] ReadFile (in: hFile=0x118, lpBuffer=0x127f5800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5800*, lpNumberOfBytesRead=0x12429938*=0x0, lpOverlapped=0x0) returned 1 [0125.502] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.502] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.503] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.503] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Top Sites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0125.504] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.504] ReadFile (in: hFile=0x120, lpBuffer=0x127f5900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5900*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.505] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Top Sites-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0125.506] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.506] ReadFile (in: hFile=0x124, lpBuffer=0x127f5a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5a00*, lpNumberOfBytesRead=0x12429938*=0x0, lpOverlapped=0x0) returned 1 [0125.506] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/TransportSecurity" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0125.506] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.506] ReadFile (in: hFile=0x128, lpBuffer=0x127f5b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5b00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.508] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Visited Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0125.509] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.509] ReadFile (in: hFile=0x12c, lpBuffer=0x127f5c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5c00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.540] SetEvent (hEvent=0xac) returned 1 [0125.540] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.540] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.541] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.541] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0125.541] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.541] ReadFile (in: hFile=0x130, lpBuffer=0x127f5d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5d00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.543] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Data-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0125.544] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.544] ReadFile (in: hFile=0x134, lpBuffer=0x127f5e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5e00*, lpNumberOfBytesRead=0x12429938*=0x0, lpOverlapped=0x0) returned 1 [0125.544] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.544] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.546] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.547] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0125.547] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.547] ReadFile (in: hFile=0x138, lpBuffer=0x127f5f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x127f5f00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0125.549] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/previews_opt_out.db-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0125.549] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0125.549] ReadFile (in: hFile=0x13c, lpBuffer=0x12730000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12730000*, lpNumberOfBytesRead=0x12429938*=0x0, lpOverlapped=0x0) returned 1 [0125.549] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d406e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d406e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d1e730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1 [0125.549] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Current Session" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83b08a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83b08a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0b57b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6)) returned 1 [0125.550] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Current Tabs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c3b6860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3b6860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b8f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x126)) returned 1 [0125.550] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Favicons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80db2b00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0125.550] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81c58330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9)) returned 1 [0125.550] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f47590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19000)) returned 1 [0125.550] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/History Provider Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824d3190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824d3190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b6860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142f)) returned 1 [0125.550] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1 [0125.550] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Network Action Predictor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x825f0410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1 [0125.550] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Network Persistent State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86263d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86263d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86263d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0125.550] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Origin Bound Certs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x94034050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0125.550] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c43f3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c446910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9d)) returned 1 [0125.550] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/QuotaManager" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x869fc2d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1 [0125.550] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/README" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f846500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f846500, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4)) returned 1 [0125.550] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Secure Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3f38f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c404a60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8b43)) returned 1 [0125.551] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Shortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82271b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0125.551] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Top Sites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8195e7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0125.551] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/TransportSecurity" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x88c2e920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x88c2e920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x88c2e920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0125.551] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Visited Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80ee3600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80ee3600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6cde50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0125.551] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d370c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0125.551] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0125.551] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0125.551] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0125.551] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e800 | out: pbBuffer=0x1240e800) returned 1 [0125.552] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2314 | out: pbBuffer=0x124e2314) returned 1 [0125.552] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12730102 | out: pbBuffer=0x12730102) returned 1 [0125.552] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12730146 | out: pbBuffer=0x12730146) returned 1 [0125.553] SetEvent (hEvent=0x7c) returned 1 [0125.553] ReadFile (in: hFile=0x140, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x4000, lpOverlapped=0x0) returned 1 [0125.554] GetFileType (hFile=0x140) returned 0x1 [0125.554] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0125.554] WriteFile (in: hFile=0x140, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429800*=0x4000, lpOverlapped=0x1242980c) returned 1 [0125.555] GetFileType (hFile=0x140) returned 0x1 [0125.555] SetFilePointerEx (in: hFile=0x140, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0125.555] ReadFile (in: hFile=0x140, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0125.555] CloseHandle (hObject=0x140) returned 1 [0125.555] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0125.555] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0125.556] WriteFile (in: hFile=0x140, lpBuffer=0x12777680*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x12777680*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0125.556] CloseHandle (hObject=0x140) returned 1 [0125.556] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12730300*, nNumberOfCharsToWrite=0x7d, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x12730300*, lpNumberOfCharsWritten=0x124294d4*=0x7d) returned 1 [0125.557] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.557] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.557] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.557] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.557] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.557] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0125.557] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0125.558] CloseHandle (hObject=0x140) returned 1 [0125.558] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.558] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.558] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.562] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0125.562] WriteFile (in: hFile=0x11c, lpBuffer=0x124aa000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x124aa000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0125.563] CloseHandle (hObject=0x11c) returned 1 [0125.564] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.564] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.564] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.564] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc773e00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc773e00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.564] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc773e00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc773e00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.564] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc773e00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc773e00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc773e00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.564] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1 [0125.564] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1 [0125.564] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1 [0125.564] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x402000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1 [0125.564] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0125.564] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.565] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.565] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.565] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.565] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/data_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.566] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.566] ReadFile (in: hFile=0x11c, lpBuffer=0x12730000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12730000*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.569] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/data_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0125.570] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.570] ReadFile (in: hFile=0xbc, lpBuffer=0x12730100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12730100*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.572] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/data_2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0125.572] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.572] ReadFile (in: hFile=0xe8, lpBuffer=0x12730200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12730200*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.576] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/data_3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.577] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.577] ReadFile (in: hFile=0xe4, lpBuffer=0x12730500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12730500*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.579] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/index" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.579] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.581] ReadFile (in: hFile=0x100, lpBuffer=0x12730600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12730600*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.611] SetEvent (hEvent=0xac) returned 1 [0125.611] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/data_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1 [0125.611] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/data_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1 [0125.612] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/data_2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0125.612] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/data_3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x402000)) returned 1 [0125.612] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/index" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170)) returned 1 [0125.614] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.614] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.614] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.615] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.615] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.615] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0125.615] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0125.615] CloseHandle (hObject=0xdc) returned 1 [0125.615] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cookies-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.616] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cookies-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.616] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cookies-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.616] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cookies-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.616] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cookies-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.616] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Cookies-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0125.617] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0125.617] CloseHandle (hObject=0xdc) returned 1 [0125.617] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.618] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.618] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0125.618] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0125.618] WriteFile (in: hFile=0xdc, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0125.620] CloseHandle (hObject=0xdc) returned 1 [0125.620] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.620] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.620] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.621] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc80e2c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc80e2c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc80e2c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc80e2c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82bed750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0125.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc80e2c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc80e2c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc80e2c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82adc050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82adc050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0125.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ad9940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0125.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0125.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0125.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.621] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.621] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0125.622] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.622] ReadFile (in: hFile=0xdc, lpBuffer=0x1244a900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1244a900*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.624] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.624] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.624] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0125.624] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.624] ReadFile (in: hFile=0x110, lpBuffer=0x1244ac00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1244ac00*, lpNumberOfBytesRead=0x12429890*=0x10, lpOverlapped=0x0) returned 1 [0125.625] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0125.626] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.626] ReadFile (in: hFile=0x114, lpBuffer=0x1244ad00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1244ad00*, lpNumberOfBytesRead=0x12429890*=0x0, lpOverlapped=0x0) returned 1 [0125.626] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0125.627] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.627] ReadFile (in: hFile=0xf0, lpBuffer=0x1244ae00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1244ae00*, lpNumberOfBytesRead=0x12429890*=0x9a, lpOverlapped=0x0) returned 1 [0125.628] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0125.629] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.629] ReadFile (in: hFile=0x118, lpBuffer=0x1244af00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1244af00*, lpNumberOfBytesRead=0x12429890*=0x29, lpOverlapped=0x0) returned 1 [0125.630] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82bed750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x156)) returned 1 [0125.630] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0125.630] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429764 | out: lpMode=0x12429764) returned 0 [0125.631] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442260 | out: pbBuffer=0x12442260) returned 1 [0125.632] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410224 | out: pbBuffer=0x12410224) returned 1 [0125.632] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244b002 | out: pbBuffer=0x1244b002) returned 1 [0125.632] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244b080 | out: pbBuffer=0x1244b080) returned 1 [0125.634] SetEvent (hEvent=0xa0) returned 1 [0125.634] ReadFile (in: hFile=0x120, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429774, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429774*=0x156, lpOverlapped=0x0) returned 1 [0125.634] GetFileType (hFile=0x120) returned 0x1 [0125.634] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242973c | out: lpNewFilePointer=0x0) returned 1 [0125.634] WriteFile (in: hFile=0x120, lpBuffer=0x124a4000*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x12429758, lpOverlapped=0x12429764 | out: lpBuffer=0x124a4000*, lpNumberOfBytesWritten=0x12429758*=0x156, lpOverlapped=0x12429764) returned 1 [0125.635] GetFileType (hFile=0x120) returned 0x1 [0125.635] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x156, lpNewFilePointer=0x0, dwMoveMethod=0x1242973c | out: lpNewFilePointer=0x0) returned 1 [0125.635] ReadFile (in: hFile=0x120, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429774, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429774*=0x0, lpOverlapped=0x0) returned 1 [0125.635] CloseHandle (hObject=0x120) returned 1 [0125.635] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0125.635] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429764 | out: lpMode=0x12429764) returned 0 [0125.636] WriteFile (in: hFile=0x120, lpBuffer=0x1270e6c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429768, lpOverlapped=0x0 | out: lpBuffer=0x1270e6c0*, lpNumberOfBytesWritten=0x12429768*=0x108, lpOverlapped=0x0) returned 1 [0125.636] CloseHandle (hObject=0x120) returned 1 [0125.636] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127790e0*, nNumberOfCharsToWrite=0x84, lpNumberOfCharsWritten=0x1242942c, lpReserved=0x0 | out: lpBuffer=0x127790e0*, lpNumberOfCharsWritten=0x1242942c*=0x84) returned 1 [0125.637] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82adc050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82adc050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0125.637] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a)) returned 1 [0125.637] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0125.638] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.638] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.638] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.638] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.638] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.638] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0125.638] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0125.640] CloseHandle (hObject=0x120) returned 1 [0125.640] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.640] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/LOCK\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.640] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.640] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/LOCK\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.640] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.641] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension Rules/LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0125.641] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0125.641] CloseHandle (hObject=0x120) returned 1 [0125.641] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.642] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.642] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0125.644] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0125.644] WriteFile (in: hFile=0x120, lpBuffer=0x127fa600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x127fa600*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0125.645] CloseHandle (hObject=0x120) returned 1 [0125.646] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.646] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.646] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.646] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc858e10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc858e10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.646] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc858e10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc858e10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.646] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0125.646] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc858e10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc858e10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc85dc30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.646] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824d3190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0125.646] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0125.646] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0125.646] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0125.646] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.647] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.647] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0125.647] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.647] ReadFile (in: hFile=0x120, lpBuffer=0x127fe800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127fe800*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0125.655] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.655] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.655] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.656] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.656] ReadFile (in: hFile=0x11c, lpBuffer=0x127feb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127feb00*, lpNumberOfBytesRead=0x12429890*=0x10, lpOverlapped=0x0) returned 1 [0125.657] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0125.657] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.657] ReadFile (in: hFile=0xbc, lpBuffer=0x127fec00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127fec00*, lpNumberOfBytesRead=0x12429890*=0x0, lpOverlapped=0x0) returned 1 [0125.658] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0125.658] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.658] ReadFile (in: hFile=0xe8, lpBuffer=0x127fed00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127fed00*, lpNumberOfBytesRead=0x12429890*=0x9a, lpOverlapped=0x0) returned 1 [0125.659] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.660] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0125.660] ReadFile (in: hFile=0xe4, lpBuffer=0x127fee00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127fee00*, lpNumberOfBytesRead=0x12429890*=0x29, lpOverlapped=0x0) returned 1 [0125.661] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4ad)) returned 1 [0125.661] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.661] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429764 | out: lpMode=0x12429764) returned 0 [0125.661] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e340 | out: pbBuffer=0x1240e340) returned 1 [0125.663] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e21d4 | out: pbBuffer=0x124e21d4) returned 1 [0125.663] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127fef02 | out: pbBuffer=0x127fef02) returned 1 [0125.663] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fef0b | out: pbBuffer=0x127fef0b) returned 1 [0125.663] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fef59 | out: pbBuffer=0x127fef59) returned 1 [0125.663] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fefb8 | out: pbBuffer=0x127fefb8) returned 1 [0125.664] SetEvent (hEvent=0xb8) returned 1 [0125.665] ReadFile (in: hFile=0x100, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429774, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429774*=0x4ad, lpOverlapped=0x0) returned 1 [0125.665] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0125.665] SetEvent (hEvent=0xb8) returned 1 [0125.665] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0125.666] GetFileType (hFile=0x100) returned 0x1 [0125.666] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242973c | out: lpNewFilePointer=0x0) returned 1 [0125.666] WriteFile (in: hFile=0x100, lpBuffer=0x12466000*, nNumberOfBytesToWrite=0x4ad, lpNumberOfBytesWritten=0x12429758, lpOverlapped=0x12429764 | out: lpBuffer=0x12466000*, lpNumberOfBytesWritten=0x12429758*=0x4ad, lpOverlapped=0x12429764) returned 1 [0125.667] GetFileType (hFile=0x100) returned 0x1 [0125.667] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x4ad, lpNewFilePointer=0x0, dwMoveMethod=0x1242973c | out: lpNewFilePointer=0x0) returned 1 [0125.667] ReadFile (in: hFile=0x100, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429774, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429774*=0x0, lpOverlapped=0x0) returned 1 [0125.667] CloseHandle (hObject=0x100) returned 1 [0125.667] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.667] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429764 | out: lpMode=0x12429764) returned 0 [0125.668] WriteFile (in: hFile=0x100, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429768, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x12429768*=0x108, lpOverlapped=0x0) returned 1 [0125.668] CloseHandle (hObject=0x100) returned 1 [0125.668] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x84, lpNumberOfCharsWritten=0x1242942c, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x1242942c*=0x84) returned 1 [0125.669] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824d3190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0125.669] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a)) returned 1 [0125.669] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0125.669] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.669] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.669] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.669] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.669] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.670] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.670] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0125.670] CloseHandle (hObject=0x100) returned 1 [0125.670] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.670] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/LOCK\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.670] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.670] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/LOCK\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.670] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.671] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extension State/LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.671] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0125.671] CloseHandle (hObject=0x100) returned 1 [0125.671] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.672] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.672] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.673] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0125.673] WriteFile (in: hFile=0x100, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0125.674] CloseHandle (hObject=0x100) returned 1 [0125.674] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.674] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.675] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.675] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc89d3d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc89d3d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.675] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc89d3d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc89d3d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.675] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc89d3d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc89d3d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc8a21f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.675] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aapocclcgogkmnckokdopfmhonfmgoek", cAlternateFileName="AAPOCC~1")) returned 1 [0125.675] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aohghmighlieiainnegkcijnfilokake", cAlternateFileName="AOHGHM~1")) returned 1 [0125.675] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1 [0125.675] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1 [0125.675] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="felcaaldnbdncclmgdcncolpebgiejap", cAlternateFileName="FELCAA~1")) returned 1 [0125.675] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0125.675] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1 [0125.675] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1 [0125.675] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1 [0125.675] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.675] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.676] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.676] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.676] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.676] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.677] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.677] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.677] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.677] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.677] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.678] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.678] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.678] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.678] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.679] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.679] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.679] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.680] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.680] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.681] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.681] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.681] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.681] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.681] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.681] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.681] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.681] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.681] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.682] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.682] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.682] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.682] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.682] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.682] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0125.682] CloseHandle (hObject=0x100) returned 1 [0125.682] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.682] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.683] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.683] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0125.683] WriteFile (in: hFile=0x100, lpBuffer=0x1248d300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x1248d300*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0125.684] CloseHandle (hObject=0x100) returned 1 [0125.684] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.684] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.685] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.685] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc8b5a70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc8b5a70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.685] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc8b5a70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc8b5a70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.685] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0125.685] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc8b5a70, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc8b5a70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc8ba890, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.685] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.685] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.685] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.685] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.687] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.688] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.688] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.688] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.689] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.689] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.689] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124297d0 | out: lpMode=0x124297d0) returned 0 [0125.690] WriteFile (in: hFile=0x100, lpBuffer=0x1248e600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124297d4, lpOverlapped=0x0 | out: lpBuffer=0x1248e600*, lpNumberOfBytesWritten=0x124297d4*=0x1033, lpOverlapped=0x0) returned 1 [0125.690] CloseHandle (hObject=0x100) returned 1 [0125.691] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.691] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.691] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.691] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0\\*", lpFindFileData=0x12429444 | out: lpFindFileData=0x12429444*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc8c44d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc8c44d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc8c44d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc8c44d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc8c44d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc8c44d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc8c92f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0125.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0125.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0125.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0125.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0125.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0125.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0125.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.692] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.692] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.692] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.692] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.692] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.694] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.695] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.695] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_metadata\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.695] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.696] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.696] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0125.696] ReadFile (in: hFile=0x100, lpBuffer=0x127ff300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x127ff300*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0125.706] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0125.706] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0125.706] ReadFile (in: hFile=0x120, lpBuffer=0x127ff400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x127ff400*, lpNumberOfBytesRead=0x12429740*=0xa0, lpOverlapped=0x0) returned 1 [0125.707] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.707] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0125.707] ReadFile (in: hFile=0x11c, lpBuffer=0x127ff500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x127ff500*, lpNumberOfBytesRead=0x12429740*=0x5c, lpOverlapped=0x0) returned 1 [0125.708] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0125.709] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0125.709] ReadFile (in: hFile=0xbc, lpBuffer=0x127ff600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x127ff600*, lpNumberOfBytesRead=0x12429740*=0x5f, lpOverlapped=0x0) returned 1 [0125.710] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0125.710] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0125.710] ReadFile (in: hFile=0xe8, lpBuffer=0x127ff700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x127ff700*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0125.747] SetEvent (hEvent=0xac) returned 1 [0125.748] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2c)) returned 1 [0125.748] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.748] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0125.748] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e4c0 | out: pbBuffer=0x1240e4c0) returned 1 [0125.749] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127ff802 | out: pbBuffer=0x127ff802) returned 1 [0125.750] SetEvent (hEvent=0xb8) returned 1 [0125.750] ReadFile (in: hFile=0xe4, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0xd2c, lpOverlapped=0x0) returned 1 [0125.750] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0125.751] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0125.751] SetEvent (hEvent=0x7c) returned 1 [0125.751] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0125.751] GetFileType (hFile=0xe4) returned 0x1 [0125.751] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0125.751] WriteFile (in: hFile=0xe4, lpBuffer=0x1248c000*, nNumberOfBytesToWrite=0xd2c, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x1248c000*, lpNumberOfBytesWritten=0x12429608*=0xd2c, lpOverlapped=0x12429614) returned 1 [0125.752] GetFileType (hFile=0xe4) returned 0x1 [0125.752] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0xd2c, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0125.752] ReadFile (in: hFile=0xe4, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0125.752] CloseHandle (hObject=0xe4) returned 1 [0125.752] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.752] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0125.752] WriteFile (in: hFile=0xe4, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0125.752] CloseHandle (hObject=0xe4) returned 1 [0125.753] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa8, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124292dc*=0xa8) returned 1 [0125.753] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0125.753] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.753] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0125.753] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e220 | out: pbBuffer=0x1240e220) returned 1 [0125.754] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0125.754] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127fe002 | out: pbBuffer=0x127fe002) returned 1 [0125.754] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fe010 | out: pbBuffer=0x127fe010) returned 1 [0125.754] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fe0d3 | out: pbBuffer=0x127fe0d3) returned 1 [0125.755] SetEvent (hEvent=0x7c) returned 1 [0125.755] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0xa0, lpOverlapped=0x0) returned 1 [0125.756] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0125.756] SetEvent (hEvent=0x7c) returned 1 [0125.756] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0125.756] GetFileType (hFile=0xe4) returned 0x1 [0125.756] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0125.756] WriteFile (in: hFile=0xe4, lpBuffer=0x1249c000*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x1249c000*, lpNumberOfBytesWritten=0x12429608*=0xa0, lpOverlapped=0x12429614) returned 1 [0125.756] GetFileType (hFile=0xe4) returned 0x1 [0125.756] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0125.757] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0125.757] CloseHandle (hObject=0xe4) returned 1 [0125.757] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.757] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0125.757] WriteFile (in: hFile=0xe4, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0125.757] CloseHandle (hObject=0xe4) returned 1 [0125.757] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa7, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124292dc*=0xa7) returned 1 [0125.758] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0125.758] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.758] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0125.758] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e220 | out: pbBuffer=0x1240e220) returned 1 [0125.759] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2094 | out: pbBuffer=0x124e2094) returned 1 [0125.759] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127fe102 | out: pbBuffer=0x127fe102) returned 1 [0125.759] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fe102 | out: pbBuffer=0x127fe102) returned 1 [0125.759] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fe177 | out: pbBuffer=0x127fe177) returned 1 [0125.759] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fe1a4 | out: pbBuffer=0x127fe1a4) returned 1 [0125.761] SetEvent (hEvent=0xb8) returned 1 [0125.761] ReadFile (in: hFile=0xe4, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x5c, lpOverlapped=0x0) returned 1 [0125.761] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0125.761] SetEvent (hEvent=0xb8) returned 1 [0125.761] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0125.762] GetFileType (hFile=0xe4) returned 0x1 [0125.762] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0125.762] WriteFile (in: hFile=0xe4, lpBuffer=0x124d6000*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x124d6000*, lpNumberOfBytesWritten=0x12429608*=0x5c, lpOverlapped=0x12429614) returned 1 [0125.762] GetFileType (hFile=0xe4) returned 0x1 [0125.762] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x5c, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0125.762] ReadFile (in: hFile=0xe4, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0125.762] CloseHandle (hObject=0xe4) returned 1 [0125.762] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.762] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0125.763] WriteFile (in: hFile=0xe4, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0125.763] CloseHandle (hObject=0xe4) returned 1 [0125.763] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa5, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124292dc*=0xa5) returned 1 [0125.764] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1 [0125.764] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.764] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0125.764] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e220 | out: pbBuffer=0x1240e220) returned 1 [0125.765] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127fe002 | out: pbBuffer=0x127fe002) returned 1 [0125.765] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fe077 | out: pbBuffer=0x127fe077) returned 1 [0125.765] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fe08a | out: pbBuffer=0x127fe08a) returned 1 [0125.766] SetEvent (hEvent=0x7c) returned 1 [0125.766] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x5f, lpOverlapped=0x0) returned 1 [0125.766] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0125.767] SetEvent (hEvent=0x7c) returned 1 [0125.767] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0125.767] GetFileType (hFile=0xe4) returned 0x1 [0125.767] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0125.767] WriteFile (in: hFile=0xe4, lpBuffer=0x124d6000*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x124d6000*, lpNumberOfBytesWritten=0x12429608*=0x5f, lpOverlapped=0x12429614) returned 1 [0125.767] GetFileType (hFile=0xe4) returned 0x1 [0125.767] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0125.767] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0125.767] CloseHandle (hObject=0xe4) returned 1 [0125.767] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.768] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0125.768] WriteFile (in: hFile=0xe4, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0125.768] CloseHandle (hObject=0xe4) returned 1 [0125.768] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa3, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124292dc*=0xa3) returned 1 [0125.769] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5)) returned 1 [0125.769] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.769] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.769] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.769] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.769] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.769] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.769] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0125.770] CloseHandle (hObject=0xe4) returned 1 [0125.770] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.770] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.771] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.780] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429728 | out: lpMode=0x12429728) returned 0 [0125.780] WriteFile (in: hFile=0xe4, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242972c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242972c*=0x1033, lpOverlapped=0x0) returned 1 [0125.781] CloseHandle (hObject=0xe4) returned 1 [0125.781] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.781] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.782] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.782] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales\\*", lpFindFileData=0x1242939c | out: lpFindFileData=0x1242939c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc99f8a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc99f8a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfc99f8a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc99f8a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfc99f8a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfc99f8a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfc9a46c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0125.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0125.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.783] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.783] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.784] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.784] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.784] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.784] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.784] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.784] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.785] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.785] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.785] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.786] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.786] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.786] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.786] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.786] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.786] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.790] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.790] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.790] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.790] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.790] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.790] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.791] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.791] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.791] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.791] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.792] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.792] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.792] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.792] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.793] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.793] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.793] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.793] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.794] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.794] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.794] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.795] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.795] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.795] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.795] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.795] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.795] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.796] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.796] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.796] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.796] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.797] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.797] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.797] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.797] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.797] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.798] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.798] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.798] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.799] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.799] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.799] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.799] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.799] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.799] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.800] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.800] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.800] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.800] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.801] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.801] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.801] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.801] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.801] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.802] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.802] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.802] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.803] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.803] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.803] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ms\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.803] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.803] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.803] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/nl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.804] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.804] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.804] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/no\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.804] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.804] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.805] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/pl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.805] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.805] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.805] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/pt_BR\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.806] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.806] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.806] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/pt_PT\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.806] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.806] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.807] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ro\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.807] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.807] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.807] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ru\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.808] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.808] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.808] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/sk\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.808] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.808] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.808] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/sl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.809] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.825] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.825] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/sr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.825] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.825] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.826] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/sv\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.826] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.826] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.826] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/th\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.827] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.827] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.827] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/tr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.827] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.827] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.828] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/uk\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.828] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.828] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.828] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/vi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.829] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.829] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.829] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/zh_CN\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.829] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.829] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.829] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/zh_TW\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.829] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.830] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.830] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.830] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.830] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293b8 | out: lpFindFileData=0x124293b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.830] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.830] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.830] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x124295bc | out: lpMode=0x124295bc) returned 0 [0125.830] CloseHandle (hObject=0xe4) returned 1 [0125.830] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.830] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.831] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.831] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.831] WriteFile (in: hFile=0xe4, lpBuffer=0x127b4000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127b4000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.832] CloseHandle (hObject=0xe4) returned 1 [0125.832] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.832] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.833] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.833] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca199c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca199c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.833] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca199c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca199c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.833] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfca199c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfca199c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca1e7e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.833] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.833] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.833] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.833] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.833] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.833] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0125.833] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.834] ReadFile (in: hFile=0xe4, lpBuffer=0x127fe100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe100*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0125.835] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1 [0125.835] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.835] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.835] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.835] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.835] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.835] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.835] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.835] CloseHandle (hObject=0x100) returned 1 [0125.835] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.836] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.836] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.836] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.836] WriteFile (in: hFile=0x100, lpBuffer=0x127b6600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127b6600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.837] CloseHandle (hObject=0x100) returned 1 [0125.837] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.837] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.838] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.838] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca25d10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca25d10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca25d10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca25d10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfca25d10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfca25d10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca2ab30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.838] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.838] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.838] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.838] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0125.838] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.839] ReadFile (in: hFile=0x100, lpBuffer=0x127fe200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe200*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0125.839] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0125.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.840] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.840] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.840] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0125.840] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.840] CloseHandle (hObject=0x120) returned 1 [0125.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.840] VirtualAlloc (lpAddress=0x1275c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1275c000 [0125.841] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.841] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0125.841] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.841] WriteFile (in: hFile=0x120, lpBuffer=0x127b8c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127b8c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.842] CloseHandle (hObject=0x120) returned 1 [0125.843] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.843] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.843] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.843] VirtualAlloc (lpAddress=0x1275e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1275e000 [0125.843] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca34770, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca34770, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca34770, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca34770, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfca34770, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfca34770, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca36e80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.844] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.844] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.844] VirtualAlloc (lpAddress=0x12760000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12760000 [0125.844] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.844] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.844] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0125.844] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.845] ReadFile (in: hFile=0x120, lpBuffer=0x127fe300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe300*, lpNumberOfBytesRead=0x124295f0*=0xe0, lpOverlapped=0x0) returned 1 [0125.845] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0125.846] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.846] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.846] VirtualAlloc (lpAddress=0x12762000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x12762000 [0125.846] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.846] VirtualAlloc (lpAddress=0x12768000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12768000 [0125.847] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.847] VirtualAlloc (lpAddress=0x1276a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1276a000 [0125.847] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.847] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.847] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.847] CloseHandle (hObject=0x11c) returned 1 [0125.848] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.848] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.848] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.849] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.849] WriteFile (in: hFile=0x11c, lpBuffer=0x12763300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12763300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.850] CloseHandle (hObject=0x11c) returned 1 [0125.850] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.850] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.850] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.850] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca458e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca458e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.850] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca458e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca458e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.850] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfca458e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfca458e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca4a700, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.850] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.850] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.851] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.851] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.851] VirtualAlloc (lpAddress=0x1276c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1276c000 [0125.851] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.851] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0125.851] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.852] ReadFile (in: hFile=0x11c, lpBuffer=0x127fe400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe400*, lpNumberOfBytesRead=0x124295f0*=0xe0, lpOverlapped=0x0) returned 1 [0125.853] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0125.853] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.853] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.853] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.853] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.853] VirtualAlloc (lpAddress=0x1276e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1276e000 [0125.853] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.853] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0125.853] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.854] CloseHandle (hObject=0xbc) returned 1 [0125.854] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.854] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.854] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0125.854] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.854] WriteFile (in: hFile=0xbc, lpBuffer=0x12765900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12765900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.855] CloseHandle (hObject=0xbc) returned 1 [0125.856] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.856] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.856] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.856] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca51c30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca51c30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.856] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca51c30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca51c30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.856] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfca51c30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfca51c30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca54340, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.856] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.856] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.856] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.856] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.856] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.857] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0125.857] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.857] ReadFile (in: hFile=0xbc, lpBuffer=0x127fe500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe500*, lpNumberOfBytesRead=0x124295f0*=0xe0, lpOverlapped=0x0) returned 1 [0125.858] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0125.858] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.858] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.858] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.858] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.858] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.858] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0125.858] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.859] CloseHandle (hObject=0xe8) returned 1 [0125.859] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.859] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.859] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0125.859] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.859] WriteFile (in: hFile=0xe8, lpBuffer=0x124aa000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124aa000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.860] CloseHandle (hObject=0xe8) returned 1 [0125.860] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.861] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.861] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca5df80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca5df80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.861] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca5df80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca5df80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.861] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfca5df80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfca5df80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca60690, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.861] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.861] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.861] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.861] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.862] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0125.862] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.862] ReadFile (in: hFile=0xe8, lpBuffer=0x127fe600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe600*, lpNumberOfBytesRead=0x124295f0*=0xea, lpOverlapped=0x0) returned 1 [0125.863] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1 [0125.863] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.863] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.863] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.863] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.863] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.863] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0125.864] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.864] CloseHandle (hObject=0xdc) returned 1 [0125.864] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.864] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.864] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0125.865] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.865] WriteFile (in: hFile=0xdc, lpBuffer=0x124ac600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124ac600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.866] CloseHandle (hObject=0xdc) returned 1 [0125.866] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.866] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.866] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.867] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca6a2d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca6a2d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.867] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca6a2d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca6a2d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.867] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfca6a2d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfca6a2d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca6f0f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.867] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.867] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.867] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.867] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.867] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.867] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0125.867] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.868] ReadFile (in: hFile=0xdc, lpBuffer=0x127fe700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe700*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0125.868] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112)) returned 1 [0125.869] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.869] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.869] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.869] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.869] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.869] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0125.869] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.869] CloseHandle (hObject=0x110) returned 1 [0125.869] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.869] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.870] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0125.870] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.870] WriteFile (in: hFile=0x110, lpBuffer=0x124aec00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124aec00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.871] CloseHandle (hObject=0x110) returned 1 [0125.871] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.871] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.871] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.871] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca76620, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca76620, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.872] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca76620, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca76620, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.872] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfca76620, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfca76620, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca7b440, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.872] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.872] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.872] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.872] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.872] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.872] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0125.872] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.872] ReadFile (in: hFile=0x110, lpBuffer=0x127fe800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe800*, lpNumberOfBytesRead=0x124295f0*=0xd6, lpOverlapped=0x0) returned 1 [0125.873] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1 [0125.873] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.873] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.874] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.874] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.874] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.874] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0125.874] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.874] CloseHandle (hObject=0x114) returned 1 [0125.874] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.874] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.874] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0125.875] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.875] WriteFile (in: hFile=0x114, lpBuffer=0x12737300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12737300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.876] CloseHandle (hObject=0x114) returned 1 [0125.876] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.876] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.876] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.876] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca82970, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca82970, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.876] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfca82970, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca82970, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.877] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfca82970, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfca82970, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfca87790, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.877] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.877] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.877] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.877] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.877] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.877] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0125.877] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.877] ReadFile (in: hFile=0x114, lpBuffer=0x127fe900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe900*, lpNumberOfBytesRead=0x124295f0*=0xd7, lpOverlapped=0x0) returned 1 [0125.878] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0125.878] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.878] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.878] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.879] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.879] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.879] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0125.879] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.879] CloseHandle (hObject=0xf0) returned 1 [0125.879] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.879] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.879] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0125.894] SetEvent (hEvent=0xac) returned 1 [0125.894] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.894] WriteFile (in: hFile=0xf0, lpBuffer=0x12739900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12739900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.895] CloseHandle (hObject=0xf0) returned 1 [0125.895] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.895] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.896] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.896] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcab0fa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcab0fa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.896] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcab0fa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcab0fa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.896] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcab0fa0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcab0fa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcab36b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.896] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.896] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.896] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.896] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.896] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.896] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0125.897] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.897] ReadFile (in: hFile=0xf0, lpBuffer=0x127fea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fea00*, lpNumberOfBytesRead=0x124295f0*=0xdf, lpOverlapped=0x0) returned 1 [0125.898] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0125.898] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.898] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.898] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.898] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.898] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.898] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0125.898] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.898] CloseHandle (hObject=0x118) returned 1 [0125.898] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.898] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.899] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0125.900] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.900] WriteFile (in: hFile=0x118, lpBuffer=0x1274a000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1274a000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.901] CloseHandle (hObject=0x118) returned 1 [0125.901] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.901] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.901] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.901] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcab36b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcab36b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcab36b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcab36b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcab36b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcab36b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcab36b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.902] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.902] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.902] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.902] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0125.902] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.902] ReadFile (in: hFile=0x118, lpBuffer=0x127feb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127feb00*, lpNumberOfBytesRead=0x124295f0*=0xdd, lpOverlapped=0x0) returned 1 [0125.903] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0125.903] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.903] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.904] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.904] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.904] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.904] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0125.904] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.904] CloseHandle (hObject=0x124) returned 1 [0125.904] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.904] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.904] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0125.904] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.905] WriteFile (in: hFile=0x124, lpBuffer=0x1274c600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1274c600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.906] CloseHandle (hObject=0x124) returned 1 [0125.906] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.906] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.910] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.910] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcab36b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcab36b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.910] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcab36b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcab36b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.910] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcab36b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcab36b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcab36b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.910] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.910] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.910] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.911] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.911] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.911] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0125.911] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.911] ReadFile (in: hFile=0x124, lpBuffer=0x127fec00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fec00*, lpNumberOfBytesRead=0x124295f0*=0xd6, lpOverlapped=0x0) returned 1 [0125.912] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1 [0125.912] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.912] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.912] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.912] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.912] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.913] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0125.913] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.913] CloseHandle (hObject=0x128) returned 1 [0125.913] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.913] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.913] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0125.913] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.913] WriteFile (in: hFile=0x128, lpBuffer=0x1274ec00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1274ec00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.914] CloseHandle (hObject=0x128) returned 1 [0125.914] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.915] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.915] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.915] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcad9810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcad9810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.915] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcad9810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcad9810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.915] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcad9810, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcad9810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcad9810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.915] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.915] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.915] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.915] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.915] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.916] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0125.916] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.916] ReadFile (in: hFile=0x128, lpBuffer=0x127fed00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fed00*, lpNumberOfBytesRead=0x124295f0*=0xd9, lpOverlapped=0x0) returned 1 [0125.917] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0125.917] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.917] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.917] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.917] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.917] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.917] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0125.917] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.918] CloseHandle (hObject=0x12c) returned 1 [0125.918] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.918] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.918] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0125.918] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.918] WriteFile (in: hFile=0x12c, lpBuffer=0x1278d300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1278d300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.919] CloseHandle (hObject=0x12c) returned 1 [0125.919] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.919] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.920] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.920] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcad9810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcad9810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.920] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcad9810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcad9810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.920] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcad9810, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcad9810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcad9810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.920] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.920] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.920] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.920] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.920] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.920] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0125.920] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.921] ReadFile (in: hFile=0x12c, lpBuffer=0x127fee00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fee00*, lpNumberOfBytesRead=0x124295f0*=0xe0, lpOverlapped=0x0) returned 1 [0125.922] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0125.922] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.922] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.922] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.922] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.922] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.922] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0125.922] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.922] CloseHandle (hObject=0x130) returned 1 [0125.922] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.922] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.923] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0125.923] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.924] WriteFile (in: hFile=0x130, lpBuffer=0x1278f900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1278f900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.925] CloseHandle (hObject=0x130) returned 1 [0125.925] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.925] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.925] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.925] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcad9810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcad9810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.925] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcad9810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcad9810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.925] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcad9810, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcad9810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcad9810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.925] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.925] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.926] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.926] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.926] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.926] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0125.926] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.926] ReadFile (in: hFile=0x130, lpBuffer=0x127fef00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fef00*, lpNumberOfBytesRead=0x124295f0*=0xde, lpOverlapped=0x0) returned 1 [0125.927] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0125.927] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.927] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.927] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.928] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.928] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.928] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0125.928] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.928] CloseHandle (hObject=0x134) returned 1 [0125.928] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.928] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.928] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0125.929] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.929] WriteFile (in: hFile=0x134, lpBuffer=0x127a4000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127a4000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.930] CloseHandle (hObject=0x134) returned 1 [0125.930] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.930] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.930] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.930] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb06ea0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb06ea0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.930] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb06ea0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb06ea0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.930] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcb06ea0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcb06ea0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb095b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.930] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.931] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.931] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.931] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.931] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0125.931] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.931] ReadFile (in: hFile=0x134, lpBuffer=0x127ff000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff000*, lpNumberOfBytesRead=0x124295f0*=0xe1, lpOverlapped=0x0) returned 1 [0125.932] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1 [0125.932] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.932] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.932] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.933] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.933] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.933] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0125.933] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.933] CloseHandle (hObject=0x138) returned 1 [0125.933] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.933] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.933] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0125.933] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.934] WriteFile (in: hFile=0x138, lpBuffer=0x127a6600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127a6600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.935] CloseHandle (hObject=0x138) returned 1 [0125.935] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.935] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.935] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.935] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb131f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb131f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.935] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb131f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb131f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.935] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcb131f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcb131f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb15900, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.935] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.936] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.936] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.936] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.936] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.936] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0125.936] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.936] ReadFile (in: hFile=0x138, lpBuffer=0x127ff100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff100*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0125.937] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123)) returned 1 [0125.937] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.937] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.937] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.937] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.938] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.938] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0125.938] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.938] CloseHandle (hObject=0x13c) returned 1 [0125.938] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.938] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.938] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0125.939] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.939] WriteFile (in: hFile=0x13c, lpBuffer=0x127a8c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127a8c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.940] CloseHandle (hObject=0x13c) returned 1 [0125.940] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.940] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.941] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.941] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb1f540, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb1f540, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb1f540, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb1f540, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcb1f540, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcb1f540, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb24360, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.941] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.941] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.941] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.941] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0125.942] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.942] ReadFile (in: hFile=0x13c, lpBuffer=0x127ff200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff200*, lpNumberOfBytesRead=0x124295f0*=0xe6, lpOverlapped=0x0) returned 1 [0125.943] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0125.943] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.943] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.943] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.943] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.943] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.943] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0125.943] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.944] CloseHandle (hObject=0xc0) returned 1 [0125.944] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.944] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.944] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0125.944] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.944] WriteFile (in: hFile=0xc0, lpBuffer=0x127d7300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127d7300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.945] CloseHandle (hObject=0xc0) returned 1 [0125.946] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.946] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.946] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.946] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb2b890, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb2b890, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.946] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb2b890, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb2b890, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.946] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcb2b890, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcb2b890, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb306b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.946] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.946] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.946] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.946] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.946] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.946] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0125.947] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.947] ReadFile (in: hFile=0xc0, lpBuffer=0x127ff300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff300*, lpNumberOfBytesRead=0x124295f0*=0xd0, lpOverlapped=0x0) returned 1 [0125.948] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0125.948] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.948] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.948] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.948] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.948] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.948] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0125.949] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.949] CloseHandle (hObject=0x98) returned 1 [0125.949] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.949] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.949] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0125.949] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.950] WriteFile (in: hFile=0x98, lpBuffer=0x127d9900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127d9900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.951] CloseHandle (hObject=0x98) returned 1 [0125.951] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.951] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.951] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.951] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb3a2f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb3a2f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.951] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb3a2f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb3a2f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.951] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcb3a2f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcb3a2f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb3ca00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.951] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.951] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.951] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.952] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.952] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.952] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0125.952] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.952] ReadFile (in: hFile=0x98, lpBuffer=0x127ff400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff400*, lpNumberOfBytesRead=0x124295f0*=0xdd, lpOverlapped=0x0) returned 1 [0125.953] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0125.953] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.953] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.953] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.953] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.954] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.954] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0125.954] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.954] CloseHandle (hObject=0xd0) returned 1 [0125.954] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.954] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.954] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0125.955] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.955] WriteFile (in: hFile=0xd0, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.956] CloseHandle (hObject=0xd0) returned 1 [0125.956] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.957] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.957] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.957] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb46640, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb46640, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.957] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb46640, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb46640, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.957] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcb46640, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcb46640, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb4b460, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.957] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.957] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.957] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.957] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.957] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.957] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0125.958] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.958] ReadFile (in: hFile=0xd0, lpBuffer=0x127ff500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff500*, lpNumberOfBytesRead=0x124295f0*=0xec, lpOverlapped=0x0) returned 1 [0125.959] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1 [0125.959] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.959] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.959] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.959] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.959] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.959] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0125.959] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.959] CloseHandle (hObject=0xc8) returned 1 [0125.960] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.960] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.960] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0125.960] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.960] WriteFile (in: hFile=0xc8, lpBuffer=0x127f2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127f2600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.961] CloseHandle (hObject=0xc8) returned 1 [0125.961] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.961] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.962] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.962] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb52990, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb52990, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.962] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb52990, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb52990, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.962] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcb52990, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcb52990, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb577b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.962] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.962] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.962] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.962] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.962] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.962] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0125.962] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.963] ReadFile (in: hFile=0xc8, lpBuffer=0x127ff600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff600*, lpNumberOfBytesRead=0x124295f0*=0xe6, lpOverlapped=0x0) returned 1 [0125.964] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0125.964] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.964] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.964] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.964] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.964] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.964] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0125.964] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.964] CloseHandle (hObject=0xd8) returned 1 [0125.964] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.965] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.965] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0125.965] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.965] WriteFile (in: hFile=0xd8, lpBuffer=0x127f4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127f4c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.966] CloseHandle (hObject=0xd8) returned 1 [0125.966] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.966] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.966] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.967] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb5ece0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb5ece0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.967] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb5ece0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb5ece0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.967] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcb5ece0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcb5ece0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb63b00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.967] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.967] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.967] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.967] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.967] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.967] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0125.967] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.968] ReadFile (in: hFile=0xd8, lpBuffer=0x127ff700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff700*, lpNumberOfBytesRead=0x124295f0*=0xe4, lpOverlapped=0x0) returned 1 [0125.968] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4)) returned 1 [0125.969] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.969] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.969] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.969] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.969] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.969] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0125.969] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.969] CloseHandle (hObject=0xcc) returned 1 [0125.969] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.969] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.969] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0125.970] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.971] WriteFile (in: hFile=0xcc, lpBuffer=0x124fb300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124fb300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.972] CloseHandle (hObject=0xcc) returned 1 [0125.972] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.972] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.972] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.972] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb6d740, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb6d740, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.972] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb6d740, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb6d740, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.972] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcb6d740, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcb6d740, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb6fe50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.972] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.972] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.972] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.972] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.973] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.973] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0125.973] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.973] ReadFile (in: hFile=0xcc, lpBuffer=0x127ff800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff800*, lpNumberOfBytesRead=0x124295f0*=0xe9, lpOverlapped=0x0) returned 1 [0125.974] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1 [0125.974] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.974] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.974] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.974] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.974] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0125.974] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0125.975] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0125.975] CloseHandle (hObject=0xe0) returned 1 [0125.975] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.975] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.975] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0125.975] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0125.976] WriteFile (in: hFile=0xe0, lpBuffer=0x124fd900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124fd900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0125.977] CloseHandle (hObject=0xe0) returned 1 [0125.977] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\@_read_to_recover_files_@.txt")) returned 0x2020 [0125.977] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.977] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.977] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ms\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb79a90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb79a90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0125.977] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb79a90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb79a90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.977] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcb79a90, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcb79a90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb7c1a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.977] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.977] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.977] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.978] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ms/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0125.978] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ms/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0125.980] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0125.980] ReadFile (in: hFile=0xe0, lpBuffer=0x127ff900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff900*, lpNumberOfBytesRead=0x124295f0*=0xd2, lpOverlapped=0x0) returned 1 [0125.981] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ms/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0125.984] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.984] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb884f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb884f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.984] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcb884f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcb884f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb8ac00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.985] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.985] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.985] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.989] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.989] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb94840, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb94840, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.989] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcb94840, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcb94840, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb96f50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.989] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.989] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.989] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.992] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.992] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcb9bd70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb9bd70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.992] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcb9bd70, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcb9bd70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcb9e480, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.992] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.992] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.992] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.995] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/pt_BR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.996] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcba32a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcba32a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.996] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcba32a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcba32a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcba80c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.996] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.996] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.996] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0125.999] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/pt_PT\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0125.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcbacee0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbacee0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcbacee0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcbacee0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbaf5f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0125.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0125.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.999] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.002] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ro\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.002] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcbb4410, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbb4410, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.003] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcbb4410, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcbb4410, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbb9230, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.003] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.003] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.003] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.005] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/ru\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.006] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcbbe050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbbe050, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.006] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcbbe050, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcbbe050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbc0760, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.006] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.006] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.006] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.009] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/sk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.010] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcbc5580, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbc5580, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.010] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcbc5580, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcbc5580, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbca3a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.010] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.010] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.010] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.013] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/sl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.013] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcbcf1c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbcf1c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.013] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcbcf1c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcbcf1c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbd18d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.013] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.013] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.013] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.016] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/sr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.016] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcbd66f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbd66f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.016] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcbd66f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcbd66f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbd8e00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.016] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.016] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.016] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.020] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/sv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.020] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcbe0330, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbe0330, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.020] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcbe0330, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcbe0330, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbe2a40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.020] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.020] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.020] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.023] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/th\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.023] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcbe7860, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbe7860, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.023] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcbe7860, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcbe7860, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbe9f70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.023] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.023] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.023] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.027] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/tr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcbf14a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbf14a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcbf14a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcbf14a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbf3bb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.027] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.030] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/uk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.030] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcbf89d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbf89d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.030] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcbf89d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcbf89d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbfb0e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.030] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.030] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.030] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.033] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/vi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.033] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcbfff00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcbfff00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.034] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcbfff00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcbfff00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcc02610, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.034] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.034] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.034] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.037] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/zh_CN\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.037] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcc09b40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcc09b40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.037] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcc09b40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcc09b40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcc0c250, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.037] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.037] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.037] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.040] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_locales/zh_TW\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.040] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcc11070, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcc11070, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.040] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcc11070, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcc11070, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcc13780, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.040] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.040] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.040] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.044] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek/0.9_0/_metadata\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.045] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcc1d3c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcc1d3c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.045] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcc185a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcc185a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcc1fad0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.045] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85d166b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0126.045] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0126.045] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.045] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.058] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcc3a880, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcc3a880, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0126.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcc3a880, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcc3a880, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcc3cf90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.059] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.059] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.064] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.064] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcc492e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcc492e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.064] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcc492e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcc492e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcc4b9f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.064] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0126.064] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0126.064] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0126.064] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0126.064] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0126.064] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0126.065] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0126.065] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.065] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.078] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12443340 | out: pbBuffer=0x12443340) returned 1 [0126.079] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12551702 | out: pbBuffer=0x12551702) returned 1 [0126.079] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12551718 | out: pbBuffer=0x12551718) returned 1 [0126.079] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x125517af | out: pbBuffer=0x125517af) returned 1 [0126.081] SetEvent (hEvent=0xb8) returned 1 [0126.081] ReadFile (in: hFile=0x184, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0xc8d, lpOverlapped=0x0) returned 1 [0126.081] GetFileType (hFile=0x184) returned 0x1 [0126.081] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0126.081] WriteFile (in: hFile=0x184, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0xc8d, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x12429608*=0xc8d, lpOverlapped=0x12429614) returned 1 [0126.081] GetFileType (hFile=0x184) returned 0x1 [0126.081] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xc8d, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0126.081] ReadFile (in: hFile=0x184, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0126.081] CloseHandle (hObject=0x184) returned 1 [0126.082] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.082] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0126.082] WriteFile (in: hFile=0x184, lpBuffer=0x125d3680*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x125d3680*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0126.082] CloseHandle (hObject=0x184) returned 1 [0126.082] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x125b14a0*, nNumberOfCharsToWrite=0xa8, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x125b14a0*, lpNumberOfCharsWritten=0x124292dc*=0xa8) returned 1 [0126.083] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f)) returned 1 [0126.083] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.084] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0126.084] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0126.085] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127fe002 | out: pbBuffer=0x127fe002) returned 1 [0126.085] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fe010 | out: pbBuffer=0x127fe010) returned 1 [0126.085] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fe093 | out: pbBuffer=0x127fe093) returned 1 [0126.087] CloseHandle (hObject=0x11c) returned 1 [0126.087] CloseHandle (hObject=0x120) returned 1 [0126.087] CloseHandle (hObject=0x100) returned 1 [0126.087] CloseHandle (hObject=0xe4) returned 1 [0126.087] CloseHandle (hObject=0xf0) returned 1 [0126.087] CloseHandle (hObject=0x114) returned 1 [0126.087] CloseHandle (hObject=0x110) returned 1 [0126.087] CloseHandle (hObject=0xdc) returned 1 [0126.087] CloseHandle (hObject=0xe8) returned 1 [0126.087] CloseHandle (hObject=0xbc) returned 1 [0126.087] CloseHandle (hObject=0x134) returned 1 [0126.087] CloseHandle (hObject=0x130) returned 1 [0126.087] CloseHandle (hObject=0x12c) returned 1 [0126.087] CloseHandle (hObject=0x128) returned 1 [0126.088] CloseHandle (hObject=0x124) returned 1 [0126.088] CloseHandle (hObject=0x118) returned 1 [0126.088] CloseHandle (hObject=0xc8) returned 1 [0126.088] CloseHandle (hObject=0xd0) returned 1 [0126.088] CloseHandle (hObject=0x98) returned 1 [0126.088] CloseHandle (hObject=0xc0) returned 1 [0126.088] CloseHandle (hObject=0x13c) returned 1 [0126.088] CloseHandle (hObject=0x138) returned 1 [0126.088] CloseHandle (hObject=0xf4) returned 1 [0126.088] CloseHandle (hObject=0xec) returned 1 [0126.088] CloseHandle (hObject=0xe0) returned 1 [0126.088] CloseHandle (hObject=0xcc) returned 1 [0126.088] CloseHandle (hObject=0xd8) returned 1 [0126.088] CloseHandle (hObject=0x140) returned 1 [0126.089] CloseHandle (hObject=0x10c) returned 1 [0126.089] CloseHandle (hObject=0x108) returned 1 [0126.089] CloseHandle (hObject=0x104) returned 1 [0126.089] CloseHandle (hObject=0xfc) returned 1 [0126.089] CloseHandle (hObject=0xf8) returned 1 [0126.089] CloseHandle (hObject=0x158) returned 1 [0126.089] CloseHandle (hObject=0x154) returned 1 [0126.089] CloseHandle (hObject=0x150) returned 1 [0126.089] CloseHandle (hObject=0x14c) returned 1 [0126.089] CloseHandle (hObject=0x148) returned 1 [0126.089] CloseHandle (hObject=0x144) returned 1 [0126.089] CloseHandle (hObject=0x16c) returned 1 [0126.089] CloseHandle (hObject=0x168) returned 1 [0126.090] CloseHandle (hObject=0x164) returned 1 [0126.090] CloseHandle (hObject=0x160) returned 1 [0126.090] CloseHandle (hObject=0x15c) returned 1 [0126.121] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0126.319] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0126.493] SetEvent (hEvent=0x7c) returned 1 [0126.493] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0126.495] SetEvent (hEvent=0x7c) returned 1 [0126.495] SetEvent (hEvent=0xa0) returned 1 [0126.495] CloseHandle (hObject=0x168) returned 1 [0126.495] CloseHandle (hObject=0x164) returned 1 [0126.495] CloseHandle (hObject=0x160) returned 1 [0126.495] CloseHandle (hObject=0x15c) returned 1 [0126.495] CloseHandle (hObject=0x184) returned 1 [0126.495] CloseHandle (hObject=0x138) returned 1 [0126.495] CloseHandle (hObject=0xf8) returned 1 [0126.495] CloseHandle (hObject=0x158) returned 1 [0126.495] CloseHandle (hObject=0x154) returned 1 [0126.495] CloseHandle (hObject=0xec) returned 1 [0126.496] CloseHandle (hObject=0xe0) returned 1 [0126.496] CloseHandle (hObject=0xcc) returned 1 [0126.496] CloseHandle (hObject=0xd8) returned 1 [0126.496] CloseHandle (hObject=0x140) returned 1 [0126.496] CloseHandle (hObject=0x10c) returned 1 [0126.496] CloseHandle (hObject=0x108) returned 1 [0126.496] CloseHandle (hObject=0x104) returned 1 [0126.496] CloseHandle (hObject=0xfc) returned 1 [0126.496] SwitchToThread () returned 1 [0126.498] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0127.101] SetEvent (hEvent=0xa0) returned 1 [0127.101] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0127.102] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0127.103] SetEvent (hEvent=0xa0) returned 1 [0127.103] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0127.107] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0127.108] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0127.619] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0127.697] SetEvent (hEvent=0x7c) returned 1 [0127.697] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0127.697] SetEvent (hEvent=0x7c) returned 1 [0127.697] SwitchToThread () returned 1 [0127.702] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0127.705] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0127.708] SetEvent (hEvent=0x7c) returned 1 [0127.708] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0127.709] SetEvent (hEvent=0x7c) returned 1 [0127.709] SwitchToThread () returned 1 [0127.710] SetEvent (hEvent=0xa0) returned 1 [0127.710] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0127.716] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0127.878] SetEvent (hEvent=0xa0) returned 1 [0127.878] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0127.882] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0127.882] SetEvent (hEvent=0xa0) returned 1 [0127.882] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0127.885] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0127.885] CloseHandle (hObject=0x13c) returned 1 [0127.885] CloseHandle (hObject=0x168) returned 1 [0127.885] CloseHandle (hObject=0x164) returned 1 [0127.885] CloseHandle (hObject=0x160) returned 1 [0127.885] CloseHandle (hObject=0x10c) returned 1 [0127.885] CloseHandle (hObject=0x108) returned 1 [0127.885] CloseHandle (hObject=0x118) returned 1 [0127.885] CloseHandle (hObject=0xc8) returned 1 [0127.885] CloseHandle (hObject=0x16c) returned 1 [0127.885] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0128.202] SetEvent (hEvent=0xa0) returned 1 [0128.202] SetEvent (hEvent=0xb8) returned 1 [0128.202] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0128.209] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0128.434] SetEvent (hEvent=0xb8) returned 1 [0128.435] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0128.436] SetEvent (hEvent=0xb8) returned 1 [0128.436] SwitchToThread () returned 1 [0128.441] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0128.462] SetEvent (hEvent=0xb8) returned 1 [0128.462] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0128.464] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0128.464] SetEvent (hEvent=0xb8) returned 1 [0128.464] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0128.465] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0128.465] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.709] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.714] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.717] SetEvent (hEvent=0x7c) returned 1 [0129.717] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.717] SetEvent (hEvent=0x7c) returned 1 [0129.717] SwitchToThread () returned 1 [0129.719] SetEvent (hEvent=0xa0) returned 1 [0129.719] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.725] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.728] SetEvent (hEvent=0x7c) returned 1 [0129.728] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.728] SetEvent (hEvent=0x7c) returned 1 [0129.728] SwitchToThread () returned 1 [0129.729] SetEvent (hEvent=0xa0) returned 1 [0129.729] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.735] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.738] SetEvent (hEvent=0x7c) returned 1 [0129.738] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.739] SetEvent (hEvent=0x7c) returned 1 [0129.739] SwitchToThread () returned 1 [0129.740] SetEvent (hEvent=0xa0) returned 1 [0129.740] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.755] SetEvent (hEvent=0x7c) returned 1 [0129.755] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.756] SetEvent (hEvent=0x7c) returned 1 [0129.756] SetEvent (hEvent=0xa0) returned 1 [0129.756] CloseHandle (hObject=0x110) returned 1 [0129.756] CloseHandle (hObject=0xdc) returned 1 [0129.756] SwitchToThread () returned 1 [0129.757] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.761] SetEvent (hEvent=0x7c) returned 1 [0129.761] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.761] SetEvent (hEvent=0x7c) returned 1 [0129.761] SwitchToThread () returned 1 [0129.762] SetEvent (hEvent=0xa0) returned 1 [0129.762] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.950] SetEvent (hEvent=0xa0) returned 1 [0129.950] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0129.955] SetEvent (hEvent=0xa0) returned 1 [0129.955] SetEvent (hEvent=0xb8) returned 1 [0129.955] CloseHandle (hObject=0x114) returned 1 [0129.955] CloseHandle (hObject=0xe8) returned 1 [0129.955] CloseHandle (hObject=0xbc) returned 1 [0129.956] CloseHandle (hObject=0x180) returned 1 [0129.956] CloseHandle (hObject=0x17c) returned 1 [0129.956] CloseHandle (hObject=0x118) returned 1 [0129.956] CloseHandle (hObject=0xc8) returned 1 [0129.956] CloseHandle (hObject=0x16c) returned 1 [0129.956] CloseHandle (hObject=0x144) returned 1 [0129.956] CloseHandle (hObject=0xd0) returned 1 [0129.956] CloseHandle (hObject=0x154) returned 1 [0129.956] CloseHandle (hObject=0x168) returned 1 [0129.956] CloseHandle (hObject=0x198) returned 1 [0129.956] CloseHandle (hObject=0x12c) returned 1 [0129.956] CloseHandle (hObject=0x128) returned 1 [0129.956] CloseHandle (hObject=0x19c) returned 1 [0129.956] CloseHandle (hObject=0x15c) returned 1 [0129.956] CloseHandle (hObject=0x120) returned 1 [0129.957] CloseHandle (hObject=0x148) returned 1 [0129.957] CloseHandle (hObject=0x10c) returned 1 [0129.957] SwitchToThread () returned 1 [0129.958] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.011] SetEvent (hEvent=0xb8) returned 1 [0130.011] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0130.013] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.013] SetEvent (hEvent=0xb8) returned 1 [0130.013] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0130.016] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.016] CloseHandle (hObject=0x10c) returned 1 [0130.016] CloseHandle (hObject=0xc0) returned 1 [0130.016] CloseHandle (hObject=0x110) returned 1 [0130.016] CloseHandle (hObject=0xdc) returned 1 [0130.016] CloseHandle (hObject=0x124) returned 1 [0130.016] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.102] SwitchToThread () returned 1 [0130.103] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.105] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.108] SetEvent (hEvent=0xb8) returned 1 [0130.109] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.109] SetEvent (hEvent=0xb8) returned 1 [0130.109] SwitchToThread () returned 1 [0130.110] SetEvent (hEvent=0xa0) returned 1 [0130.110] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.115] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.128] SetEvent (hEvent=0xb8) returned 1 [0130.128] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.128] SetEvent (hEvent=0xb8) returned 1 [0130.128] SetEvent (hEvent=0xa0) returned 1 [0130.128] CloseHandle (hObject=0x154) returned 1 [0130.128] SwitchToThread () returned 1 [0130.130] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.177] SetEvent (hEvent=0xa0) returned 1 [0130.177] SetEvent (hEvent=0x7c) returned 1 [0130.177] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0130.178] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.178] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0130.178] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.178] SetEvent (hEvent=0xa0) returned 1 [0130.178] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0130.181] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.181] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0130.181] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.181] SetEvent (hEvent=0xa0) returned 1 [0130.181] ReadFile (in: hFile=0x19c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x1200, lpOverlapped=0x0) returned 1 [0130.182] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0130.182] SetEvent (hEvent=0xa0) returned 1 [0130.182] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0130.182] GetFileType (hFile=0x19c) returned 0x1 [0130.182] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0130.182] WriteFile (in: hFile=0x19c, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x12429800*=0x1200, lpOverlapped=0x1242980c) returned 1 [0130.182] GetFileType (hFile=0x19c) returned 0x1 [0130.182] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1200, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0130.182] ReadFile (in: hFile=0x19c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0130.183] CloseHandle (hObject=0x19c) returned 1 [0130.183] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.183] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0130.183] WriteFile (in: hFile=0x19c, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0130.183] CloseHandle (hObject=0x19c) returned 1 [0130.183] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d8000*, nNumberOfCharsToWrite=0xb3, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x124d8000*, lpNumberOfCharsWritten=0x124294d4*=0xb3) returned 1 [0130.184] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1 [0130.184] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.184] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0130.184] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0130.185] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0130.185] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2102 | out: pbBuffer=0x124c2102) returned 1 [0130.186] SetEvent (hEvent=0xb8) returned 1 [0130.186] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x1200, lpOverlapped=0x0) returned 1 [0130.187] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0130.187] SetEvent (hEvent=0xb8) returned 1 [0130.187] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0130.187] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.187] GetFileType (hFile=0x19c) returned 0x1 [0130.187] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0130.187] WriteFile (in: hFile=0x19c, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x12429800*=0x1200, lpOverlapped=0x1242980c) returned 1 [0130.188] GetFileType (hFile=0x19c) returned 0x1 [0130.188] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1200, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0130.188] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0130.188] CloseHandle (hObject=0x19c) returned 1 [0130.188] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.188] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0130.188] WriteFile (in: hFile=0x19c, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0130.188] CloseHandle (hObject=0x19c) returned 1 [0130.188] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa5, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124294d4*=0xa5) returned 1 [0130.189] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1 [0130.189] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.189] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0130.190] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0130.190] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0130.190] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c203e | out: pbBuffer=0x124c203e) returned 1 [0130.192] SetEvent (hEvent=0xa0) returned 1 [0130.192] ReadFile (in: hFile=0x19c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x1200, lpOverlapped=0x0) returned 1 [0130.192] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0130.192] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.192] SetEvent (hEvent=0xa0) returned 1 [0130.192] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0130.193] GetFileType (hFile=0x19c) returned 0x1 [0130.193] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0130.193] WriteFile (in: hFile=0x19c, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x12429800*=0x1200, lpOverlapped=0x1242980c) returned 1 [0130.193] GetFileType (hFile=0x19c) returned 0x1 [0130.193] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1200, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0130.193] ReadFile (in: hFile=0x19c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0130.193] CloseHandle (hObject=0x19c) returned 1 [0130.193] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.193] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0130.194] WriteFile (in: hFile=0x19c, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0130.194] CloseHandle (hObject=0x19c) returned 1 [0130.194] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa5, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124294d4*=0xa5) returned 1 [0130.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.195] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.195] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.195] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.195] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0130.195] CloseHandle (hObject=0x19c) returned 1 [0130.196] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.196] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.196] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.197] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0130.197] WriteFile (in: hFile=0x19c, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0130.198] CloseHandle (hObject=0x19c) returned 1 [0130.198] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.199] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.199] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff2a4840, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff2a4840, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.199] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff2a4840, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff2a4840, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.199] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff2a4840, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff2a4840, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff2a9660, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.199] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0130.199] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0130.199] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0130.199] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0130.199] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.199] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.199] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.200] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/CurrentDatabase_372.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.200] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.200] ReadFile (in: hFile=0x19c, lpBuffer=0x124c2200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124c2200*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.203] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/LocalMLS_3.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.204] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.204] ReadFile (in: hFile=0x154, lpBuffer=0x124c2300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124c2300*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.206] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.206] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.206] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.206] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.207] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.207] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.207] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/CurrentDatabase_372.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000)) returned 1 [0130.207] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/LocalMLS_3.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c)) returned 1 [0130.207] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.208] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.208] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.208] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0130.208] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0130.208] CloseHandle (hObject=0x148) returned 1 [0130.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.208] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0130.209] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0130.209] WriteFile (in: hFile=0x148, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0130.210] CloseHandle (hObject=0x148) returned 1 [0130.210] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.210] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.210] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.210] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff2c1d00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff2c1d00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff2c1d00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff2c1d00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff2c1d00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff2c1d00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff2c4410, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.211] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0130.211] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.211] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.211] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.212] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.212] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0130.212] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.212] CloseHandle (hObject=0x148) returned 1 [0130.212] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.212] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.212] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0130.212] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0130.213] WriteFile (in: hFile=0x148, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0130.214] CloseHandle (hObject=0x148) returned 1 [0130.214] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.214] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.214] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.214] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff2cb940, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff2cb940, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.214] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff2cb940, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff2cb940, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.214] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0000E713", cAlternateFileName="")) returned 1 [0130.214] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1 [0130.214] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff2cb940, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff2cb940, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff2ce050, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.214] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.214] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.214] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.214] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.217] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.217] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.217] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.219] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.219] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.220] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.220] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.220] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.220] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0130.221] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0130.221] WriteFile (in: hFile=0x148, lpBuffer=0x12492000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12492000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0130.222] CloseHandle (hObject=0x148) returned 1 [0130.222] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.222] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.222] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.222] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff2df1c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff2df1c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff2df1c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff2df1c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff2df1c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff2df1c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff2e3fe0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.223] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.223] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0130.224] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.224] ReadFile (in: hFile=0x148, lpBuffer=0x124c2a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c2a00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.225] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0130.226] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.226] ReadFile (in: hFile=0x120, lpBuffer=0x124c2b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c2b00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.228] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0130.229] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.229] ReadFile (in: hFile=0x15c, lpBuffer=0x124c2c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c2c00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.230] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0130.231] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.231] ReadFile (in: hFile=0x10c, lpBuffer=0x124c2d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c2d00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.233] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0130.233] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.233] ReadFile (in: hFile=0x124, lpBuffer=0x124c2e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c2e00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.234] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0130.235] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.235] ReadFile (in: hFile=0xdc, lpBuffer=0x124c2f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c2f00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.237] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0130.237] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.237] ReadFile (in: hFile=0x110, lpBuffer=0x124c3000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c3000*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.238] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0130.239] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.239] ReadFile (in: hFile=0xc0, lpBuffer=0x124c3100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c3100*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.241] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.241] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.241] ReadFile (in: hFile=0x128, lpBuffer=0x124c3300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c3300*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.243] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0130.243] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.243] ReadFile (in: hFile=0x12c, lpBuffer=0x124c3400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c3400*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.246] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0130.247] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.247] ReadFile (in: hFile=0x198, lpBuffer=0x124c3500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c3500*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.248] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0130.248] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.249] ReadFile (in: hFile=0x168, lpBuffer=0x124c3600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c3600*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.250] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.250] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.250] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0130.251] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1 [0130.251] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1 [0130.251] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1 [0130.251] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1 [0130.251] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1 [0130.251] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0130.251] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1 [0130.251] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1 [0130.251] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1 [0130.251] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1 [0130.251] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1 [0130.251] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.252] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.252] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.252] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.252] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.252] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/0000E713/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0130.252] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0130.252] CloseHandle (hObject=0xd0) returned 1 [0130.252] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.253] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.253] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0130.253] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0130.254] WriteFile (in: hFile=0xd0, lpBuffer=0x12494600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12494600*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0130.255] CloseHandle (hObject=0xd0) returned 1 [0130.255] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.255] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.255] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.255] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff32d3c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff32d3c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff32d3c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff32d3c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff32d3c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff32d3c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff32fad0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.256] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.256] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.256] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0130.256] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.257] ReadFile (in: hFile=0xd0, lpBuffer=0x124c3d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c3d00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.258] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0130.259] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.259] ReadFile (in: hFile=0x144, lpBuffer=0x124c3e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c3e00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.260] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0130.261] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.261] ReadFile (in: hFile=0x16c, lpBuffer=0x124c3f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c3f00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.262] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0130.263] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.264] ReadFile (in: hFile=0xc8, lpBuffer=0x12588000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12588000*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.265] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0130.265] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.266] ReadFile (in: hFile=0x118, lpBuffer=0x12588100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12588100*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.267] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0130.268] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.268] ReadFile (in: hFile=0x17c, lpBuffer=0x12588200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12588200*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.270] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0130.270] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.270] ReadFile (in: hFile=0x180, lpBuffer=0x12588300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12588300*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.271] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0130.272] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.272] ReadFile (in: hFile=0xbc, lpBuffer=0x12588400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12588400*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0130.274] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.274] ReadFile (in: hFile=0xe8, lpBuffer=0x12588600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12588600*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.276] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0130.276] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.276] ReadFile (in: hFile=0x114, lpBuffer=0x12588700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12588700*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.278] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0130.279] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.279] ReadFile (in: hFile=0x160, lpBuffer=0x12588800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12588800*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.280] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0130.281] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0130.281] ReadFile (in: hFile=0x164, lpBuffer=0x12588900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12588900*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0130.282] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.282] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.282] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0130.283] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1 [0130.283] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1 [0130.283] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1 [0130.283] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1 [0130.283] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1 [0130.283] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0130.283] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1 [0130.283] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1 [0130.283] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1 [0130.283] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1 [0130.283] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1 [0130.283] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.283] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.284] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.284] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0130.284] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0130.284] CloseHandle (hObject=0x158) returned 1 [0130.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.284] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.284] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.285] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.285] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0130.285] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0130.285] CloseHandle (hObject=0x158) returned 1 [0130.285] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.285] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.285] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0130.285] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0130.286] WriteFile (in: hFile=0x158, lpBuffer=0x12454000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12454000*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0130.287] CloseHandle (hObject=0x158) returned 1 [0130.287] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.287] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.287] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.287] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xff37b5c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff37b5c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.287] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xff37b5c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff37b5c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.287] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff37b5c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff37b5c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff37dcd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.287] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.287] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.288] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.288] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.288] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.288] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Media Player/Transcoded Files Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0130.288] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.288] CloseHandle (hObject=0x158) returned 1 [0130.289] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.289] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.289] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0130.289] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0130.289] WriteFile (in: hFile=0x158, lpBuffer=0x12456600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12456600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0130.290] CloseHandle (hObject=0x158) returned 1 [0130.290] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.290] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.290] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.290] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xff382af0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff382af0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.291] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xff382af0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff382af0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.291] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.0", cAlternateFileName="")) returned 1 [0130.291] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff382af0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff382af0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff387910, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.291] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1 [0130.291] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONetConfig", cAlternateFileName="ONETCO~1")) returned 1 [0130.291] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.291] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.291] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.291] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.292] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.292] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.292] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.292] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.292] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.292] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.292] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.292] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.293] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.293] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.293] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.293] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0130.293] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0130.293] WriteFile (in: hFile=0x158, lpBuffer=0x12457900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12457900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0130.294] CloseHandle (hObject=0x158) returned 1 [0130.294] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.294] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.295] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xff38c730, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff38c730, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.295] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xff38c730, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff38c730, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.295] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff38c730, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff38c730, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff391550, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.295] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeFileCache", cAlternateFileName="OFFICE~1")) returned 1 [0130.295] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.295] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.295] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.295] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.296] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.296] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.296] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.296] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.296] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.296] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.297] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0130.297] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.297] CloseHandle (hObject=0x158) returned 1 [0130.297] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.297] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.297] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0130.299] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0130.299] WriteFile (in: hFile=0x158, lpBuffer=0x127b6000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x127b6000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0130.300] CloseHandle (hObject=0x158) returned 1 [0130.300] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.300] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.301] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.301] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xff39b190, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff39b190, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.301] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xff39b190, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff39b190, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.301] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff398a80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff398a80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff39ffb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.301] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7aab700, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7aab700, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSD-CNRY.FSD", cAlternateFileName="")) returned 1 [0130.301] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", cAlternateFileName="FSD-{4~1.FSD")) returned 1 [0130.301] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSF-CTBL.FSF", cAlternateFileName="")) returned 1 [0130.301] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.301] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.301] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.301] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.301] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache/FSD-CNRY.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0130.302] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0130.302] ReadFile (in: hFile=0x158, lpBuffer=0x12589600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12589600*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0130.305] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache/FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0130.305] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0130.306] ReadFile (in: hFile=0xf8, lpBuffer=0x12589700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12589700*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0130.308] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache/FSF-CTBL.FSF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0130.309] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0130.309] ReadFile (in: hFile=0x130, lpBuffer=0x12589800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12589800*, lpNumberOfBytesRead=0x12429938*=0x72, lpOverlapped=0x0) returned 1 [0130.312] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache/FSD-CNRY.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7aab700, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7aab700, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0130.312] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache/FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0130.312] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache/FSF-CTBL.FSF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x72)) returned 1 [0130.312] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.312] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.312] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.312] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.312] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.312] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/14.0/OfficeFileCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0130.312] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0130.313] CloseHandle (hObject=0x134) returned 1 [0130.313] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.313] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.313] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.313] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.313] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.313] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0130.313] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0130.313] CloseHandle (hObject=0x134) returned 1 [0130.313] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.313] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.313] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0130.314] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0130.314] WriteFile (in: hFile=0x134, lpBuffer=0x127b9900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x127b9900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0130.315] CloseHandle (hObject=0x134) returned 1 [0130.315] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.315] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.315] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.315] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xff3bfb80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff3bfb80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.316] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xff3bfb80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff3bfb80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.316] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff3bfb80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff3bfb80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff3c49a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.316] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0130.316] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1 [0130.316] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.316] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.316] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.316] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.316] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.316] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.316] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.316] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.316] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.317] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.317] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.317] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.317] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.317] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.317] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.317] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0130.317] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.317] CloseHandle (hObject=0x134) returned 1 [0130.317] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.318] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.318] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0130.318] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0130.318] WriteFile (in: hFile=0x134, lpBuffer=0x12656000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12656000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0130.319] CloseHandle (hObject=0x134) returned 1 [0130.319] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.319] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.319] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.320] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xff3c97c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff3c97c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.320] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xff3c97c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff3c97c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.320] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff3c97c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff3c97c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff3ce5e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.320] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.320] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.320] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.320] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.320] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.320] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.320] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.320] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.320] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.321] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/System/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0130.321] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0130.321] CloseHandle (hObject=0x134) returned 1 [0130.321] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.321] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.321] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0130.321] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0130.322] WriteFile (in: hFile=0x134, lpBuffer=0x12658600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12658600*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0130.323] CloseHandle (hObject=0x134) returned 1 [0130.323] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.323] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.323] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.323] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xff3d3400, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff3d3400, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.323] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xff3d3400, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff3d3400, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.323] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff3d3400, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff3d3400, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff3d5b10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.323] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.323] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.323] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.323] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.324] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.324] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.324] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.324] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.324] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.324] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/Groove/User/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0130.324] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0130.324] CloseHandle (hObject=0x134) returned 1 [0130.324] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.324] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.325] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0130.327] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0130.327] WriteFile (in: hFile=0x134, lpBuffer=0x1265ac00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1265ac00*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0130.328] CloseHandle (hObject=0x134) returned 1 [0130.328] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.328] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.328] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.328] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xff3df750, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff3df750, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.328] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xff3df750, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff3df750, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.328] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.sig", cAlternateFileName="350DB9~1.SIG")) returned 1 [0130.328] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.xml", cAlternateFileName="350DB9~1.XML")) returned 1 [0130.329] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff3da930, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff3da930, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff3e1e60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.329] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.329] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.329] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig/350db95df4cbd94b2a1c300510e12e11.sig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0130.330] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.330] ReadFile (in: hFile=0x134, lpBuffer=0x12654100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12654100*, lpNumberOfBytesRead=0x124299e0*=0x80, lpOverlapped=0x0) returned 1 [0130.340] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig/350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0130.340] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.340] ReadFile (in: hFile=0xfc, lpBuffer=0x12654200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12654200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0130.349] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.349] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.349] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig/350db95df4cbd94b2a1c300510e12e11.sig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0130.349] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig/350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x7ef)) returned 1 [0130.350] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.350] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.350] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.350] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.350] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.350] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Office/ONetConfig/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0130.350] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.350] CloseHandle (hObject=0x104) returned 1 [0130.350] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.350] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.351] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0130.353] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0130.353] WriteFile (in: hFile=0x104, lpBuffer=0x127d3300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x127d3300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0130.354] CloseHandle (hObject=0x104) returned 1 [0130.354] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.354] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.354] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.354] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0xff410490, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff410490, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.354] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0xff410490, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff410490, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.354] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff40b670, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff40b670, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff412ba0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.354] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dc8cc40, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3dc8cc40, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3dc8cc40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="mapisvc.inf", cAlternateFileName="")) returned 1 [0130.354] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c4d2d00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4d2d00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4d2d00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.sharing.xml.obi", cAlternateFileName="OUTLOO~1.OBI")) returned 1 [0130.355] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 1 [0130.355] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.355] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.355] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.355] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.355] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/Outlook.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0130.355] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.355] ReadFile (in: hFile=0x104, lpBuffer=0x12654500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12654500*, lpNumberOfBytesRead=0x12429a88*=0xb9, lpOverlapped=0x0) returned 1 [0130.356] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.356] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.357] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.357] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/mapisvc.inf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0130.357] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.357] ReadFile (in: hFile=0xf0, lpBuffer=0x12654600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12654600*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.358] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/Outlook.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c4d2d00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4d2d00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4d2d00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xb9)) returned 1 [0130.359] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/mapisvc.inf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dc8cc40, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3dc8cc40, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3dc8cc40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x462)) returned 1 [0130.359] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.359] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.359] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.359] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.359] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.359] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0130.359] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0130.359] CloseHandle (hObject=0xe4) returned 1 [0130.359] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.359] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.360] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0130.361] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0130.362] WriteFile (in: hFile=0xe4, lpBuffer=0x127d5900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x127d5900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0130.363] CloseHandle (hObject=0xe4) returned 1 [0130.363] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.363] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.363] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.363] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0xff426420, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff426420, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.363] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0xff426420, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff426420, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.363] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff421600, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff421600, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff428b30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.363] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0130.363] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.363] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.363] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.363] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.363] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache/Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0130.364] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.364] ReadFile (in: hFile=0xe4, lpBuffer=0x12654c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12654c00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0130.365] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache/Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0130.365] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache/Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0130.365] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0130.365] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124433a0 | out: pbBuffer=0x124433a0) returned 1 [0130.366] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12654d02 | out: pbBuffer=0x12654d02) returned 1 [0130.366] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12654d5b | out: pbBuffer=0x12654d5b) returned 1 [0130.366] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12654d81 | out: pbBuffer=0x12654d81) returned 1 [0130.367] SetEvent (hEvent=0xb8) returned 1 [0130.368] ReadFile (in: hFile=0x18c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x104, lpOverlapped=0x0) returned 1 [0130.368] GetFileType (hFile=0x18c) returned 0x1 [0130.368] SetFilePointerEx (in: hFile=0x18c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0130.368] WriteFile (in: hFile=0x18c, lpBuffer=0x124a26c0*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124a26c0*, lpNumberOfBytesWritten=0x124298a8*=0x104, lpOverlapped=0x124298b4) returned 1 [0130.368] GetFileType (hFile=0x18c) returned 0x1 [0130.368] SetFilePointerEx (in: hFile=0x18c, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0130.368] ReadFile (in: hFile=0x18c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0130.368] CloseHandle (hObject=0x18c) returned 1 [0130.368] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache/Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0130.368] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0130.369] WriteFile (in: hFile=0x18c, lpBuffer=0x124a1200*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124a1200*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0130.369] CloseHandle (hObject=0x18c) returned 1 [0130.369] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1245f2c0*, nNumberOfCharsToWrite=0xa0, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x1245f2c0*, lpNumberOfCharsWritten=0x1242957c*=0xa0) returned 1 [0130.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.370] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.370] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.371] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.371] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Outlook/RoamCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0130.371] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.371] CloseHandle (hObject=0x18c) returned 1 [0130.371] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.371] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.371] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0130.372] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0130.374] WriteFile (in: hFile=0x18c, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0130.375] CloseHandle (hObject=0x18c) returned 1 [0130.375] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.375] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.375] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.375] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xff43eac0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff43eac0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.375] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xff43eac0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff43eac0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.375] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff43eac0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff43eac0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff445ff0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.375] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.375] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.376] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.376] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.376] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.376] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.376] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.376] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.376] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.376] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0130.376] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0130.376] CloseHandle (hObject=0x18c) returned 1 [0130.376] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.376] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.377] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0130.377] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0130.377] WriteFile (in: hFile=0x18c, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0130.378] CloseHandle (hObject=0x18c) returned 1 [0130.378] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.378] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.378] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.378] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xff445ff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff445ff0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.379] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xff445ff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff445ff0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.379] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff445ff0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff445ff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff44d520, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.379] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.379] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.379] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.379] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.379] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.379] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.379] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.379] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.379] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.379] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/TaskSchedulerConfig/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0130.379] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0130.380] CloseHandle (hObject=0x18c) returned 1 [0130.380] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.380] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.380] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0130.380] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0130.380] WriteFile (in: hFile=0x18c, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0130.382] CloseHandle (hObject=0x18c) returned 1 [0130.382] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.382] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.382] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.382] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0xff44fc30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff44fc30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.382] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0xff44fc30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff44fc30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.382] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff44fc30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff44fc30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff454a50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.382] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef99320, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5efe55e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content14.dat", cAlternateFileName="CONTEN~1.DAT")) returned 1 [0130.382] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbs.dat", cAlternateFileName="")) returned 1 [0130.382] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.382] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.382] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.382] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.383] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0130.383] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.383] ReadFile (in: hFile=0x18c, lpBuffer=0x12466700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466700*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.385] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.385] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.385] ReadFile (in: hFile=0x19c, lpBuffer=0x12466800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466800*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.388] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef99320, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5efe55e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18ce0)) returned 1 [0130.388] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.388] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.389] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e420 | out: pbBuffer=0x1249e420) returned 1 [0130.390] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2220 | out: pbBuffer=0x124e2220) returned 1 [0130.390] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466902 | out: pbBuffer=0x12466902) returned 1 [0130.390] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12466971 | out: pbBuffer=0x12466971) returned 1 [0130.391] SetEvent (hEvent=0xa0) returned 1 [0130.391] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x18ce0, lpOverlapped=0x0) returned 1 [0130.392] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0130.392] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.392] SetEvent (hEvent=0xa0) returned 1 [0130.392] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0130.393] GetFileType (hFile=0x154) returned 0x1 [0130.393] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.394] WriteFile (in: hFile=0x154, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x18ce0, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429950*=0x18ce0, lpOverlapped=0x1242995c) returned 1 [0130.394] GetFileType (hFile=0x154) returned 0x1 [0130.394] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x18ce0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.394] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0130.394] CloseHandle (hObject=0x154) returned 1 [0130.394] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.394] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.395] WriteFile (in: hFile=0x154, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0130.395] CloseHandle (hObject=0x154) returned 1 [0130.395] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x67, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x12429624*=0x67) returned 1 [0130.395] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400)) returned 1 [0130.396] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.396] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.396] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0130.397] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466002 | out: pbBuffer=0x12466002) returned 1 [0130.398] SetEvent (hEvent=0xa0) returned 1 [0130.398] ReadFile (in: hFile=0x154, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242996c*=0x1f400, lpOverlapped=0x0) returned 1 [0130.398] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0130.399] SetEvent (hEvent=0xa0) returned 1 [0130.399] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0130.400] GetFileType (hFile=0x154) returned 0x1 [0130.400] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.400] WriteFile (in: hFile=0x154, lpBuffer=0x12566000*, nNumberOfBytesToWrite=0x1f400, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x12566000*, lpNumberOfBytesWritten=0x12429950*=0x1f400, lpOverlapped=0x1242995c) returned 1 [0130.400] GetFileType (hFile=0x154) returned 0x1 [0130.400] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x1f400, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.400] ReadFile (in: hFile=0x154, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0130.400] CloseHandle (hObject=0x154) returned 1 [0130.400] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.401] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.401] WriteFile (in: hFile=0x154, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0130.401] CloseHandle (hObject=0x154) returned 1 [0130.401] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1276e000*, nNumberOfCharsToWrite=0x64, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x1276e000*, lpNumberOfCharsWritten=0x12429624*=0x64) returned 1 [0130.402] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.402] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.402] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.402] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.402] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.402] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Visio/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.402] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0130.402] CloseHandle (hObject=0x154) returned 1 [0130.402] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.403] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.403] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.404] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0130.404] WriteFile (in: hFile=0x154, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0130.405] CloseHandle (hObject=0x154) returned 1 [0130.405] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.405] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.405] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.405] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff48a5b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff48a5b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.405] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff48a5b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff48a5b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.405] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff48a5b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff48a5b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff48ccc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.405] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1 [0130.405] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1 [0130.405] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1 [0130.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0130.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0130.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0130.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0130.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0130.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0130.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeold.xml", cAlternateFileName="")) returned 1 [0130.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0130.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1 [0130.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9a12c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1 [0130.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.406] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.406] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.406] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.406] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.406] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.406] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.406] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.407] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.408] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.409] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/WindowsMail.MSMessageStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.409] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.410] ReadFile (in: hFile=0x154, lpBuffer=0x12466300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466300*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.412] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0130.413] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.413] ReadFile (in: hFile=0x18c, lpBuffer=0x12466400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466400*, lpNumberOfBytesRead=0x12429a88*=0x0, lpOverlapped=0x0) returned 1 [0130.413] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.414] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.414] ReadFile (in: hFile=0x19c, lpBuffer=0x12466600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466600*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.416] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0130.416] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.416] ReadFile (in: hFile=0x148, lpBuffer=0x12466800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466800*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.417] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0130.418] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.418] ReadFile (in: hFile=0x120, lpBuffer=0x12466a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466a00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.420] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/edb.chk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0130.420] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.420] ReadFile (in: hFile=0x15c, lpBuffer=0x12466b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466b00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.422] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/edb.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0130.422] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.422] ReadFile (in: hFile=0x10c, lpBuffer=0x12466c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466c00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.424] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0130.425] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.425] ReadFile (in: hFile=0x124, lpBuffer=0x12466d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466d00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.428] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/edbres00001.jrs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0130.428] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.429] ReadFile (in: hFile=0xdc, lpBuffer=0x12466e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466e00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.431] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/edbres00002.jrs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0130.432] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.432] ReadFile (in: hFile=0x110, lpBuffer=0x12466f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466f00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.434] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0130.435] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.435] ReadFile (in: hFile=0xc0, lpBuffer=0x12467000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12467000*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.437] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/WindowsMail.MSMessageStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x204000)) returned 1 [0130.437] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4)) returned 1 [0130.437] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0130.437] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1 [0130.437] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/edb.chk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0130.437] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/edb.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0130.437] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/edb.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.437] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.437] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e220 | out: pbBuffer=0x1249e220) returned 1 [0130.438] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2200 | out: pbBuffer=0x124e2200) returned 1 [0130.438] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12467402 | out: pbBuffer=0x12467402) returned 1 [0130.439] SetEvent (hEvent=0x7c) returned 1 [0130.439] ReadFile (in: hFile=0x128, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x200000, lpOverlapped=0x0) returned 1 [0130.476] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.476] SetEvent (hEvent=0x7c) returned 1 [0130.476] SetEvent (hEvent=0xa0) returned 1 [0130.476] CloseHandle (hObject=0xc0) returned 1 [0130.476] CloseHandle (hObject=0x110) returned 1 [0130.476] CloseHandle (hObject=0xdc) returned 1 [0130.476] CloseHandle (hObject=0x124) returned 1 [0130.476] CloseHandle (hObject=0x10c) returned 1 [0130.476] CloseHandle (hObject=0x15c) returned 1 [0130.476] CloseHandle (hObject=0x120) returned 1 [0130.476] CloseHandle (hObject=0x148) returned 1 [0130.476] CloseHandle (hObject=0x19c) returned 1 [0130.476] CloseHandle (hObject=0x18c) returned 1 [0130.476] CloseHandle (hObject=0x154) returned 1 [0130.477] SwitchToThread () returned 1 [0130.477] SetEvent (hEvent=0x7c) returned 1 [0130.477] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.478] SetEvent (hEvent=0x7c) returned 1 [0130.478] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.478] SetEvent (hEvent=0x7c) returned 1 [0130.478] SwitchToThread () returned 1 [0130.498] SetEvent (hEvent=0xa0) returned 1 [0130.498] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.534] SetEvent (hEvent=0xa0) returned 1 [0130.534] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.576] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.629] SetEvent (hEvent=0x7c) returned 1 [0130.629] SetEvent (hEvent=0xa0) returned 1 [0130.629] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.630] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.648] SetEvent (hEvent=0xa0) returned 1 [0130.649] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.669] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.709] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.962] SetEvent (hEvent=0x7c) returned 1 [0130.962] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0130.968] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.969] SetEvent (hEvent=0x7c) returned 1 [0130.969] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0130.993] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0130.993] SwitchToThread () returned 1 [0131.006] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0131.011] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.011] SetEvent (hEvent=0xac) returned 1 [0131.011] SetEvent (hEvent=0x7c) returned 1 [0131.011] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x432, lpOverlapped=0x0) returned 1 [0131.012] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.027] SetEvent (hEvent=0x7c) returned 1 [0131.027] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.035] GetFileType (hFile=0x180) returned 0x1 [0131.035] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.035] WriteFile (in: hFile=0x180, lpBuffer=0x1247c000*, nNumberOfBytesToWrite=0x432, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1247c000*, lpNumberOfBytesWritten=0x124298a8*=0x432, lpOverlapped=0x124298b4) returned 1 [0131.035] GetFileType (hFile=0x180) returned 0x1 [0131.035] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x432, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.035] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.035] CloseHandle (hObject=0x180) returned 1 [0131.035] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.036] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.038] WriteFile (in: hFile=0x180, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.041] CloseHandle (hObject=0x180) returned 1 [0131.041] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x75, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x1242957c*=0x75) returned 1 [0131.050] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1 [0131.050] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7)) returned 1 [0131.050] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.050] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.050] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e040 | out: pbBuffer=0x1249e040) returned 1 [0131.052] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2094 | out: pbBuffer=0x124e2094) returned 1 [0131.052] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466102 | out: pbBuffer=0x12466102) returned 1 [0131.053] SetEvent (hEvent=0xb8) returned 1 [0131.053] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0xe7, lpOverlapped=0x0) returned 1 [0131.053] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0131.066] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.066] SetEvent (hEvent=0xb8) returned 1 [0131.066] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0131.071] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.072] GetFileType (hFile=0x180) returned 0x1 [0131.072] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.072] WriteFile (in: hFile=0x180, lpBuffer=0x1247c000*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1247c000*, lpNumberOfBytesWritten=0x124298a8*=0xe7, lpOverlapped=0x124298b4) returned 1 [0131.072] GetFileType (hFile=0x180) returned 0x1 [0131.072] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0xe7, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.072] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.072] CloseHandle (hObject=0x180) returned 1 [0131.072] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.072] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.080] WriteFile (in: hFile=0x180, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.080] CloseHandle (hObject=0x180) returned 1 [0131.081] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c1e0*, nNumberOfCharsToWrite=0x76, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x1247c1e0*, lpNumberOfCharsWritten=0x1242957c*=0x76) returned 1 [0131.084] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f)) returned 1 [0131.085] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.085] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.085] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.086] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0131.086] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466002 | out: pbBuffer=0x12466002) returned 1 [0131.087] SetEvent (hEvent=0x7c) returned 1 [0131.087] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x5d3f, lpOverlapped=0x0) returned 1 [0131.088] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.088] SetEvent (hEvent=0x7c) returned 1 [0131.088] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.088] GetFileType (hFile=0x180) returned 0x1 [0131.088] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.088] WriteFile (in: hFile=0x180, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x5d3f, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x124298a8*=0x5d3f, lpOverlapped=0x124298b4) returned 1 [0131.088] GetFileType (hFile=0x180) returned 0x1 [0131.088] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x5d3f, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.089] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.089] CloseHandle (hObject=0x180) returned 1 [0131.089] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.089] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.089] WriteFile (in: hFile=0x180, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.089] CloseHandle (hObject=0x180) returned 1 [0131.089] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x76, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x1242957c*=0x76) returned 1 [0131.090] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Green Bubbles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0131.090] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Green Bubbles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.090] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.090] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.091] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466102 | out: pbBuffer=0x12466102) returned 1 [0131.091] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1246612d | out: pbBuffer=0x1246612d) returned 1 [0131.093] SetEvent (hEvent=0xb8) returned 1 [0131.093] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0xed, lpOverlapped=0x0) returned 1 [0131.093] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.093] SetEvent (hEvent=0xb8) returned 1 [0131.093] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0131.093] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.093] GetFileType (hFile=0x180) returned 0x1 [0131.093] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.094] WriteFile (in: hFile=0x180, lpBuffer=0x1247c000*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1247c000*, lpNumberOfBytesWritten=0x124298a8*=0xed, lpOverlapped=0x124298b4) returned 1 [0131.094] GetFileType (hFile=0x180) returned 0x1 [0131.094] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0xed, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.094] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.094] CloseHandle (hObject=0x180) returned 1 [0131.094] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Green Bubbles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.094] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.095] WriteFile (in: hFile=0x180, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.095] CloseHandle (hObject=0x180) returned 1 [0131.095] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12466000*, nNumberOfCharsToWrite=0x7d, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x12466000*, lpNumberOfCharsWritten=0x1242957c*=0x7d) returned 1 [0131.095] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906)) returned 1 [0131.095] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.096] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.096] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.097] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0131.097] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466202 | out: pbBuffer=0x12466202) returned 1 [0131.098] SetEvent (hEvent=0x7c) returned 1 [0131.098] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x1906, lpOverlapped=0x0) returned 1 [0131.098] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.099] SetEvent (hEvent=0x7c) returned 1 [0131.099] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.099] GetFileType (hFile=0x180) returned 0x1 [0131.099] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.099] WriteFile (in: hFile=0x180, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1906, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x124298a8*=0x1906, lpOverlapped=0x124298b4) returned 1 [0131.099] GetFileType (hFile=0x180) returned 0x1 [0131.099] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x1906, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.099] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.099] CloseHandle (hObject=0x180) returned 1 [0131.099] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.100] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.100] WriteFile (in: hFile=0x180, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.100] CloseHandle (hObject=0x180) returned 1 [0131.100] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12466000*, nNumberOfCharsToWrite=0x7c, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x12466000*, lpNumberOfCharsWritten=0x1242957c*=0x7c) returned 1 [0131.101] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Hand Prints.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0131.101] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Hand Prints.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.101] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.101] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.102] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2094 | out: pbBuffer=0x124e2094) returned 1 [0131.102] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466102 | out: pbBuffer=0x12466102) returned 1 [0131.102] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124661d2 | out: pbBuffer=0x124661d2) returned 1 [0131.103] SetEvent (hEvent=0xb8) returned 1 [0131.103] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0xeb, lpOverlapped=0x0) returned 1 [0131.104] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.104] SetEvent (hEvent=0xb8) returned 1 [0131.104] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.104] GetFileType (hFile=0x180) returned 0x1 [0131.104] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.104] WriteFile (in: hFile=0x180, lpBuffer=0x1247c000*, nNumberOfBytesToWrite=0xeb, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1247c000*, lpNumberOfBytesWritten=0x124298a8*=0xeb, lpOverlapped=0x124298b4) returned 1 [0131.104] GetFileType (hFile=0x180) returned 0x1 [0131.104] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0xeb, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.105] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.105] CloseHandle (hObject=0x180) returned 1 [0131.105] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Hand Prints.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.105] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.105] WriteFile (in: hFile=0x180, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.105] CloseHandle (hObject=0x180) returned 1 [0131.105] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12466000*, nNumberOfCharsToWrite=0x7b, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x12466000*, lpNumberOfCharsWritten=0x1242957c*=0x7b) returned 1 [0131.106] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e)) returned 1 [0131.106] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.106] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.106] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.107] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0131.107] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466202 | out: pbBuffer=0x12466202) returned 1 [0131.107] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12466233 | out: pbBuffer=0x12466233) returned 1 [0131.108] SetEvent (hEvent=0x7c) returned 1 [0131.108] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x107e, lpOverlapped=0x0) returned 1 [0131.109] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.109] SetEvent (hEvent=0x7c) returned 1 [0131.109] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.109] GetFileType (hFile=0x180) returned 0x1 [0131.109] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.109] WriteFile (in: hFile=0x180, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x107e, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x124298a8*=0x107e, lpOverlapped=0x124298b4) returned 1 [0131.109] GetFileType (hFile=0x180) returned 0x1 [0131.109] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x107e, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.110] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.110] CloseHandle (hObject=0x180) returned 1 [0131.110] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.110] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.110] WriteFile (in: hFile=0x180, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.110] CloseHandle (hObject=0x180) returned 1 [0131.110] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12466000*, nNumberOfCharsToWrite=0x7a, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x12466000*, lpNumberOfCharsWritten=0x1242957c*=0x7a) returned 1 [0131.111] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Orange Circles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0131.111] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Orange Circles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.111] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.111] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.112] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466102 | out: pbBuffer=0x12466102) returned 1 [0131.112] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1246617a | out: pbBuffer=0x1246617a) returned 1 [0131.113] SetEvent (hEvent=0xb8) returned 1 [0131.113] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0xed, lpOverlapped=0x0) returned 1 [0131.114] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.114] SetEvent (hEvent=0xb8) returned 1 [0131.114] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.114] GetFileType (hFile=0x180) returned 0x1 [0131.114] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.114] WriteFile (in: hFile=0x180, lpBuffer=0x1247c000*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1247c000*, lpNumberOfBytesWritten=0x124298a8*=0xed, lpOverlapped=0x124298b4) returned 1 [0131.115] GetFileType (hFile=0x180) returned 0x1 [0131.115] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0xed, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.115] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.115] CloseHandle (hObject=0x180) returned 1 [0131.115] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Orange Circles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.115] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.115] WriteFile (in: hFile=0x180, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.115] CloseHandle (hObject=0x180) returned 1 [0131.115] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12466000*, nNumberOfCharsToWrite=0x7e, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x12466000*, lpNumberOfCharsWritten=0x1242957c*=0x7e) returned 1 [0131.116] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed)) returned 1 [0131.116] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.116] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.117] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.117] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466202 | out: pbBuffer=0x12466202) returned 1 [0131.119] SetEvent (hEvent=0x7c) returned 1 [0131.119] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x18ed, lpOverlapped=0x0) returned 1 [0131.119] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.119] SetEvent (hEvent=0x7c) returned 1 [0131.119] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0131.119] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.119] GetFileType (hFile=0x180) returned 0x1 [0131.120] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.120] WriteFile (in: hFile=0x180, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x18ed, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x124298a8*=0x18ed, lpOverlapped=0x124298b4) returned 1 [0131.120] GetFileType (hFile=0x180) returned 0x1 [0131.120] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x18ed, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.120] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.120] CloseHandle (hObject=0x180) returned 1 [0131.120] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.120] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.120] WriteFile (in: hFile=0x180, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.121] CloseHandle (hObject=0x180) returned 1 [0131.121] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12466000*, nNumberOfCharsToWrite=0x7d, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x12466000*, lpNumberOfCharsWritten=0x1242957c*=0x7d) returned 1 [0131.121] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0131.121] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.122] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.122] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.123] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2094 | out: pbBuffer=0x124e2094) returned 1 [0131.123] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466102 | out: pbBuffer=0x12466102) returned 1 [0131.123] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1246617a | out: pbBuffer=0x1246617a) returned 1 [0131.124] SetEvent (hEvent=0xb8) returned 1 [0131.124] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0xe8, lpOverlapped=0x0) returned 1 [0131.124] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.124] SetEvent (hEvent=0xb8) returned 1 [0131.124] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.125] GetFileType (hFile=0x180) returned 0x1 [0131.125] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.125] WriteFile (in: hFile=0x180, lpBuffer=0x1247c000*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1247c000*, lpNumberOfBytesWritten=0x124298a8*=0xe8, lpOverlapped=0x124298b4) returned 1 [0131.125] GetFileType (hFile=0x180) returned 0x1 [0131.125] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.125] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.125] CloseHandle (hObject=0x180) returned 1 [0131.125] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.125] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.125] WriteFile (in: hFile=0x180, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.126] CloseHandle (hObject=0x180) returned 1 [0131.126] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c1e0*, nNumberOfCharsToWrite=0x77, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x1247c1e0*, lpNumberOfCharsWritten=0x1242957c*=0x77) returned 1 [0131.126] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb)) returned 1 [0131.127] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.127] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.127] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.128] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0131.128] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466002 | out: pbBuffer=0x12466002) returned 1 [0131.128] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1246609d | out: pbBuffer=0x1246609d) returned 1 [0131.129] SetEvent (hEvent=0x7c) returned 1 [0131.129] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x13fb, lpOverlapped=0x0) returned 1 [0131.129] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.129] SetEvent (hEvent=0x7c) returned 1 [0131.130] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.130] GetFileType (hFile=0x180) returned 0x1 [0131.130] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.130] WriteFile (in: hFile=0x180, lpBuffer=0x1244a000*, nNumberOfBytesToWrite=0x13fb, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1244a000*, lpNumberOfBytesWritten=0x124298a8*=0x13fb, lpOverlapped=0x124298b4) returned 1 [0131.130] GetFileType (hFile=0x180) returned 0x1 [0131.130] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x13fb, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.130] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.130] CloseHandle (hObject=0x180) returned 1 [0131.130] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.131] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.131] WriteFile (in: hFile=0x180, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.131] CloseHandle (hObject=0x180) returned 1 [0131.131] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12800000*, nNumberOfCharsToWrite=0x77, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x12800000*, lpNumberOfCharsWritten=0x1242957c*=0x77) returned 1 [0131.132] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1 [0131.132] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.132] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.132] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.133] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2094 | out: pbBuffer=0x124e2094) returned 1 [0131.133] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466102 | out: pbBuffer=0x12466102) returned 1 [0131.133] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124661b0 | out: pbBuffer=0x124661b0) returned 1 [0131.134] SetEvent (hEvent=0xb8) returned 1 [0131.134] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0xe9, lpOverlapped=0x0) returned 1 [0131.134] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.135] SetEvent (hEvent=0xb8) returned 1 [0131.135] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.135] GetFileType (hFile=0x180) returned 0x1 [0131.135] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.135] WriteFile (in: hFile=0x180, lpBuffer=0x1247c000*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1247c000*, lpNumberOfBytesWritten=0x124298a8*=0xe9, lpOverlapped=0x124298b4) returned 1 [0131.135] GetFileType (hFile=0x180) returned 0x1 [0131.135] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0xe9, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.135] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.135] CloseHandle (hObject=0x180) returned 1 [0131.135] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.136] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.136] WriteFile (in: hFile=0x180, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.136] CloseHandle (hObject=0x180) returned 1 [0131.136] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c1e0*, nNumberOfCharsToWrite=0x75, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x1247c1e0*, lpNumberOfCharsWritten=0x1242957c*=0x75) returned 1 [0131.137] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1 [0131.137] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.137] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.137] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.138] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466002 | out: pbBuffer=0x12466002) returned 1 [0131.138] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12466058 | out: pbBuffer=0x12466058) returned 1 [0131.138] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12466073 | out: pbBuffer=0x12466073) returned 1 [0131.139] SetEvent (hEvent=0x7c) returned 1 [0131.139] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x780, lpOverlapped=0x0) returned 1 [0131.139] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.140] SetEvent (hEvent=0x7c) returned 1 [0131.140] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.140] GetFileType (hFile=0x180) returned 0x1 [0131.140] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.140] WriteFile (in: hFile=0x180, lpBuffer=0x1247c000*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1247c000*, lpNumberOfBytesWritten=0x124298a8*=0x780, lpOverlapped=0x124298b4) returned 1 [0131.140] GetFileType (hFile=0x180) returned 0x1 [0131.140] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x780, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.140] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.140] CloseHandle (hObject=0x180) returned 1 [0131.140] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.140] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.141] WriteFile (in: hFile=0x180, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.141] CloseHandle (hObject=0x180) returned 1 [0131.141] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x75, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x1242957c*=0x75) returned 1 [0131.142] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Shades of Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0131.142] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Shades of Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.142] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.142] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.143] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2094 | out: pbBuffer=0x124e2094) returned 1 [0131.143] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466102 | out: pbBuffer=0x12466102) returned 1 [0131.143] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1246616b | out: pbBuffer=0x1246616b) returned 1 [0131.144] SetEvent (hEvent=0xb8) returned 1 [0131.144] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0xed, lpOverlapped=0x0) returned 1 [0131.144] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0131.144] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.144] SetEvent (hEvent=0xb8) returned 1 [0131.145] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.145] GetFileType (hFile=0x180) returned 0x1 [0131.145] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.145] WriteFile (in: hFile=0x180, lpBuffer=0x1247c000*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1247c000*, lpNumberOfBytesWritten=0x124298a8*=0xed, lpOverlapped=0x124298b4) returned 1 [0131.145] GetFileType (hFile=0x180) returned 0x1 [0131.145] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0xed, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.145] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.145] CloseHandle (hObject=0x180) returned 1 [0131.145] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Shades of Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.145] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.146] WriteFile (in: hFile=0x180, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.146] CloseHandle (hObject=0x180) returned 1 [0131.146] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12466000*, nNumberOfCharsToWrite=0x7e, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x12466000*, lpNumberOfCharsWritten=0x1242957c*=0x7e) returned 1 [0131.146] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0131.147] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.147] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.147] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.148] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466202 | out: pbBuffer=0x12466202) returned 1 [0131.149] SetEvent (hEvent=0x7c) returned 1 [0131.149] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x127e, lpOverlapped=0x0) returned 1 [0131.149] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0131.149] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.150] SetEvent (hEvent=0x7c) returned 1 [0131.150] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.150] GetFileType (hFile=0x180) returned 0x1 [0131.150] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.150] WriteFile (in: hFile=0x180, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x127e, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x124298a8*=0x127e, lpOverlapped=0x124298b4) returned 1 [0131.150] GetFileType (hFile=0x180) returned 0x1 [0131.150] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x127e, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.150] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.150] CloseHandle (hObject=0x180) returned 1 [0131.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.150] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.151] WriteFile (in: hFile=0x180, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.151] CloseHandle (hObject=0x180) returned 1 [0131.151] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12466000*, nNumberOfCharsToWrite=0x7c, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x12466000*, lpNumberOfCharsWritten=0x1242957c*=0x7c) returned 1 [0131.152] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Soft Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0131.152] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Soft Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.152] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.152] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.153] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2094 | out: pbBuffer=0x124e2094) returned 1 [0131.153] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466102 | out: pbBuffer=0x12466102) returned 1 [0131.154] SetEvent (hEvent=0xb8) returned 1 [0131.154] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0xe8, lpOverlapped=0x0) returned 1 [0131.154] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.154] SetEvent (hEvent=0xb8) returned 1 [0131.155] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.155] GetFileType (hFile=0x180) returned 0x1 [0131.155] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.155] WriteFile (in: hFile=0x180, lpBuffer=0x1247c000*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1247c000*, lpNumberOfBytesWritten=0x124298a8*=0xe8, lpOverlapped=0x124298b4) returned 1 [0131.155] GetFileType (hFile=0x180) returned 0x1 [0131.155] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.155] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.155] CloseHandle (hObject=0x180) returned 1 [0131.155] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Soft Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.155] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.156] WriteFile (in: hFile=0x180, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.156] CloseHandle (hObject=0x180) returned 1 [0131.156] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12466000*, nNumberOfCharsToWrite=0x79, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x12466000*, lpNumberOfCharsWritten=0x1242957c*=0x79) returned 1 [0131.156] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949)) returned 1 [0131.156] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.157] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.157] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.158] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0131.158] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466202 | out: pbBuffer=0x12466202) returned 1 [0131.159] SetEvent (hEvent=0x7c) returned 1 [0131.159] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x2949, lpOverlapped=0x0) returned 1 [0131.159] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0131.159] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.159] SetEvent (hEvent=0x7c) returned 1 [0131.159] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.160] GetFileType (hFile=0x180) returned 0x1 [0131.160] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.160] WriteFile (in: hFile=0x180, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x2949, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x124298a8*=0x2949, lpOverlapped=0x124298b4) returned 1 [0131.160] GetFileType (hFile=0x180) returned 0x1 [0131.160] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x2949, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.160] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.160] CloseHandle (hObject=0x180) returned 1 [0131.160] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.161] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.161] WriteFile (in: hFile=0x180, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.161] CloseHandle (hObject=0x180) returned 1 [0131.161] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12800000*, nNumberOfCharsToWrite=0x78, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x12800000*, lpNumberOfCharsWritten=0x1242957c*=0x78) returned 1 [0131.162] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0131.162] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.162] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.162] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.163] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2094 | out: pbBuffer=0x124e2094) returned 1 [0131.163] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466002 | out: pbBuffer=0x12466002) returned 1 [0131.164] SetEvent (hEvent=0xb8) returned 1 [0131.164] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0xe6, lpOverlapped=0x0) returned 1 [0131.164] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.165] SetEvent (hEvent=0xb8) returned 1 [0131.165] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.165] GetFileType (hFile=0x180) returned 0x1 [0131.165] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.165] WriteFile (in: hFile=0x180, lpBuffer=0x1247c000*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1247c000*, lpNumberOfBytesWritten=0x124298a8*=0xe6, lpOverlapped=0x124298b4) returned 1 [0131.165] GetFileType (hFile=0x180) returned 0x1 [0131.165] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0xe6, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.165] ReadFile (in: hFile=0x180, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.165] CloseHandle (hObject=0x180) returned 1 [0131.165] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.166] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.166] WriteFile (in: hFile=0x180, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.166] CloseHandle (hObject=0x180) returned 1 [0131.166] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c1e0*, nNumberOfCharsToWrite=0x75, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x1247c1e0*, lpNumberOfCharsWritten=0x1242957c*=0x75) returned 1 [0131.166] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51)) returned 1 [0131.166] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.167] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.167] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.168] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466102 | out: pbBuffer=0x12466102) returned 1 [0131.168] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1246613c | out: pbBuffer=0x1246613c) returned 1 [0131.169] SetEvent (hEvent=0x7c) returned 1 [0131.169] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x1d51, lpOverlapped=0x0) returned 1 [0131.169] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.169] SetEvent (hEvent=0x7c) returned 1 [0131.169] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0131.169] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.169] GetFileType (hFile=0x180) returned 0x1 [0131.170] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.170] WriteFile (in: hFile=0x180, lpBuffer=0x1247c000*, nNumberOfBytesToWrite=0x1d51, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1247c000*, lpNumberOfBytesWritten=0x124298a8*=0x1d51, lpOverlapped=0x124298b4) returned 1 [0131.170] GetFileType (hFile=0x180) returned 0x1 [0131.170] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x1d51, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.170] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.170] CloseHandle (hObject=0x180) returned 1 [0131.170] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.170] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.170] WriteFile (in: hFile=0x180, lpBuffer=0x124d8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124d8240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.170] CloseHandle (hObject=0x180) returned 1 [0131.171] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12800000*, nNumberOfCharsToWrite=0x75, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x12800000*, lpNumberOfCharsWritten=0x1242957c*=0x75) returned 1 [0131.171] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.171] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.171] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.171] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.171] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.171] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.172] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0131.172] CloseHandle (hObject=0x180) returned 1 [0131.172] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/WindowsMail.pat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.172] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/WindowsMail.pat\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.172] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/WindowsMail.pat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.172] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/WindowsMail.pat\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.172] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/WindowsMail.pat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.172] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.172] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0131.172] CloseHandle (hObject=0x180) returned 1 [0131.172] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.172] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.173] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.173] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0131.173] WriteFile (in: hFile=0x180, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0131.174] CloseHandle (hObject=0x180) returned 1 [0131.174] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.174] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.175] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.175] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xffbc56e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffbc56e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.175] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xffbc56e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffbc56e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.175] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1 [0131.175] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffbc56e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffbc56e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffbca500, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.175] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.175] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.175] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.175] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.175] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.175] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.175] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.176] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.176] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.176] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.176] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0131.176] WriteFile (in: hFile=0x180, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0131.177] CloseHandle (hObject=0x180) returned 1 [0131.177] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.178] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.178] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.178] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xffbccc10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffbccc10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.178] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xffbccc10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffbccc10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.178] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffbccc10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffbccc10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffbd1a30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.178] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.DTD", cAlternateFileName="")) returned 1 [0131.178] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 1 [0131.178] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.178] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.178] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.178] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.179] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0/WMSDKNS.DTD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.179] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0131.179] ReadFile (in: hFile=0x180, lpBuffer=0x12466200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0131.180] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0/WMSDKNS.XML" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0131.181] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0131.181] ReadFile (in: hFile=0x19c, lpBuffer=0x12466300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466300*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0131.183] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0/WMSDKNS.DTD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2)) returned 1 [0131.184] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0/WMSDKNS.DTD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0131.184] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.184] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e160 | out: pbBuffer=0x1249e160) returned 1 [0131.185] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2260 | out: pbBuffer=0x124e2260) returned 1 [0131.185] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466402 | out: pbBuffer=0x12466402) returned 1 [0131.185] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12466492 | out: pbBuffer=0x12466492) returned 1 [0131.185] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124664cf | out: pbBuffer=0x124664cf) returned 1 [0131.186] SetEvent (hEvent=0xb8) returned 1 [0131.186] ReadFile (in: hFile=0x128, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x1f2, lpOverlapped=0x0) returned 1 [0131.186] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.187] SetEvent (hEvent=0xb8) returned 1 [0131.187] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x0 [0131.187] GetFileType (hFile=0x128) returned 0x1 [0131.187] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.187] WriteFile (in: hFile=0x128, lpBuffer=0x1247c000*, nNumberOfBytesToWrite=0x1f2, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1247c000*, lpNumberOfBytesWritten=0x124298a8*=0x1f2, lpOverlapped=0x124298b4) returned 1 [0131.187] GetFileType (hFile=0x128) returned 0x1 [0131.187] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x1f2, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0131.187] ReadFile (in: hFile=0x128, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0131.188] CloseHandle (hObject=0x128) returned 1 [0131.188] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0/WMSDKNS.DTD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0131.188] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0131.188] WriteFile (in: hFile=0x128, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0131.188] CloseHandle (hObject=0x128) returned 1 [0131.188] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x72, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x1242957c*=0x72) returned 1 [0131.189] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0/WMSDKNS.XML" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf)) returned 1 [0131.189] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.189] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.189] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.189] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.189] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.189] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0131.189] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0131.189] CloseHandle (hObject=0x128) returned 1 [0131.189] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.189] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.190] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.190] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0131.190] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0131.190] CloseHandle (hObject=0x128) returned 1 [0131.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.190] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0131.191] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0131.191] WriteFile (in: hFile=0x128, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0131.192] CloseHandle (hObject=0x128) returned 1 [0131.192] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.192] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.192] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.192] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xffbeeef0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffbeeef0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xffbeeef0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffbeeef0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffbeeef0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffbeeef0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffbf3d10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0131.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1 [0131.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.192] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.193] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.193] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.193] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\gadgets"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.193] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.193] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.193] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Settings.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0131.194] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0131.194] ReadFile (in: hFile=0x128, lpBuffer=0x12466300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466300*, lpNumberOfBytesRead=0x12429a88*=0x54, lpOverlapped=0x0) returned 1 [0131.195] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Settings.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54)) returned 1 [0131.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.195] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.195] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.195] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.196] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0131.196] CloseHandle (hObject=0x180) returned 1 [0131.196] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.196] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.196] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.196] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0131.196] WriteFile (in: hFile=0x180, lpBuffer=0x124d1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d1300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0131.197] CloseHandle (hObject=0x180) returned 1 [0131.197] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.198] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.198] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.198] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xffbfd950, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffbfd950, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xffbfd950, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffbfd950, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffbfd950, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffbfd950, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc02770, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.198] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.198] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.198] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.198] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.198] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.199] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.199] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.199] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0131.199] CloseHandle (hObject=0x180) returned 1 [0131.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.199] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.200] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0131.200] WriteFile (in: hFile=0x180, lpBuffer=0x124d3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d3900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0131.201] CloseHandle (hObject=0x180) returned 1 [0131.201] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.201] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.201] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.201] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xffc07590, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc07590, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.202] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xffc07590, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc07590, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.202] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffc07590, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffc07590, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc09ca0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.202] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.202] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.202] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.202] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.202] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.202] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.203] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.203] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.203] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.204] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.204] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0131.204] CloseHandle (hObject=0x180) returned 1 [0131.204] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.204] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.204] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.205] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0131.205] WriteFile (in: hFile=0x180, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0131.206] CloseHandle (hObject=0x180) returned 1 [0131.206] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.206] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.206] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.206] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffc138e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc138e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.207] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffc138e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc138e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.207] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffc138e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffc138e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc15ff0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.207] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0131.207] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0131.207] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.207] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.207] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.207] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.207] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.207] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.208] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.208] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.208] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.209] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.209] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.209] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.209] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.209] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.209] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0131.209] CloseHandle (hObject=0x180) returned 1 [0131.209] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.209] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.209] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.210] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0131.210] WriteFile (in: hFile=0x180, lpBuffer=0x12774600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12774600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0131.211] CloseHandle (hObject=0x180) returned 1 [0131.211] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.211] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffc1fc30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc1fc30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.211] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffc1fc30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc1fc30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.211] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffc1fc30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffc1fc30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc22340, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.211] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0131.211] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.211] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.212] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.212] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.212] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.212] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.212] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.212] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.212] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.212] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.212] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.212] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.212] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.213] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0131.213] CloseHandle (hObject=0x180) returned 1 [0131.213] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.213] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.213] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.213] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0131.213] WriteFile (in: hFile=0x180, lpBuffer=0x12776c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12776c00*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0131.215] CloseHandle (hObject=0x180) returned 1 [0131.215] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.215] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.215] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.215] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffc27160, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc27160, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffc27160, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc27160, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffc27160, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffc27160, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc2bf80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1 [0131.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.215] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.215] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.215] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.215] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.216] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.218] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.218] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.218] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.218] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.218] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.219] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.219] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.219] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0131.219] CloseHandle (hObject=0x180) returned 1 [0131.219] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.220] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.220] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.222] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0131.223] WriteFile (in: hFile=0x180, lpBuffer=0x12589300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12589300*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0131.224] CloseHandle (hObject=0x180) returned 1 [0131.224] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.224] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.224] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.224] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffc382d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc382d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.224] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffc382d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc382d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.224] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffc382d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffc382d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc3f800, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.224] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0131.224] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1 [0131.224] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~2")) returned 1 [0131.224] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1 [0131.224] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0131.224] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1 [0131.224] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.225] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.225] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.225] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.225] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.225] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.227] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.228] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/OfflineCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.228] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/OfflineCache\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.229] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.229] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/_CACHE_CLEAN_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.230] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0131.230] ReadFile (in: hFile=0x180, lpBuffer=0x12466d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12466d00*, lpNumberOfBytesRead=0x12429938*=0x1, lpOverlapped=0x0) returned 1 [0131.231] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.231] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.233] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.233] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.233] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.236] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.236] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.236] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.239] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.239] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/_CACHE_CLEAN_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0131.240] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.240] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.240] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.240] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.240] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.240] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0131.240] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0131.241] CloseHandle (hObject=0x19c) returned 1 [0131.241] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.242] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.242] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0131.242] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0131.242] WriteFile (in: hFile=0x19c, lpBuffer=0x1258b900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x1258b900*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0131.243] CloseHandle (hObject=0x19c) returned 1 [0131.243] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.243] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.243] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.244] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffc6b720, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc6b720, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffc6b720, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc6b720, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffc6b720, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffc6b720, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffc6de30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F", cAlternateFileName="")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_001_", cAlternateFileName="_CACHE~2")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_002_", cAlternateFileName="_CACHE~3")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8529f470, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_003_", cAlternateFileName="_CACHE~4")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 1 [0131.244] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.244] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.244] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.245] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.245] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.245] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.245] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.246] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.246] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.246] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.247] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.247] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.247] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.248] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.248] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.248] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.248] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.248] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.248] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.250] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.250] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.250] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.250] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.250] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.250] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.251] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.251] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.252] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.252] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.252] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.252] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.253] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.253] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.253] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.253] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/A" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.253] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/A\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.253] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.253] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.253] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/B\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.254] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.254] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.254] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/C\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.254] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.254] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.255] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/D\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.255] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.255] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.256] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/E\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.256] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.256] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.256] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/F\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.257] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.257] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/_CACHE_001_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_001_"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0131.257] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.257] ReadFile (in: hFile=0x19c, lpBuffer=0x12467400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12467400*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0131.259] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/_CACHE_002_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_002_"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0131.262] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.262] ReadFile (in: hFile=0x154, lpBuffer=0x12467500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12467500*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0131.265] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/_CACHE_003_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_003_"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0131.266] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.266] ReadFile (in: hFile=0x18c, lpBuffer=0x12467600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12467600*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0131.268] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/_CACHE_MAP_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0131.268] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.269] ReadFile (in: hFile=0x148, lpBuffer=0x12467700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12467700*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0131.271] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/_CACHE_001_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_001_"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000)) returned 1 [0131.271] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/_CACHE_002_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_002_"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000)) returned 1 [0131.271] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/_CACHE_003_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_003_"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8529f470, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000)) returned 1 [0131.271] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/_CACHE_MAP_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114)) returned 1 [0131.271] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.271] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.272] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0131.272] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0131.272] WriteFile (in: hFile=0x120, lpBuffer=0x1258cc00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x1258cc00*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0131.273] CloseHandle (hObject=0x120) returned 1 [0131.273] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.273] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.273] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffcb4b00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffcb4b00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.274] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffcb4b00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffcb4b00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.274] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="98", cAlternateFileName="")) returned 1 [0131.274] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffcb4b00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffcb4b00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffcb7210, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.274] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 1 [0131.274] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.274] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.274] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.274] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.275] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.275] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.275] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.275] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.275] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.276] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.276] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.276] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.276] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0131.276] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297d0 | out: lpMode=0x124297d0) returned 0 [0131.277] WriteFile (in: hFile=0x120, lpBuffer=0x12652000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124297d4, lpOverlapped=0x0 | out: lpBuffer=0x12652000*, lpNumberOfBytesWritten=0x124297d4*=0x1033, lpOverlapped=0x0) returned 1 [0131.278] CloseHandle (hObject=0x120) returned 1 [0131.278] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.278] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.278] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.278] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98\\*", lpFindFileData=0x12429444 | out: lpFindFileData=0x12429444*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffcbe740, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffcbe740, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffcbe740, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffcbe740, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffcbe740, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffcbe740, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffcc3560, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 1 [0131.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.278] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.278] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.278] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.278] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98/B60F3d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0131.279] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0131.279] ReadFile (in: hFile=0x120, lpBuffer=0x12658200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x12658200*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0131.281] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98/B60F3d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e)) returned 1 [0131.282] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.282] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.282] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.282] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.283] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.283] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/98/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0131.283] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0131.283] CloseHandle (hObject=0x15c) returned 1 [0131.283] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.283] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.283] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.283] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.283] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.283] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0131.283] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0131.284] CloseHandle (hObject=0x15c) returned 1 [0131.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.284] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0131.284] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124297d0 | out: lpMode=0x124297d0) returned 0 [0131.284] WriteFile (in: hFile=0x15c, lpBuffer=0x12655900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124297d4, lpOverlapped=0x0 | out: lpBuffer=0x12655900*, lpNumberOfBytesWritten=0x124297d4*=0x1033, lpOverlapped=0x0) returned 1 [0131.285] CloseHandle (hObject=0x15c) returned 1 [0131.285] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.285] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.286] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.286] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8\\*", lpFindFileData=0x12429444 | out: lpFindFileData=0x12429444*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xffcd1fc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffcd1fc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.286] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xffcd1fc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffcd1fc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.286] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffcd1fc0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffcd1fc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffcd46d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.286] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 1 [0131.286] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.286] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.286] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.286] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.286] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8/C3B7Bd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0131.287] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0131.287] ReadFile (in: hFile=0x15c, lpBuffer=0x12658900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x12658900*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0131.289] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8/C3B7Bd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898)) returned 1 [0131.289] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.290] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.290] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.290] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.290] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.290] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/0/A8/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0131.290] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0131.290] CloseHandle (hObject=0x10c) returned 1 [0131.290] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.290] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.290] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0131.291] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0131.291] WriteFile (in: hFile=0x10c, lpBuffer=0x127b6000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x127b6000*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0131.292] CloseHandle (hObject=0x10c) returned 1 [0131.292] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.292] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.292] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.292] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffce0a20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffce0a20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffce0a20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffce0a20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B", cAlternateFileName="")) returned 1 [0131.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffce0a20, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffce0a20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffce3130, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.293] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2", cAlternateFileName="")) returned 1 [0131.293] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 1 [0131.293] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.293] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.293] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.293] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.293] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.293] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.293] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.293] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.293] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.294] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.294] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.294] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.295] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.295] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0131.295] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124297d0 | out: lpMode=0x124297d0) returned 0 [0131.295] WriteFile (in: hFile=0x10c, lpBuffer=0x127b7300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124297d4, lpOverlapped=0x0 | out: lpBuffer=0x127b7300*, lpNumberOfBytesWritten=0x124297d4*=0x1033, lpOverlapped=0x0) returned 1 [0131.296] CloseHandle (hObject=0x10c) returned 1 [0131.297] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.297] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.297] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.297] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B\\*", lpFindFileData=0x12429444 | out: lpFindFileData=0x12429444*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffcea660, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffcea660, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.297] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffcea660, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffcea660, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.297] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffcea660, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffcea660, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffcef480, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.297] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 1 [0131.297] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.297] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.297] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.297] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.298] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B/FCBF5d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0131.298] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0131.299] ReadFile (in: hFile=0x10c, lpBuffer=0x12659500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x12659500*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0131.301] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B/FCBF5d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd)) returned 1 [0131.302] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.302] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.302] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.303] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.303] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.303] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/0B/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0131.303] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0131.303] CloseHandle (hObject=0x124) returned 1 [0131.303] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.303] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.303] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.303] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.303] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.303] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0131.304] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0131.304] CloseHandle (hObject=0x124) returned 1 [0131.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.304] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0131.304] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124297d0 | out: lpMode=0x124297d0) returned 0 [0131.304] WriteFile (in: hFile=0x124, lpBuffer=0x127bac00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124297d4, lpOverlapped=0x0 | out: lpBuffer=0x127bac00*, lpNumberOfBytesWritten=0x124297d4*=0x1033, lpOverlapped=0x0) returned 1 [0131.305] CloseHandle (hObject=0x124) returned 1 [0131.305] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.306] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.306] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2\\*", lpFindFileData=0x12429444 | out: lpFindFileData=0x12429444*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xffd005f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd005f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.306] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xffd005f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd005f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.306] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 1 [0131.306] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffd005f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffd005f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd05410, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.306] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.306] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2/0B619d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0131.306] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0131.307] ReadFile (in: hFile=0x124, lpBuffer=0x12659b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x12659b00*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0131.308] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.308] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.309] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2/0B619d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05)) returned 1 [0131.309] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.309] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.309] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.309] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.309] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.309] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/C2/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.310] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0131.310] CloseHandle (hObject=0xdc) returned 1 [0131.310] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.310] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.310] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.310] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124297d0 | out: lpMode=0x124297d0) returned 0 [0131.310] WriteFile (in: hFile=0xdc, lpBuffer=0x127d3300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124297d4, lpOverlapped=0x0 | out: lpBuffer=0x127d3300*, lpNumberOfBytesWritten=0x124297d4*=0x1033, lpOverlapped=0x0) returned 1 [0131.311] CloseHandle (hObject=0xdc) returned 1 [0131.312] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.312] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.312] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.312] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6\\*", lpFindFileData=0x12429444 | out: lpFindFileData=0x12429444*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffd0f050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd0f050, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.312] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffd0f050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd0f050, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.312] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffd0f050, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffd0f050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd13e70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.312] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 1 [0131.312] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.312] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.312] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.312] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.312] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6/CBD4Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.313] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0131.313] ReadFile (in: hFile=0xdc, lpBuffer=0x127d8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x127d8200*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0131.315] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6/CBD4Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b)) returned 1 [0131.315] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.315] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.315] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.315] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.316] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.316] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/1/F6/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0131.316] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0131.316] CloseHandle (hObject=0x110) returned 1 [0131.316] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.316] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.316] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0131.316] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0131.317] WriteFile (in: hFile=0x110, lpBuffer=0x127d5900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x127d5900*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0131.318] CloseHandle (hObject=0x110) returned 1 [0131.318] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.318] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.318] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.318] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffd1dab0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd1dab0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.318] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffd1dab0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd1dab0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.318] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffd1dab0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffd1dab0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd228d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.318] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.318] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.318] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.318] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.318] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.318] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.319] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.319] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.319] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.319] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/2/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0131.319] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0131.319] CloseHandle (hObject=0x110) returned 1 [0131.319] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.319] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.319] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0131.320] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0131.322] WriteFile (in: hFile=0x110, lpBuffer=0x124a4000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x124a4000*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0131.323] CloseHandle (hObject=0x110) returned 1 [0131.323] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.323] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.323] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.323] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffd276f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd276f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.323] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffd276f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd276f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.323] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 1 [0131.323] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffd276f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffd276f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd2ec20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.323] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.323] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.323] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.323] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.325] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.325] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.325] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.325] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.325] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.325] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0131.325] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x124297d0 | out: lpMode=0x124297d0) returned 0 [0131.326] WriteFile (in: hFile=0x110, lpBuffer=0x124a5300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124297d4, lpOverlapped=0x0 | out: lpBuffer=0x124a5300*, lpNumberOfBytesWritten=0x124297d4*=0x1033, lpOverlapped=0x0) returned 1 [0131.327] CloseHandle (hObject=0x110) returned 1 [0131.327] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.327] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.327] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.327] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B\\*", lpFindFileData=0x12429444 | out: lpFindFileData=0x12429444*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffd33a40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd33a40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.327] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffd33a40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd33a40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.327] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 1 [0131.327] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffd33a40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffd33a40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd38860, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.327] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.327] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.327] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B/1D8FDd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0131.328] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0131.329] ReadFile (in: hFile=0x110, lpBuffer=0x127d9400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x127d9400*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0131.331] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.331] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.331] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B/1D8FDd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543)) returned 1 [0131.332] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.332] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.332] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.332] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.333] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.333] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/4B/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.333] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0131.333] CloseHandle (hObject=0xc0) returned 1 [0131.333] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.333] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.333] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.333] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.333] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.333] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/3/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.333] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0131.333] CloseHandle (hObject=0xc0) returned 1 [0131.334] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.334] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.334] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.334] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0131.334] WriteFile (in: hFile=0xc0, lpBuffer=0x124a8c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x124a8c00*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0131.335] CloseHandle (hObject=0xc0) returned 1 [0131.335] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.335] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.336] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.336] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffd499d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd499d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.336] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffd499d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd499d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.336] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffd499d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffd499d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd4e7f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.336] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.336] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.336] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.336] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.336] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.336] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.336] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.336] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.336] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.337] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/4/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.337] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0131.337] CloseHandle (hObject=0xc0) returned 1 [0131.337] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.337] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.337] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.343] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0131.344] WriteFile (in: hFile=0xc0, lpBuffer=0x127e9300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x127e9300*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0131.345] CloseHandle (hObject=0xc0) returned 1 [0131.345] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.345] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.355] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.355] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffd5f960, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd5f960, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.355] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffd5f960, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd5f960, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.355] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffd50f00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffd50f00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd64780, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.355] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.355] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.355] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.355] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.355] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.355] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.356] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.356] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.356] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.356] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/5/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.356] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0131.356] CloseHandle (hObject=0xc0) returned 1 [0131.356] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.356] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.356] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.357] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0131.357] WriteFile (in: hFile=0xc0, lpBuffer=0x127eb900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x127eb900*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0131.358] CloseHandle (hObject=0xc0) returned 1 [0131.358] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.451] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.451] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.451] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffd70ad0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd70ad0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.451] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffd70ad0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd70ad0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.451] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffd70ad0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffd70ad0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffd731e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.451] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.451] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.452] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.452] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.452] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.452] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.452] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.452] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.452] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.452] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/6/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.452] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0131.452] CloseHandle (hObject=0xc0) returned 1 [0131.453] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.453] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.453] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.453] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0131.453] WriteFile (in: hFile=0xc0, lpBuffer=0x12596000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x12596000*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0131.454] CloseHandle (hObject=0xc0) returned 1 [0131.454] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.455] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.455] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.455] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffe562b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe562b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.455] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffe562b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe562b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.455] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffe562b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffe562b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe5b0d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.455] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.455] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.455] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.455] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.455] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.455] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.455] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.455] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.456] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.456] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/7/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.456] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0131.456] CloseHandle (hObject=0xc0) returned 1 [0131.456] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.456] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.456] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.457] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0131.457] WriteFile (in: hFile=0xc0, lpBuffer=0x12598600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x12598600*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0131.458] CloseHandle (hObject=0xc0) returned 1 [0131.458] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.458] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.458] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.458] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffe5fef0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe5fef0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.458] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffe5fef0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe5fef0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.458] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffe5fef0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffe5fef0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe62600, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.458] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.458] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.459] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.459] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.459] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.459] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.459] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.459] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.459] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.459] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/8/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.459] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0131.459] CloseHandle (hObject=0xc0) returned 1 [0131.459] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.460] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.460] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.460] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0131.460] WriteFile (in: hFile=0xc0, lpBuffer=0x1259ac00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x1259ac00*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0131.461] CloseHandle (hObject=0xc0) returned 1 [0131.461] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.461] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.461] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.461] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffe67420, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe67420, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.462] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffe67420, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe67420, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.462] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0131.462] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2C", cAlternateFileName="")) returned 1 [0131.462] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61", cAlternateFileName="")) returned 1 [0131.462] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffe67420, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffe67420, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe69b30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.462] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 1 [0131.462] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.462] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.462] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.462] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.462] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.463] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.463] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.463] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.463] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.463] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.463] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.463] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/E0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.463] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/E0\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.464] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.464] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.464] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.464] SetEvent (hEvent=0xb8) returned 1 [0131.464] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.465] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x124297d0 | out: lpMode=0x124297d0) returned 0 [0131.465] WriteFile (in: hFile=0xc0, lpBuffer=0x125aa000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124297d4, lpOverlapped=0x0 | out: lpBuffer=0x125aa000*, lpNumberOfBytesWritten=0x124297d4*=0x1033, lpOverlapped=0x0) returned 1 [0131.466] CloseHandle (hObject=0xc0) returned 1 [0131.466] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.466] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.466] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.467] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10\\*", lpFindFileData=0x12429444 | out: lpFindFileData=0x12429444*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffe73770, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe73770, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.467] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffe73770, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe73770, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.467] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 1 [0131.467] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffe73770, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffe73770, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe75e80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.467] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.467] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.467] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10/16A09d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.467] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0131.468] ReadFile (in: hFile=0xc0, lpBuffer=0x12466000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x12466000*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0131.471] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.471] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.471] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10/16A09d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f)) returned 1 [0131.471] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.471] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.471] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.471] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.471] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.471] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/10/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.471] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0131.472] CloseHandle (hObject=0x180) returned 1 [0131.472] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.472] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.472] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.472] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124297d0 | out: lpMode=0x124297d0) returned 0 [0131.473] WriteFile (in: hFile=0x180, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124297d4, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x124297d4*=0x1033, lpOverlapped=0x0) returned 1 [0131.474] CloseHandle (hObject=0x180) returned 1 [0131.474] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.474] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.474] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.474] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C\\*", lpFindFileData=0x12429444 | out: lpFindFileData=0x12429444*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffe848e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe848e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.474] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffe848e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe848e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.474] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 1 [0131.474] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffe848e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffe848e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe89700, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.474] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.474] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.474] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C/24B53d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.475] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0131.475] ReadFile (in: hFile=0x180, lpBuffer=0x12466600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x12466600*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0131.477] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.477] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.477] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C/24B53d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5)) returned 1 [0131.478] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.478] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.478] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.478] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.478] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.478] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/2C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0131.479] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0131.479] CloseHandle (hObject=0x19c) returned 1 [0131.479] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.479] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.479] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0131.479] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x124297d0 | out: lpMode=0x124297d0) returned 0 [0131.479] WriteFile (in: hFile=0x19c, lpBuffer=0x125ab300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124297d4, lpOverlapped=0x0 | out: lpBuffer=0x125ab300*, lpNumberOfBytesWritten=0x124297d4*=0x1033, lpOverlapped=0x0) returned 1 [0131.480] CloseHandle (hObject=0x19c) returned 1 [0131.481] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.481] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.481] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.481] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61\\*", lpFindFileData=0x12429444 | out: lpFindFileData=0x12429444*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffe95a50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe95a50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffe95a50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe95a50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 1 [0131.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffe95a50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffe95a50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffe9a870, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.481] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.481] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61/28E95d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0131.482] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0131.482] ReadFile (in: hFile=0x19c, lpBuffer=0x12466c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x12466c00*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0131.486] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.486] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.487] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61/28E95d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949)) returned 1 [0131.487] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.487] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.487] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.487] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.487] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.487] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/61/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0131.488] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0131.488] CloseHandle (hObject=0x154) returned 1 [0131.488] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.488] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.488] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.488] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.488] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.488] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0131.488] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0131.488] CloseHandle (hObject=0x154) returned 1 [0131.488] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/E0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.489] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/E0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.489] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/E0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0131.489] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124297d0 | out: lpMode=0x124297d0) returned 0 [0131.489] WriteFile (in: hFile=0x154, lpBuffer=0x125aec00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124297d4, lpOverlapped=0x0 | out: lpBuffer=0x125aec00*, lpNumberOfBytesWritten=0x124297d4*=0x1033, lpOverlapped=0x0) returned 1 [0131.490] CloseHandle (hObject=0x154) returned 1 [0131.490] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/E0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.490] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/E0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.490] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/E0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.491] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/E0\\*", lpFindFileData=0x12429444 | out: lpFindFileData=0x12429444*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xffea92d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffea92d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.491] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xffea92d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffea92d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.491] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffea92d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffea92d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffeab9e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.491] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F17B2d01", cAlternateFileName="")) returned 1 [0131.491] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.491] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.491] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/E0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.491] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/E0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.491] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/E0/F17B2d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0131.491] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0131.491] ReadFile (in: hFile=0x154, lpBuffer=0x12467400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x12467400*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0131.493] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/9/E0/F17B2d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f)) returned 1 [0131.496] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/A\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.496] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffeb7d30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffeb7d30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.496] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffeb7d30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffeb7d30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffeba440, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.496] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.496] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.498] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/B\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.498] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffebcb50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffebcb50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.498] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffebcb50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffebcb50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffebf260, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.498] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.498] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.500] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.500] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffec1970, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffec1970, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.500] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffec1970, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffec1970, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffec4080, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.500] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6", cAlternateFileName="")) returned 1 [0131.500] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.500] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.502] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/C/E6\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffec6790, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffec6790, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f21b70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x21839, dwReserved0=0x0, dwReserved1=0x0, cFileName="9DCB7d01", cAlternateFileName="")) returned 1 [0131.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffec6790, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffec6790, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffec8ea0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.502] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.507] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/D\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.508] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffed51f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffed51f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.508] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="08", cAlternateFileName="")) returned 1 [0131.508] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffed2ae0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffed2ae0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffed7900, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.508] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.508] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.510] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/D/08\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.510] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xffeda010, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffeda010, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.510] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8266, dwReserved0=0x0, dwReserved1=0x0, cFileName="71469d01", cAlternateFileName="")) returned 1 [0131.510] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffeda010, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffeda010, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffedc720, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.510] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.510] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.515] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/E\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.515] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffee6360, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffee6360, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.515] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="69", cAlternateFileName="")) returned 1 [0131.515] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffee6360, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffee6360, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffee8a70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.515] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.515] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.516] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/E/69\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.517] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffee8a70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffee8a70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.517] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb80063b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="885EEd01", cAlternateFileName="")) returned 1 [0131.517] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffee8a70, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffee8a70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffeed890, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.517] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.517] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.521] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/F\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.522] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffef4dc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffef4dc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.522] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="23", cAlternateFileName="")) returned 1 [0131.522] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffef4dc0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffef4dc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffef9be0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.522] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F0", cAlternateFileName="")) returned 1 [0131.522] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.522] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.524] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/F/23\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.524] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffefc2f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffefc2f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.524] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fe0250, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf888, dwReserved0=0x0, dwReserved1=0x0, cFileName="7E0FEd01", cAlternateFileName="")) returned 1 [0131.524] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffefc2f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffefc2f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffefea00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.524] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.524] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.529] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/Cache/F/F0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.529] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfff08640, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfff08640, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.529] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfff08640, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfff08640, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfff0ad50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.529] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x823c2350, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa80f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECB2Dd01", cAlternateFileName="")) returned 1 [0131.529] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.529] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.535] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/OfflineCache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.535] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfff14990, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfff14990, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.535] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfff12280, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfff12280, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfff197b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.535] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbece4d60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbece4d60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc399b820, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.sqlite", cAlternateFileName="INDEX~1.SQL")) returned 1 [0131.536] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.536] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.539] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249f240 | out: pbBuffer=0x1249f240) returned 1 [0131.540] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410744 | out: pbBuffer=0x12410744) returned 1 [0131.540] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12596202 | out: pbBuffer=0x12596202) returned 1 [0131.540] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12596233 | out: pbBuffer=0x12596233) returned 1 [0131.541] SetEvent (hEvent=0x7c) returned 1 [0131.541] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429774, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429774*=0x40000, lpOverlapped=0x0) returned 1 [0131.545] GetFileType (hFile=0xdc) returned 0x1 [0131.545] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242973c | out: lpNewFilePointer=0x0) returned 1 [0131.545] WriteFile (in: hFile=0xdc, lpBuffer=0x125b6000*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x12429758, lpOverlapped=0x12429764 | out: lpBuffer=0x125b6000*, lpNumberOfBytesWritten=0x12429758*=0x40000, lpOverlapped=0x12429764) returned 1 [0131.546] GetFileType (hFile=0xdc) returned 0x1 [0131.546] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x40000, lpNewFilePointer=0x0, dwMoveMethod=0x1242973c | out: lpNewFilePointer=0x0) returned 1 [0131.546] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429774, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429774*=0x0, lpOverlapped=0x0) returned 1 [0131.546] CloseHandle (hObject=0xdc) returned 1 [0131.546] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/OfflineCache/index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.547] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429764 | out: lpMode=0x12429764) returned 0 [0131.547] WriteFile (in: hFile=0xdc, lpBuffer=0x12650240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429768, lpOverlapped=0x0 | out: lpBuffer=0x12650240*, lpNumberOfBytesWritten=0x12429768*=0x108, lpOverlapped=0x0) returned 1 [0131.548] CloseHandle (hObject=0xdc) returned 1 [0131.548] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c000*, nNumberOfCharsToWrite=0x8d, lpNumberOfCharsWritten=0x1242942c, lpReserved=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfCharsWritten=0x1242942c*=0x8d) returned 1 [0131.549] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/OfflineCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.549] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/OfflineCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.549] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/OfflineCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.549] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/OfflineCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.549] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/OfflineCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.549] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/OfflineCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0131.550] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0131.550] CloseHandle (hObject=0x124) returned 1 [0131.550] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.551] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.551] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0131.551] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0131.552] WriteFile (in: hFile=0x124, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0131.553] CloseHandle (hObject=0x124) returned 1 [0131.553] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.553] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.554] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.554] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfff3ba90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfff3ba90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.554] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfff3ba90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfff3ba90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.554] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfff3ba90, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfff3ba90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfff408b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.554] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x825fd7f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x825fd7f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x825fd7f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.cache", cAlternateFileName="TEST-M~1.CAC")) returned 1 [0131.554] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8234ff30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.pset", cAlternateFileName="TEST-M~1.PSE")) returned 1 [0131.554] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82376090, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.sbstore", cAlternateFileName="TEST-M~1.SBS")) returned 1 [0131.554] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82695d70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82695d70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82695d70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.cache", cAlternateFileName="TEST-P~1.CAC")) returned 1 [0131.554] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.pset", cAlternateFileName="TEST-P~1.PSE")) returned 1 [0131.554] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82649ab0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82649ab0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.sbstore", cAlternateFileName="TEST-P~1.SBS")) returned 1 [0131.554] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.554] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.554] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.554] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.554] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/test-malware-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0131.555] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.555] ReadFile (in: hFile=0x124, lpBuffer=0x12596100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12596100*, lpNumberOfBytesRead=0x12429890*=0x2c, lpOverlapped=0x0) returned 1 [0131.557] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/test-malware-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0131.557] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.557] ReadFile (in: hFile=0x18c, lpBuffer=0x12596400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12596400*, lpNumberOfBytesRead=0x12429890*=0x10, lpOverlapped=0x0) returned 1 [0131.558] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/test-malware-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0131.558] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.558] ReadFile (in: hFile=0x148, lpBuffer=0x12596600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12596600*, lpNumberOfBytesRead=0x12429890*=0xe8, lpOverlapped=0x0) returned 1 [0131.559] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/test-phish-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0131.560] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.560] ReadFile (in: hFile=0x120, lpBuffer=0x12596800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12596800*, lpNumberOfBytesRead=0x12429890*=0x2c, lpOverlapped=0x0) returned 1 [0131.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/test-phish-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0131.561] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.562] ReadFile (in: hFile=0x15c, lpBuffer=0x12596a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12596a00*, lpNumberOfBytesRead=0x12429890*=0x10, lpOverlapped=0x0) returned 1 [0131.563] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/test-phish-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0131.563] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.563] ReadFile (in: hFile=0x10c, lpBuffer=0x12596c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12596c00*, lpNumberOfBytesRead=0x12429890*=0xe8, lpOverlapped=0x0) returned 1 [0131.564] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/test-malware-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x825fd7f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x825fd7f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x825fd7f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c)) returned 1 [0131.564] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/test-malware-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8234ff30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0131.564] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/test-malware-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82376090, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0131.564] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/test-phish-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82695d70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82695d70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82695d70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c)) returned 1 [0131.564] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/test-phish-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0131.564] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/test-phish-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82649ab0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82649ab0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0131.565] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.565] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.565] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.565] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.565] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.565] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/safebrowsing/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.565] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0131.565] CloseHandle (hObject=0xc0) returned 1 [0131.565] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.565] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.566] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.566] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0131.566] WriteFile (in: hFile=0xc0, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0131.567] CloseHandle (hObject=0xc0) returned 1 [0131.568] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.568] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.569] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.569] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfff60480, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfff60480, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.569] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfff60480, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfff60480, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.569] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfff60480, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfff60480, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfff652a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.569] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x854b47b0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache.4.little", cAlternateFileName="STARTU~1.LIT")) returned 1 [0131.569] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.569] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.569] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.569] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.570] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache/startupCache.4.little" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.570] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.570] ReadFile (in: hFile=0xc0, lpBuffer=0x12597400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12597400*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0131.572] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache/startupCache.4.little" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x854b47b0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe59f6)) returned 1 [0131.573] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.573] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.573] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.574] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.574] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/startupCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.574] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0131.574] CloseHandle (hObject=0x180) returned 1 [0131.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.575] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.575] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.575] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0131.576] WriteFile (in: hFile=0x180, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0131.577] CloseHandle (hObject=0x180) returned 1 [0131.577] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.577] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.578] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.578] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfff76410, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfff76410, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.578] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfff76410, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfff76410, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.578] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83cc0a50, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83cc0a50, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4cc87c1409819bf06f42b782d4902b2f.png", cAlternateFileName="4CC87C~1.PNG")) returned 1 [0131.578] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfff76410, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfff76410, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfff7b230, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.578] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83ce6bb0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ba182bcd131f1f3c6b6fbbb1ba078341.png", cAlternateFileName="BA182B~1.PNG")) returned 1 [0131.578] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb97ade50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1c362, dwReserved0=0x0, dwReserved1=0x0, cFileName="ce8c0453589216a67cddb50284fbfe8d.png", cAlternateFileName="CE8C04~1.PNG")) returned 1 [0131.578] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.578] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.578] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.579] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.579] ReadFile (in: hFile=0x180, lpBuffer=0x12597900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12597900*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0131.581] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.581] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.581] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0131.582] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.582] ReadFile (in: hFile=0x19c, lpBuffer=0x12597b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12597b00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0131.583] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0131.584] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.585] ReadFile (in: hFile=0x154, lpBuffer=0x12597c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12597c00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0131.587] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83cc0a50, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83cc0a50, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0)) returned 1 [0131.587] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.587] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429764 | out: lpMode=0x12429764) returned 0 [0131.587] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e460 | out: pbBuffer=0x1249e460) returned 1 [0131.589] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12597d02 | out: pbBuffer=0x12597d02) returned 1 [0131.589] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12597d67 | out: pbBuffer=0x12597d67) returned 1 [0131.589] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12597d7b | out: pbBuffer=0x12597d7b) returned 1 [0131.589] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12597da1 | out: pbBuffer=0x12597da1) returned 1 [0131.590] SetEvent (hEvent=0xa0) returned 1 [0131.590] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429774, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429774*=0x40b0, lpOverlapped=0x0) returned 1 [0131.591] GetFileType (hFile=0xdc) returned 0x1 [0131.591] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242973c | out: lpNewFilePointer=0x0) returned 1 [0131.591] WriteFile (in: hFile=0xdc, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x40b0, lpNumberOfBytesWritten=0x12429758, lpOverlapped=0x12429764 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x12429758*=0x40b0, lpOverlapped=0x12429764) returned 1 [0131.591] GetFileType (hFile=0xdc) returned 0x1 [0131.591] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x40b0, lpNewFilePointer=0x0, dwMoveMethod=0x1242973c | out: lpNewFilePointer=0x0) returned 1 [0131.591] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429774, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429774*=0x0, lpOverlapped=0x0) returned 1 [0131.591] CloseHandle (hObject=0xdc) returned 1 [0131.591] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.592] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429764 | out: lpMode=0x12429764) returned 0 [0131.592] WriteFile (in: hFile=0xdc, lpBuffer=0x124b8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429768, lpOverlapped=0x0 | out: lpBuffer=0x124b8240*, lpNumberOfBytesWritten=0x12429768*=0x108, lpOverlapped=0x0) returned 1 [0131.592] CloseHandle (hObject=0xdc) returned 1 [0131.592] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476dc0*, nNumberOfCharsToWrite=0xa3, lpNumberOfCharsWritten=0x1242942c, lpReserved=0x0 | out: lpBuffer=0x12476dc0*, lpNumberOfCharsWritten=0x1242942c*=0xa3) returned 1 [0131.592] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83ce6bb0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0)) returned 1 [0131.593] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.593] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429764 | out: lpMode=0x12429764) returned 0 [0131.593] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0131.594] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0131.594] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c032 | out: pbBuffer=0x1248c032) returned 1 [0131.595] CloseHandle (hObject=0x19c) returned 1 [0131.595] CloseHandle (hObject=0x180) returned 1 [0131.595] CloseHandle (hObject=0xc0) returned 1 [0131.595] CloseHandle (hObject=0x10c) returned 1 [0131.595] CloseHandle (hObject=0x15c) returned 1 [0131.595] CloseHandle (hObject=0x120) returned 1 [0131.596] CloseHandle (hObject=0x148) returned 1 [0131.596] CloseHandle (hObject=0x18c) returned 1 [0131.596] CloseHandle (hObject=0x124) returned 1 [0131.596] CloseHandle (hObject=0x154) returned 1 [0131.596] SwitchToThread () returned 1 [0131.596] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.599] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.603] SetEvent (hEvent=0xa0) returned 1 [0131.603] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.603] SetEvent (hEvent=0xa0) returned 1 [0131.603] SwitchToThread () returned 1 [0131.605] SetEvent (hEvent=0xb8) returned 1 [0131.605] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.699] SetEvent (hEvent=0xb8) returned 1 [0131.699] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.700] SetEvent (hEvent=0xb8) returned 1 [0131.700] SetEvent (hEvent=0x7c) returned 1 [0131.700] CloseHandle (hObject=0x13c) returned 1 [0131.700] SwitchToThread () returned 1 [0131.705] SetEvent (hEvent=0xa0) returned 1 [0131.705] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.706] SetEvent (hEvent=0xa0) returned 1 [0131.706] SetEvent (hEvent=0x7c) returned 1 [0131.706] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.708] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.712] SetEvent (hEvent=0xa0) returned 1 [0131.712] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.713] SetEvent (hEvent=0xa0) returned 1 [0131.713] SetEvent (hEvent=0x7c) returned 1 [0131.713] SwitchToThread () returned 1 [0131.714] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.718] SetEvent (hEvent=0xa0) returned 1 [0131.718] SetEvent (hEvent=0x7c) returned 1 [0131.718] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.719] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.723] SetEvent (hEvent=0xa0) returned 1 [0131.723] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.723] SetEvent (hEvent=0xa0) returned 1 [0131.723] SetEvent (hEvent=0x7c) returned 1 [0131.723] SwitchToThread () returned 1 [0131.725] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.728] SetEvent (hEvent=0xa0) returned 1 [0131.728] SetEvent (hEvent=0x7c) returned 1 [0131.728] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.730] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.734] SetEvent (hEvent=0xa0) returned 1 [0131.734] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.734] SetEvent (hEvent=0xa0) returned 1 [0131.735] SetEvent (hEvent=0x7c) returned 1 [0131.735] SwitchToThread () returned 1 [0131.736] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.739] SetEvent (hEvent=0xa0) returned 1 [0131.740] SetEvent (hEvent=0x7c) returned 1 [0131.740] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.741] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.745] SetEvent (hEvent=0xa0) returned 1 [0131.745] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.746] SetEvent (hEvent=0xa0) returned 1 [0131.746] SetEvent (hEvent=0x7c) returned 1 [0131.746] SwitchToThread () returned 1 [0131.747] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.751] SetEvent (hEvent=0xa0) returned 1 [0131.751] SetEvent (hEvent=0x7c) returned 1 [0131.751] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.757] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.761] SetEvent (hEvent=0xa0) returned 1 [0131.761] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.761] SetEvent (hEvent=0xa0) returned 1 [0131.761] SetEvent (hEvent=0x7c) returned 1 [0131.761] SwitchToThread () returned 1 [0131.764] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.844] SetEvent (hEvent=0xa0) returned 1 [0131.847] SetEvent (hEvent=0x7c) returned 1 [0131.847] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.872] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.909] SetEvent (hEvent=0xa0) returned 1 [0131.909] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.917] SetEvent (hEvent=0xa0) returned 1 [0131.917] SetEvent (hEvent=0x7c) returned 1 [0131.917] SwitchToThread () returned 1 [0131.919] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.952] SetEvent (hEvent=0xa0) returned 1 [0131.952] SetEvent (hEvent=0x7c) returned 1 [0131.952] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0131.981] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.016] SetEvent (hEvent=0xa0) returned 1 [0132.016] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.016] SetEvent (hEvent=0xa0) returned 1 [0132.016] SetEvent (hEvent=0x7c) returned 1 [0132.016] SwitchToThread () returned 1 [0132.018] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.023] SetEvent (hEvent=0xa0) returned 1 [0132.023] SetEvent (hEvent=0x7c) returned 1 [0132.023] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.025] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.030] SetEvent (hEvent=0xa0) returned 1 [0132.030] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.030] SetEvent (hEvent=0xa0) returned 1 [0132.030] SetEvent (hEvent=0x7c) returned 1 [0132.030] SwitchToThread () returned 1 [0132.031] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.036] SetEvent (hEvent=0xa0) returned 1 [0132.036] SetEvent (hEvent=0x7c) returned 1 [0132.036] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.038] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.042] SetEvent (hEvent=0xa0) returned 1 [0132.043] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.043] SetEvent (hEvent=0xa0) returned 1 [0132.043] SetEvent (hEvent=0x7c) returned 1 [0132.043] SwitchToThread () returned 1 [0132.044] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.048] SetEvent (hEvent=0xa0) returned 1 [0132.048] SetEvent (hEvent=0x7c) returned 1 [0132.048] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.050] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.055] SetEvent (hEvent=0xa0) returned 1 [0132.055] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.055] SetEvent (hEvent=0xa0) returned 1 [0132.055] SetEvent (hEvent=0x7c) returned 1 [0132.055] SwitchToThread () returned 1 [0132.057] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.061] SetEvent (hEvent=0xa0) returned 1 [0132.061] SetEvent (hEvent=0x7c) returned 1 [0132.061] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.063] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.067] SetEvent (hEvent=0xa0) returned 1 [0132.067] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.068] SetEvent (hEvent=0xa0) returned 1 [0132.068] SetEvent (hEvent=0x7c) returned 1 [0132.068] SwitchToThread () returned 1 [0132.069] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.073] SetEvent (hEvent=0xa0) returned 1 [0132.073] SetEvent (hEvent=0x7c) returned 1 [0132.073] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.075] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.080] SetEvent (hEvent=0xa0) returned 1 [0132.080] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.080] SetEvent (hEvent=0xa0) returned 1 [0132.080] SetEvent (hEvent=0x7c) returned 1 [0132.080] SwitchToThread () returned 1 [0132.081] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.086] SetEvent (hEvent=0xa0) returned 1 [0132.086] SetEvent (hEvent=0x7c) returned 1 [0132.086] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.087] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.109] SetEvent (hEvent=0xa0) returned 1 [0132.109] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.109] SetEvent (hEvent=0xa0) returned 1 [0132.109] SetEvent (hEvent=0x7c) returned 1 [0132.110] SwitchToThread () returned 1 [0132.114] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.119] SetEvent (hEvent=0xa0) returned 1 [0132.119] SetEvent (hEvent=0x7c) returned 1 [0132.119] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.120] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.140] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.142] SetEvent (hEvent=0x7c) returned 1 [0132.142] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.143] SetEvent (hEvent=0x7c) returned 1 [0132.143] SetEvent (hEvent=0xb8) returned 1 [0132.143] CloseHandle (hObject=0x178) returned 1 [0132.143] SwitchToThread () returned 1 [0132.143] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.159] SetEvent (hEvent=0xb8) returned 1 [0132.159] SetEvent (hEvent=0x7c) returned 1 [0132.159] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0132.160] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.160] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0132.161] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.161] SetEvent (hEvent=0xb8) returned 1 [0132.161] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0132.162] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.162] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.182] SetEvent (hEvent=0xb8) returned 1 [0132.182] SetEvent (hEvent=0x7c) returned 1 [0132.182] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.187] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.249] SetEvent (hEvent=0x7c) returned 1 [0132.249] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.250] SetEvent (hEvent=0x7c) returned 1 [0132.250] SetEvent (hEvent=0xb8) returned 1 [0132.250] CloseHandle (hObject=0x148) returned 1 [0132.250] CloseHandle (hObject=0x18c) returned 1 [0132.250] SwitchToThread () returned 1 [0132.251] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.664] SetEvent (hEvent=0xb8) returned 1 [0132.664] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0132.666] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.666] SetEvent (hEvent=0xb8) returned 1 [0132.666] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0x1) returned 0x102 [0132.669] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.669] CloseHandle (hObject=0x274) returned 1 [0132.669] CloseHandle (hObject=0x270) returned 1 [0132.669] CloseHandle (hObject=0x26c) returned 1 [0132.669] CloseHandle (hObject=0x268) returned 1 [0132.669] CloseHandle (hObject=0x264) returned 1 [0132.670] CloseHandle (hObject=0x260) returned 1 [0132.670] CloseHandle (hObject=0x25c) returned 1 [0132.670] CloseHandle (hObject=0x258) returned 1 [0132.670] CloseHandle (hObject=0x254) returned 1 [0132.670] CloseHandle (hObject=0x250) returned 1 [0132.670] CloseHandle (hObject=0x24c) returned 1 [0132.670] CloseHandle (hObject=0x248) returned 1 [0132.670] CloseHandle (hObject=0x244) returned 1 [0132.670] CloseHandle (hObject=0x240) returned 1 [0132.670] CloseHandle (hObject=0x23c) returned 1 [0132.670] CloseHandle (hObject=0x238) returned 1 [0132.670] CloseHandle (hObject=0x234) returned 1 [0132.670] CloseHandle (hObject=0x230) returned 1 [0132.670] CloseHandle (hObject=0x22c) returned 1 [0132.670] CloseHandle (hObject=0x228) returned 1 [0132.670] CloseHandle (hObject=0x224) returned 1 [0132.670] CloseHandle (hObject=0x220) returned 1 [0132.670] CloseHandle (hObject=0x21c) returned 1 [0132.670] CloseHandle (hObject=0x218) returned 1 [0132.670] CloseHandle (hObject=0x214) returned 1 [0132.671] CloseHandle (hObject=0x210) returned 1 [0132.671] CloseHandle (hObject=0x20c) returned 1 [0132.671] CloseHandle (hObject=0x208) returned 1 [0132.671] CloseHandle (hObject=0x204) returned 1 [0132.671] CloseHandle (hObject=0x200) returned 1 [0132.671] CloseHandle (hObject=0x1fc) returned 1 [0132.671] CloseHandle (hObject=0x1f8) returned 1 [0132.671] CloseHandle (hObject=0x1f4) returned 1 [0132.671] CloseHandle (hObject=0x1f0) returned 1 [0132.671] CloseHandle (hObject=0x1ec) returned 1 [0132.671] CloseHandle (hObject=0x1e8) returned 1 [0132.671] CloseHandle (hObject=0x1e4) returned 1 [0132.671] CloseHandle (hObject=0x1e0) returned 1 [0132.671] CloseHandle (hObject=0x1dc) returned 1 [0132.671] CloseHandle (hObject=0x1d8) returned 1 [0132.671] CloseHandle (hObject=0x1d4) returned 1 [0132.671] CloseHandle (hObject=0x1d0) returned 1 [0132.671] CloseHandle (hObject=0x1cc) returned 1 [0132.671] CloseHandle (hObject=0x1c8) returned 1 [0132.672] CloseHandle (hObject=0x1c4) returned 1 [0132.672] CloseHandle (hObject=0x1c0) returned 1 [0132.672] CloseHandle (hObject=0x1bc) returned 1 [0132.672] CloseHandle (hObject=0x1b8) returned 1 [0132.672] CloseHandle (hObject=0x1b4) returned 1 [0132.672] CloseHandle (hObject=0x1b0) returned 1 [0132.672] CloseHandle (hObject=0x1ac) returned 1 [0132.672] CloseHandle (hObject=0x1a8) returned 1 [0132.672] CloseHandle (hObject=0x1a4) returned 1 [0132.672] CloseHandle (hObject=0x1a0) returned 1 [0132.672] CloseHandle (hObject=0x194) returned 1 [0132.672] CloseHandle (hObject=0x184) returned 1 [0132.672] CloseHandle (hObject=0xec) returned 1 [0132.672] CloseHandle (hObject=0xe0) returned 1 [0132.672] CloseHandle (hObject=0xcc) returned 1 [0132.672] CloseHandle (hObject=0xd8) returned 1 [0132.672] CloseHandle (hObject=0x140) returned 1 [0132.672] CloseHandle (hObject=0x14c) returned 1 [0132.672] CloseHandle (hObject=0xf4) returned 1 [0132.672] CloseHandle (hObject=0x174) returned 1 [0132.673] CloseHandle (hObject=0x170) returned 1 [0132.673] CloseHandle (hObject=0x11c) returned 1 [0132.673] CloseHandle (hObject=0x13c) returned 1 [0132.673] CloseHandle (hObject=0x100) returned 1 [0132.673] CloseHandle (hObject=0x98) returned 1 [0132.673] CloseHandle (hObject=0x150) returned 1 [0132.673] CloseHandle (hObject=0x188) returned 1 [0132.673] CloseHandle (hObject=0x190) returned 1 [0132.673] CloseHandle (hObject=0x108) returned 1 [0132.673] CloseHandle (hObject=0x138) returned 1 [0132.673] CloseHandle (hObject=0xe4) returned 1 [0132.673] CloseHandle (hObject=0xf0) returned 1 [0132.673] CloseHandle (hObject=0x104) returned 1 [0132.673] CloseHandle (hObject=0xfc) returned 1 [0132.673] CloseHandle (hObject=0x134) returned 1 [0132.673] CloseHandle (hObject=0x130) returned 1 [0132.673] CloseHandle (hObject=0xf8) returned 1 [0132.673] CloseHandle (hObject=0x158) returned 1 [0132.673] CloseHandle (hObject=0x164) returned 1 [0132.673] CloseHandle (hObject=0x160) returned 1 [0132.674] CloseHandle (hObject=0x114) returned 1 [0132.674] CloseHandle (hObject=0xe8) returned 1 [0132.674] CloseHandle (hObject=0xbc) returned 1 [0132.674] CloseHandle (hObject=0x17c) returned 1 [0132.674] CloseHandle (hObject=0x118) returned 1 [0132.674] CloseHandle (hObject=0xc8) returned 1 [0132.674] CloseHandle (hObject=0x16c) returned 1 [0132.674] CloseHandle (hObject=0x144) returned 1 [0132.674] CloseHandle (hObject=0xd0) returned 1 [0132.674] CloseHandle (hObject=0x168) returned 1 [0132.674] CloseHandle (hObject=0x198) returned 1 [0132.674] CloseHandle (hObject=0x12c) returned 1 [0132.674] CloseHandle (hObject=0x128) returned 1 [0132.674] CloseHandle (hObject=0x110) returned 1 [0132.674] CloseHandle (hObject=0x19c) returned 1 [0132.675] CloseHandle (hObject=0x180) returned 1 [0132.675] CloseHandle (hObject=0xc0) returned 1 [0132.675] CloseHandle (hObject=0x10c) returned 1 [0132.675] CloseHandle (hObject=0x15c) returned 1 [0132.675] CloseHandle (hObject=0x148) returned 1 [0132.675] CloseHandle (hObject=0x18c) returned 1 [0132.675] CloseHandle (hObject=0x124) returned 1 [0132.675] CloseHandle (hObject=0x178) returned 1 [0132.675] CloseHandle (hObject=0x154) returned 1 [0132.675] CloseHandle (hObject=0xdc) returned 1 [0132.675] CloseHandle (hObject=0x120) returned 1 [0132.675] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.738] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.756] SetEvent (hEvent=0x7c) returned 1 [0132.756] SetEvent (hEvent=0xb8) returned 1 [0132.756] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0132.993] SetEvent (hEvent=0xa0) returned 1 [0132.993] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0133.089] SetEvent (hEvent=0xa0) returned 1 [0133.089] SetEvent (hEvent=0xb8) returned 1 [0133.089] SetEvent (hEvent=0x7c) returned 1 [0133.089] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0134.859] SetEvent (hEvent=0xa0) returned 1 [0134.859] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0151.359] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0151.427] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0151.702] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) returned 0x0 [0151.769] WaitForSingleObject (hHandle=0x6c, dwMilliseconds=0xffffffff) Thread: id = 2 os_tid = 0x9a0 [0030.603] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x204ff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x204ff38*=0x74) returned 1 [0030.603] VirtualQuery (in: lpAddress=0x204ff48, lpBuffer=0x204ff48, dwLength=0x1c | out: lpBuffer=0x204ff48*(BaseAddress=0x204f000, AllocationBase=0x1f50000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0030.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.675] SetEvent (hEvent=0xa8) returned 1 [0030.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.681] timeEndPeriod (uPeriod=0x1) returned 0x0 [0030.681] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xac [0030.681] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0030.697] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0030.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.741] SetEvent (hEvent=0xa0) returned 1 [0030.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0030.990] timeEndPeriod (uPeriod=0x1) returned 0x0 [0030.990] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0035.212] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0035.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.271] SetEvent (hEvent=0x7c) returned 1 [0035.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.284] timeEndPeriod (uPeriod=0x1) returned 0x0 [0035.284] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0035.303] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0035.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.366] SetEvent (hEvent=0x7c) returned 1 [0035.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.390] SetEvent (hEvent=0x7c) returned 1 [0035.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.431] SetEvent (hEvent=0x7c) returned 1 [0035.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.447] SetEvent (hEvent=0x7c) returned 1 [0035.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.506] SetEvent (hEvent=0x7c) returned 1 [0035.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.561] SetEvent (hEvent=0x7c) returned 1 [0035.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.596] SetEvent (hEvent=0x7c) returned 1 [0035.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.606] timeEndPeriod (uPeriod=0x1) returned 0x0 [0035.606] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0035.607] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0035.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0035.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.598] SetEvent (hEvent=0x7c) returned 1 [0036.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0036.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.060] SetEvent (hEvent=0xb8) returned 1 [0037.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.064] timeEndPeriod (uPeriod=0x1) returned 0x0 [0037.064] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0037.347] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0037.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.373] SetEvent (hEvent=0xb8) returned 1 [0037.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.380] timeEndPeriod (uPeriod=0x1) returned 0x0 [0037.380] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0037.382] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0037.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.617] SetEvent (hEvent=0xb8) returned 1 [0037.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.670] SetEvent (hEvent=0x7c) returned 1 [0037.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0037.708] timeEndPeriod (uPeriod=0x1) returned 0x0 [0037.708] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0039.167] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0039.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0039.195] SetEvent (hEvent=0x7c) returned 1 [0039.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0040.053] timeEndPeriod (uPeriod=0x1) returned 0x0 [0040.053] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0041.699] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0041.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0041.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0041.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0041.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0041.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0042.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0042.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0042.086] SetEvent (hEvent=0x7c) returned 1 [0042.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0042.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0042.164] SetEvent (hEvent=0xb8) returned 1 [0042.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0042.315] timeEndPeriod (uPeriod=0x1) returned 0x0 [0042.316] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0043.004] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0043.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0043.045] SetEvent (hEvent=0xb8) returned 1 [0043.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0043.059] timeEndPeriod (uPeriod=0x1) returned 0x0 [0043.059] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0043.060] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0043.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0043.062] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0043.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0043.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0043.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0043.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0043.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0043.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0043.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0043.173] SetEvent (hEvent=0xb8) returned 1 [0043.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0043.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0043.225] SetEvent (hEvent=0x7c) returned 1 [0043.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0043.262] timeEndPeriod (uPeriod=0x1) returned 0x0 [0043.262] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0043.963] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0043.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0043.992] SetEvent (hEvent=0x7c) returned 1 [0043.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.024] timeEndPeriod (uPeriod=0x1) returned 0x0 [0044.024] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0044.029] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0044.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.118] SetEvent (hEvent=0x7c) returned 1 [0044.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.172] SetEvent (hEvent=0xb8) returned 1 [0044.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.218] timeEndPeriod (uPeriod=0x1) returned 0x0 [0044.218] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0044.713] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0044.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.720] SetEvent (hEvent=0xb8) returned 1 [0044.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0044.896] timeEndPeriod (uPeriod=0x1) returned 0x0 [0044.896] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0045.486] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0045.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.496] SetEvent (hEvent=0xb8) returned 1 [0045.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.539] timeEndPeriod (uPeriod=0x1) returned 0x0 [0045.539] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0045.546] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0045.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.736] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.748] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.754] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.919] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.929] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0045.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.408] timeEndPeriod (uPeriod=0x1) returned 0x0 [0046.408] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0046.456] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0046.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0046.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0047.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0047.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0047.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0047.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0047.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0047.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0047.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0047.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0047.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0047.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0047.864] SetEvent (hEvent=0xa0) returned 1 [0047.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0047.961] timeEndPeriod (uPeriod=0x1) returned 0x0 [0047.961] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0048.031] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0048.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.089] SetEvent (hEvent=0xb8) returned 1 [0048.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.090] timeEndPeriod (uPeriod=0x1) returned 0x0 [0048.090] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0048.228] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0048.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0048.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0049.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0049.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0049.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0049.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0049.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0049.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0049.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0049.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0049.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0049.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0049.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0050.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0050.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0050.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0050.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0050.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0050.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0050.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0050.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0050.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0050.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0050.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0050.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0050.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0051.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0051.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0051.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0051.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0051.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0051.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0051.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0051.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0051.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0051.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0051.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0051.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.146] SetEvent (hEvent=0xa8) returned 1 [0052.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.242] timeEndPeriod (uPeriod=0x1) returned 0x0 [0052.242] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0052.303] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0052.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.338] SetEvent (hEvent=0xa8) returned 1 [0052.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.527] timeEndPeriod (uPeriod=0x1) returned 0x0 [0052.527] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0052.536] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0052.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.554] timeEndPeriod (uPeriod=0x1) returned 0x0 [0052.554] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0052.654] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0052.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0052.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.580] SetEvent (hEvent=0xa0) returned 1 [0053.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.774] SetEvent (hEvent=0xa0) returned 1 [0053.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.829] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0053.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0054.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0054.062] timeEndPeriod (uPeriod=0x1) returned 0x0 [0054.062] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0054.062] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0054.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0054.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0054.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0054.111] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0054.159] SetEvent (hEvent=0xa8) returned 1 [0054.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0054.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0054.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0054.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0054.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0054.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0054.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0054.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.295] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.397] SetEvent (hEvent=0x6c) returned 1 [0055.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.549] timeEndPeriod (uPeriod=0x1) returned 0x0 [0055.549] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0055.563] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0055.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.776] SetEvent (hEvent=0x6c) returned 1 [0055.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0055.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0056.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0056.097] timeEndPeriod (uPeriod=0x1) returned 0x0 [0056.097] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0056.098] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0056.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0056.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0056.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0056.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0056.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0056.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0056.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0056.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0056.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0057.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0057.111] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0057.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0057.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0057.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0057.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0057.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0057.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0057.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0057.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0057.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0057.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.464] SetEvent (hEvent=0xa8) returned 1 [0058.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.595] timeEndPeriod (uPeriod=0x1) returned 0x0 [0058.595] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0058.601] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0058.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.797] SetEvent (hEvent=0xa8) returned 1 [0058.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.947] SetEvent (hEvent=0xa8) returned 1 [0058.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0058.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.032] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.252] SetEvent (hEvent=0xb8) returned 1 [0059.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.378] timeEndPeriod (uPeriod=0x1) returned 0x0 [0059.378] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0059.378] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0059.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0059.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0060.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0060.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0060.253] SetEvent (hEvent=0x6c) returned 1 [0060.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0060.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0060.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0060.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0060.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0060.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0060.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.053] SetEvent (hEvent=0x7c) returned 1 [0061.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.255] SetEvent (hEvent=0x7c) returned 1 [0061.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.518] timeEndPeriod (uPeriod=0x1) returned 0x0 [0061.518] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0061.521] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0061.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.539] timeEndPeriod (uPeriod=0x1) returned 0x0 [0061.539] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0061.658] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0061.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0061.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0062.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0062.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0062.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0062.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0062.526] SetEvent (hEvent=0xa0) returned 1 [0062.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0062.619] timeEndPeriod (uPeriod=0x1) returned 0x0 [0062.619] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0062.638] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0062.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0062.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0062.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0062.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.289] SetEvent (hEvent=0xb8) returned 1 [0063.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.426] SetEvent (hEvent=0xb8) returned 1 [0063.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.432] timeEndPeriod (uPeriod=0x1) returned 0x0 [0063.432] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0063.593] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0063.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0063.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0064.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0064.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0064.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0064.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0064.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0064.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0064.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0064.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0064.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0064.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0064.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0064.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0065.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0065.185] SetEvent (hEvent=0xb8) returned 1 [0065.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0065.335] timeEndPeriod (uPeriod=0x1) returned 0x0 [0065.335] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0065.538] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0065.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0065.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0065.697] SetEvent (hEvent=0xb8) returned 1 [0065.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0065.756] timeEndPeriod (uPeriod=0x1) returned 0x0 [0065.756] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0065.977] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0065.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0065.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.394] timeEndPeriod (uPeriod=0x1) returned 0x0 [0066.394] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0066.394] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0066.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0066.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.929] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0067.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0068.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0068.092] timeEndPeriod (uPeriod=0x1) returned 0x0 [0068.092] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0068.155] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0068.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0068.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0068.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0068.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0068.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0068.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0068.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0068.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0068.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0068.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0069.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0069.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0069.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0069.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0069.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0069.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0069.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0069.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0069.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0069.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0069.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0069.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.671] SetEvent (hEvent=0xb8) returned 1 [0070.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0070.677] timeEndPeriod (uPeriod=0x1) returned 0x0 [0070.677] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0070.999] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0070.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.022] SetEvent (hEvent=0xb8) returned 1 [0071.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.023] timeEndPeriod (uPeriod=0x1) returned 0x0 [0071.023] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0071.040] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0071.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.066] SetEvent (hEvent=0xb8) returned 1 [0071.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.067] timeEndPeriod (uPeriod=0x1) returned 0x0 [0071.067] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0071.149] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0071.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.178] SetEvent (hEvent=0xa0) returned 1 [0071.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.179] timeEndPeriod (uPeriod=0x1) returned 0x0 [0071.179] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0071.757] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0071.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0071.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.913] SetEvent (hEvent=0xa0) returned 1 [0072.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.938] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0072.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.109] timeEndPeriod (uPeriod=0x1) returned 0x0 [0073.109] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0073.153] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0073.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.516] SetEvent (hEvent=0x6c) returned 1 [0073.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.767] timeEndPeriod (uPeriod=0x1) returned 0x0 [0073.767] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0073.832] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0073.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0073.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0074.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0074.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0074.087] timeEndPeriod (uPeriod=0x1) returned 0x0 [0074.087] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0074.088] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0074.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0074.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0074.089] timeEndPeriod (uPeriod=0x1) returned 0x0 [0074.089] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0074.185] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0074.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0074.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0074.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0074.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0074.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0074.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0074.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0074.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0074.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.324] timeEndPeriod (uPeriod=0x1) returned 0x0 [0075.324] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0075.325] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0075.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0075.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0076.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0076.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0076.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0076.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0076.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0076.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0076.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0076.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0076.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0076.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0076.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0076.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0076.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.111] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.140] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.199] SetEvent (hEvent=0x6c) returned 1 [0077.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.199] timeEndPeriod (uPeriod=0x1) returned 0x0 [0077.199] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0077.397] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0077.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0077.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0078.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0078.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0078.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0078.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0078.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0078.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0078.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0079.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0079.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0079.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0079.286] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0079.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0079.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0079.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0079.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0079.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0079.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0079.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0079.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0080.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0080.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0080.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0080.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0080.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0080.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0080.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0080.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0080.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0080.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0080.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0080.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0080.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0081.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0081.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0081.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0081.284] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0081.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0081.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0081.525] timeEndPeriod (uPeriod=0x1) returned 0x0 [0081.525] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0081.543] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0081.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0081.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0081.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0081.922] timeEndPeriod (uPeriod=0x1) returned 0x0 [0081.922] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0082.040] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0082.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0082.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0082.270] timeEndPeriod (uPeriod=0x1) returned 0x0 [0082.270] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0082.466] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0082.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0082.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0082.857] timeEndPeriod (uPeriod=0x1) returned 0x0 [0082.857] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0082.976] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0083.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0083.289] timeEndPeriod (uPeriod=0x1) returned 0x0 [0083.289] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0083.421] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0083.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0083.697] timeEndPeriod (uPeriod=0x1) returned 0x0 [0083.697] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0083.907] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0084.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0084.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0084.314] timeEndPeriod (uPeriod=0x1) returned 0x0 [0084.314] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0084.565] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0084.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0084.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0084.902] timeEndPeriod (uPeriod=0x1) returned 0x0 [0084.902] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0085.048] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0085.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0085.241] timeEndPeriod (uPeriod=0x1) returned 0x0 [0085.241] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0085.354] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0085.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0085.551] timeEndPeriod (uPeriod=0x1) returned 0x0 [0085.551] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0085.662] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0085.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0085.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0086.014] timeEndPeriod (uPeriod=0x1) returned 0x0 [0086.014] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0086.239] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0086.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0086.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0086.448] timeEndPeriod (uPeriod=0x1) returned 0x0 [0086.448] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0086.543] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0086.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0086.733] timeEndPeriod (uPeriod=0x1) returned 0x0 [0086.733] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0086.844] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0086.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0087.040] timeEndPeriod (uPeriod=0x1) returned 0x0 [0087.040] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0087.137] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0087.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0087.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0087.362] timeEndPeriod (uPeriod=0x1) returned 0x0 [0087.363] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0087.459] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0087.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0087.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0087.599] timeEndPeriod (uPeriod=0x1) returned 0x0 [0087.599] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0087.694] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0087.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0088.038] timeEndPeriod (uPeriod=0x1) returned 0x0 [0088.038] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0088.156] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0088.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0088.455] timeEndPeriod (uPeriod=0x1) returned 0x0 [0088.455] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0088.619] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0088.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0088.792] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0088.848] timeEndPeriod (uPeriod=0x1) returned 0x0 [0088.848] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0089.031] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0089.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0089.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0089.252] SetEvent (hEvent=0x6c) returned 1 [0089.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0089.273] timeEndPeriod (uPeriod=0x1) returned 0x0 [0089.273] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0089.335] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0089.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0089.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0089.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0089.377] SetEvent (hEvent=0x6c) returned 1 [0089.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0089.378] timeEndPeriod (uPeriod=0x1) returned 0x0 [0089.378] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0089.458] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0089.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0089.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0089.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0089.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0089.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0090.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0090.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0090.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0090.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0090.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0090.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0091.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0091.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0091.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0091.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0091.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0091.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0091.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0091.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0091.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0091.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0091.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0091.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0091.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0092.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0092.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0092.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0092.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0092.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0092.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0092.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0092.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0092.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0093.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0093.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0093.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0093.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0093.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0093.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0093.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0093.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0093.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0093.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0093.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0093.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0093.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0093.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0094.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0094.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0094.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0094.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0094.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0094.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0094.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0094.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0094.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0094.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0094.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0095.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0095.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0095.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0095.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0095.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0095.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0095.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0095.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0095.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0095.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0095.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0096.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0096.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0096.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0096.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0096.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0096.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0097.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0097.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0097.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0097.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0097.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0097.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0097.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0097.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0097.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0097.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0097.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0097.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0098.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0098.037] SetEvent (hEvent=0x6c) returned 1 [0098.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0098.038] timeEndPeriod (uPeriod=0x1) returned 0x0 [0098.038] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0098.550] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0098.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0098.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0098.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0098.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0098.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0099.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0099.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0099.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0099.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0099.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0099.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0099.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0099.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0099.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0100.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0100.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0100.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0100.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0100.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0100.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0100.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0100.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0100.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.657] SetEvent (hEvent=0xb8) returned 1 [0101.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.934] SetEvent (hEvent=0xb8) returned 1 [0101.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0101.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.098] SetEvent (hEvent=0xb8) returned 1 [0102.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.446] SetEvent (hEvent=0xb8) returned 1 [0102.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.584] SetEvent (hEvent=0xb8) returned 1 [0102.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.938] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0102.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0103.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0103.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0103.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0103.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0103.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0103.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0103.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0103.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0103.938] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0104.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0105.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0105.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0105.193] timeEndPeriod (uPeriod=0x1) returned 0x0 [0105.193] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0105.194] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0105.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0105.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0105.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0105.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0105.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0105.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0105.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0105.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0106.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0106.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0106.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0106.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0106.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0106.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0106.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0106.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0106.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0106.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0106.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0106.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0106.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0107.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0107.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0107.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0107.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0107.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0107.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0107.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0107.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0107.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0107.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0107.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0107.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0107.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0108.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0108.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0108.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0108.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0108.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0108.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0108.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0108.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0108.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0108.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0108.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0108.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0109.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0109.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0109.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0109.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0109.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0109.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0109.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0109.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0109.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0109.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0109.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0109.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0110.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0110.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0110.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0110.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0110.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0110.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0110.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0110.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0110.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0110.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0110.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0111.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0112.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0112.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0112.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0112.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0112.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0112.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0112.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0112.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0112.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0113.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0113.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0113.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0113.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0113.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0113.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0113.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0113.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0113.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0113.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0113.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0113.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0114.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0114.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0114.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0114.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0114.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0114.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0114.848] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0114.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0115.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0115.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0115.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0115.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0115.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0115.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0115.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0115.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0115.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0115.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0116.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0116.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0116.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0116.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0116.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0116.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0116.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0116.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0116.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0117.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0117.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0117.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0117.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0117.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0117.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0117.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0117.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0117.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0118.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0118.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0118.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0118.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0118.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0118.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0118.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0118.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0118.681] SetEvent (hEvent=0x7c) returned 1 [0118.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0118.682] timeEndPeriod (uPeriod=0x1) returned 0x0 [0118.682] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0119.119] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0119.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0119.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0119.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0119.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0119.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0119.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0119.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0119.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0119.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0119.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0119.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0120.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0120.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0120.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0120.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0120.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0120.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0120.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0120.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0120.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0120.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0120.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0120.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0120.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0121.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0121.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0121.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0121.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0121.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0121.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0121.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0121.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0121.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0122.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0122.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0122.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0122.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0122.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0122.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0122.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0122.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0122.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0122.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0122.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0122.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0122.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.607] SetEvent (hEvent=0x7c) returned 1 [0123.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.712] SetEvent (hEvent=0x7c) returned 1 [0123.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.933] SetEvent (hEvent=0x7c) returned 1 [0123.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0123.990] timeEndPeriod (uPeriod=0x1) returned 0x0 [0123.990] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0124.360] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0124.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.508] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.524] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.526] SetEvent (hEvent=0x7c) returned 1 [0124.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.527] timeEndPeriod (uPeriod=0x1) returned 0x0 [0124.527] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0124.534] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0124.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.570] SetEvent (hEvent=0x7c) returned 1 [0124.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.571] timeEndPeriod (uPeriod=0x1) returned 0x0 [0124.571] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0124.573] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0124.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.848] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.943] SetEvent (hEvent=0xb8) returned 1 [0124.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.998] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0124.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.005] SetEvent (hEvent=0xb8) returned 1 [0125.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.008] timeEndPeriod (uPeriod=0x1) returned 0x0 [0125.008] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0125.009] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0125.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.018] SetEvent (hEvent=0xb8) returned 1 [0125.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.095] SetEvent (hEvent=0xb8) returned 1 [0125.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.096] timeEndPeriod (uPeriod=0x1) returned 0x0 [0125.096] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0125.114] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0125.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.160] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.248] SetEvent (hEvent=0xb8) returned 1 [0125.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.249] timeEndPeriod (uPeriod=0x1) returned 0x0 [0125.249] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0125.253] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0125.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.304] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x204fee0) returned 0x102 [0125.358] SetEvent (hEvent=0x7c) returned 1 [0125.359] timeEndPeriod (uPeriod=0x1) returned 0x0 [0125.359] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0125.365] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0125.419] SetEvent (hEvent=0x7c) returned 1 [0125.420] timeEndPeriod (uPeriod=0x1) returned 0x0 [0125.420] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0125.423] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0125.464] SetEvent (hEvent=0x7c) returned 1 [0125.465] timeEndPeriod (uPeriod=0x1) returned 0x0 [0125.465] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0125.502] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0125.530] SetEvent (hEvent=0x7c) returned 1 [0125.531] timeEndPeriod (uPeriod=0x1) returned 0x0 [0125.531] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0125.540] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0125.594] SetEvent (hEvent=0xa0) returned 1 [0125.595] timeEndPeriod (uPeriod=0x1) returned 0x0 [0125.595] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0125.612] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0125.614] SetEvent (hEvent=0xa0) returned 1 [0125.725] SetEvent (hEvent=0xb8) returned 1 [0125.726] timeEndPeriod (uPeriod=0x1) returned 0x0 [0125.726] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0125.748] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0125.891] SetEvent (hEvent=0xb8) returned 1 [0125.892] timeEndPeriod (uPeriod=0x1) returned 0x0 [0125.892] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0125.894] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0126.426] timeEndPeriod (uPeriod=0x1) returned 0x0 [0126.426] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0126.431] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0126.459] timeEndPeriod (uPeriod=0x1) returned 0x0 [0126.459] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0126.466] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0127.702] timeEndPeriod (uPeriod=0x1) returned 0x0 [0127.702] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0127.703] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0131.006] timeEndPeriod (uPeriod=0x1) returned 0x0 [0131.006] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0131.019] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0131.596] timeEndPeriod (uPeriod=0x1) returned 0x0 [0131.596] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0131.597] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0131.705] timeEndPeriod (uPeriod=0x1) returned 0x0 [0131.705] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0131.706] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0132.993] timeEndPeriod (uPeriod=0x1) returned 0x0 [0132.993] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0133.089] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0135.283] timeEndPeriod (uPeriod=0x1) returned 0x0 [0135.283] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0135.349] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0135.783] timeEndPeriod (uPeriod=0x1) returned 0x0 [0135.783] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0135.784] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0135.810] timeEndPeriod (uPeriod=0x1) returned 0x0 [0135.810] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0135.812] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0135.847] timeEndPeriod (uPeriod=0x1) returned 0x0 [0135.847] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0135.892] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0136.131] timeEndPeriod (uPeriod=0x1) returned 0x0 [0136.131] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0136.145] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0137.299] timeEndPeriod (uPeriod=0x1) returned 0x0 [0137.299] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0137.321] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0137.338] timeEndPeriod (uPeriod=0x1) returned 0x0 [0137.338] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0137.346] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0137.366] timeEndPeriod (uPeriod=0x1) returned 0x0 [0137.366] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0137.367] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0137.438] timeEndPeriod (uPeriod=0x1) returned 0x0 [0137.438] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0137.451] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0137.598] timeEndPeriod (uPeriod=0x1) returned 0x0 [0137.598] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0137.678] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0137.695] timeEndPeriod (uPeriod=0x1) returned 0x0 [0137.695] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0137.697] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0137.725] timeEndPeriod (uPeriod=0x1) returned 0x0 [0137.725] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0137.727] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0137.766] timeEndPeriod (uPeriod=0x1) returned 0x0 [0137.766] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0137.776] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0137.804] timeEndPeriod (uPeriod=0x1) returned 0x0 [0137.804] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0137.806] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0137.847] timeEndPeriod (uPeriod=0x1) returned 0x0 [0137.847] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0137.850] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0137.911] timeEndPeriod (uPeriod=0x1) returned 0x0 [0137.911] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0137.913] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0137.929] timeEndPeriod (uPeriod=0x1) returned 0x0 [0137.929] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0137.931] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0137.951] timeEndPeriod (uPeriod=0x1) returned 0x0 [0137.951] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0137.953] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0137.998] timeEndPeriod (uPeriod=0x1) returned 0x0 [0137.998] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.014] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.036] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.036] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.049] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.079] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.079] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.100] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.133] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.133] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.149] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.189] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.189] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.204] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.223] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.223] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.226] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.255] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.255] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.259] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.291] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.291] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.293] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.335] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.335] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.338] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.353] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.353] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.354] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.383] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.383] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.385] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.541] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.541] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.543] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.609] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.609] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.612] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.647] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.647] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.649] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.758] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.758] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.759] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.781] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.781] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.783] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.815] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.815] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.818] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.833] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.833] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.834] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.865] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.865] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.867] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.900] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.900] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.902] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0138.922] timeEndPeriod (uPeriod=0x1) returned 0x0 [0138.922] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0138.929] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0139.029] timeEndPeriod (uPeriod=0x1) returned 0x0 [0139.029] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0139.193] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0139.291] timeEndPeriod (uPeriod=0x1) returned 0x0 [0139.291] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0139.318] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0139.354] timeEndPeriod (uPeriod=0x1) returned 0x0 [0139.354] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0139.366] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0139.401] timeEndPeriod (uPeriod=0x1) returned 0x0 [0139.401] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0139.446] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0139.452] timeEndPeriod (uPeriod=0x1) returned 0x0 [0139.452] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0139.460] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0139.466] timeEndPeriod (uPeriod=0x1) returned 0x0 [0139.466] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0139.470] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0139.720] timeEndPeriod (uPeriod=0x1) returned 0x0 [0139.720] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0139.724] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0139.737] timeEndPeriod (uPeriod=0x1) returned 0x0 [0139.738] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0139.740] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0139.754] timeEndPeriod (uPeriod=0x1) returned 0x0 [0139.754] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0139.757] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0139.772] timeEndPeriod (uPeriod=0x1) returned 0x0 [0139.772] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0139.773] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0139.888] timeEndPeriod (uPeriod=0x1) returned 0x0 [0139.888] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0139.891] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0140.004] timeEndPeriod (uPeriod=0x1) returned 0x0 [0140.004] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0140.006] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0140.084] timeEndPeriod (uPeriod=0x1) returned 0x0 [0140.084] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0140.189] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0140.258] timeEndPeriod (uPeriod=0x1) returned 0x0 [0140.258] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0140.274] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0140.292] timeEndPeriod (uPeriod=0x1) returned 0x0 [0140.292] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0140.296] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0140.342] timeEndPeriod (uPeriod=0x1) returned 0x0 [0140.343] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0140.350] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0140.397] timeEndPeriod (uPeriod=0x1) returned 0x0 [0140.397] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0140.399] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0140.431] timeEndPeriod (uPeriod=0x1) returned 0x0 [0140.431] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0140.433] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0140.857] timeEndPeriod (uPeriod=0x1) returned 0x0 [0140.857] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0140.922] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0141.034] timeEndPeriod (uPeriod=0x1) returned 0x0 [0141.034] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0141.102] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0141.784] SetEvent (hEvent=0xa8) returned 1 [0141.785] timeEndPeriod (uPeriod=0x1) returned 0x0 [0141.785] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0141.799] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0142.848] SetEvent (hEvent=0xa0) returned 1 [0142.849] timeEndPeriod (uPeriod=0x1) returned 0x0 [0142.849] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0142.895] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0143.268] timeEndPeriod (uPeriod=0x1) returned 0x0 [0143.268] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0143.283] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0143.426] timeEndPeriod (uPeriod=0x1) returned 0x0 [0143.426] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0143.521] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0143.713] timeEndPeriod (uPeriod=0x1) returned 0x0 [0143.713] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0143.812] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0143.841] timeEndPeriod (uPeriod=0x1) returned 0x0 [0143.841] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0143.849] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0143.885] timeEndPeriod (uPeriod=0x1) returned 0x0 [0143.885] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0143.892] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0144.055] timeEndPeriod (uPeriod=0x1) returned 0x0 [0144.055] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0144.056] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0144.058] timeEndPeriod (uPeriod=0x1) returned 0x0 [0144.058] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0144.153] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0145.684] timeEndPeriod (uPeriod=0x1) returned 0x0 [0145.684] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0145.686] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0145.800] timeEndPeriod (uPeriod=0x1) returned 0x0 [0145.801] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0145.812] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0145.874] timeEndPeriod (uPeriod=0x1) returned 0x0 [0145.874] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0145.887] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0145.977] timeEndPeriod (uPeriod=0x1) returned 0x0 [0145.977] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0145.993] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0146.125] timeEndPeriod (uPeriod=0x1) returned 0x0 [0146.125] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0146.126] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0146.144] timeEndPeriod (uPeriod=0x1) returned 0x0 [0146.144] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0146.146] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0146.164] timeEndPeriod (uPeriod=0x1) returned 0x0 [0146.164] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0146.165] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0146.182] timeEndPeriod (uPeriod=0x1) returned 0x0 [0146.182] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0146.431] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0146.461] timeEndPeriod (uPeriod=0x1) returned 0x0 [0146.462] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0146.468] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0146.496] timeEndPeriod (uPeriod=0x1) returned 0x0 [0146.496] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0146.513] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0146.544] timeEndPeriod (uPeriod=0x1) returned 0x0 [0146.544] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0146.552] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0146.583] timeEndPeriod (uPeriod=0x1) returned 0x0 [0146.583] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0146.590] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0146.620] timeEndPeriod (uPeriod=0x1) returned 0x0 [0146.620] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0146.625] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0146.684] timeEndPeriod (uPeriod=0x1) returned 0x0 [0146.684] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0146.691] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0149.399] timeEndPeriod (uPeriod=0x1) returned 0x0 [0149.399] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0149.400] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0151.348] SetEvent (hEvent=0xb8) returned 1 [0151.371] SetEvent (hEvent=0x6c) returned 1 [0151.427] timeEndPeriod (uPeriod=0x1) returned 0x0 [0151.427] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x0 [0151.637] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0151.669] SetEvent (hEvent=0x6c) returned 1 [0151.737] SetEvent (hEvent=0x6c) returned 1 [0151.769] timeEndPeriod (uPeriod=0x1) returned 0x0 [0151.769] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) returned 0x102 [0212.425] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0212.442] timeEndPeriod (uPeriod=0x1) returned 0x0 [0212.442] WaitForSingleObject (hHandle=0xac, dwMilliseconds=0xea60) Thread: id = 3 os_tid = 0x9a4 [0030.607] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x123aff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x123aff38*=0x78) returned 1 [0030.607] VirtualQuery (in: lpAddress=0x123aff48, lpBuffer=0x123aff48, dwLength=0x1c | out: lpBuffer=0x123aff48*(BaseAddress=0x123af000, AllocationBase=0x122b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0030.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44c000, lpParameter=0x12434000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c [0030.609] CloseHandle (hObject=0x7c) returned 1 [0030.609] SetEvent (hEvent=0x6c) returned 1 [0030.610] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x7c [0030.610] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0030.990] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0035.284] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0035.368] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0035.400] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0035.432] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0035.465] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0035.534] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0035.566] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0035.605] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0036.821] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0037.670] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0037.707] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0040.053] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0042.127] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0043.225] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0043.262] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0044.023] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0044.052] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0044.053] SetEvent (hEvent=0xa8) returned 1 [0044.053] SetEvent (hEvent=0x6c) returned 1 [0044.053] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0044.054] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0044.055] SetEvent (hEvent=0xa8) returned 1 [0044.055] SetEvent (hEvent=0x6c) returned 1 [0044.055] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0044.152] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0059.305] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0059.377] SetEvent (hEvent=0xa0) returned 1 [0059.377] CloseHandle (hObject=0xdc) returned 1 [0059.377] CloseHandle (hObject=0xbc) returned 1 [0059.377] CloseHandle (hObject=0xc0) returned 1 [0059.377] CloseHandle (hObject=0x98) returned 1 [0059.377] SwitchToThread () returned 1 [0059.378] SetEvent (hEvent=0xa0) returned 1 [0059.378] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0059.378] SetEvent (hEvent=0xa0) returned 1 [0059.378] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0059.379] SetEvent (hEvent=0xa0) returned 1 [0059.379] SwitchToThread () returned 1 [0059.474] SetEvent (hEvent=0x6c) returned 1 [0059.474] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0060.691] SetEvent (hEvent=0x6c) returned 1 [0060.691] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0060.836] SetEvent (hEvent=0x6c) returned 1 [0060.836] SwitchToThread () returned 1 [0060.846] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0061.128] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0061.265] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0061.336] SetEvent (hEvent=0x6c) returned 1 [0061.336] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0061.485] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0061.485] SetEvent (hEvent=0x6c) returned 1 [0061.485] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0061.496] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0061.496] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0061.518] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0061.518] SetEvent (hEvent=0xac) returned 1 [0061.519] SetEvent (hEvent=0x6c) returned 1 [0061.519] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0061.525] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0061.525] SetEvent (hEvent=0x6c) returned 1 [0061.525] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0061.539] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0061.547] SetEvent (hEvent=0xac) returned 1 [0061.547] SetEvent (hEvent=0x6c) returned 1 [0061.592] GetFileType (hFile=0xbc) returned 0x1 [0061.592] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0061.592] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0061.699] GetFileType (hFile=0xbc) returned 0x1 [0061.699] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0061.699] GetFileType (hFile=0xbc) returned 0x1 [0061.699] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0061.699] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0061.805] GetFileType (hFile=0xbc) returned 0x1 [0061.806] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0061.806] GetFileType (hFile=0xbc) returned 0x1 [0061.806] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0061.806] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0061.899] GetFileType (hFile=0xbc) returned 0x1 [0061.899] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0061.899] GetFileType (hFile=0xbc) returned 0x1 [0061.899] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0061.899] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0061.999] GetFileType (hFile=0xbc) returned 0x1 [0061.999] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0061.999] GetFileType (hFile=0xbc) returned 0x1 [0061.999] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0061.999] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0062.106] GetFileType (hFile=0xbc) returned 0x1 [0062.106] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0062.106] GetFileType (hFile=0xbc) returned 0x1 [0062.107] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0062.107] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0062.250] GetFileType (hFile=0xbc) returned 0x1 [0062.250] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0062.250] GetFileType (hFile=0xbc) returned 0x1 [0062.250] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0062.250] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0062.377] GetFileType (hFile=0xbc) returned 0x1 [0062.377] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0062.377] GetFileType (hFile=0xbc) returned 0x1 [0062.377] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0062.377] WriteFile (in: hFile=0xbc, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0062.547] GetFileType (hFile=0xbc) returned 0x1 [0062.547] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0062.547] ReadFile (in: hFile=0xbc, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429abc*=0x502aea, lpOverlapped=0x0) returned 1 [0062.619] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0062.620] SetEvent (hEvent=0xac) returned 1 [0062.620] SetEvent (hEvent=0xa0) returned 1 [0062.671] GetFileType (hFile=0xbc) returned 0x1 [0062.671] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0062.671] WriteFile (in: hFile=0xbc, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x502aea, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429aa0*=0x502aea, lpOverlapped=0x12429aac) returned 1 [0062.738] GetFileType (hFile=0xbc) returned 0x1 [0062.738] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xd02aea, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0062.738] ReadFile (in: hFile=0xbc, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0062.738] CloseHandle (hObject=0xbc) returned 1 [0063.072] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0063.072] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0063.089] WriteFile (in: hFile=0xbc, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0063.098] CloseHandle (hObject=0xbc) returned 1 [0063.392] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x6f, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x12429774*=0x6f) returned 1 [0063.401] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200)) returned 1 [0063.401] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1 [0063.401] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0063.401] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0063.401] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0063.402] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0063.402] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0063.402] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0063.402] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0063.403] CloseHandle (hObject=0xbc) returned 1 [0063.403] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0063.403] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0063.403] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0063.404] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0063.412] WriteFile (in: hFile=0xbc, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0063.591] SetEvent (hEvent=0xac) returned 1 [0063.591] CloseHandle (hObject=0xbc) returned 1 [0063.591] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0063.591] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0063.592] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0063.592] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd8611540, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd8611540, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0063.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd8611540, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd8611540, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xd8611540, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xd8611540, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd87d76e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0063.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0063.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0063.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0063.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0063.592] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0063.593] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0063.593] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0063.593] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0063.593] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0063.593] ReadFile (in: hFile=0xbc, lpBuffer=0x127bc000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127bc000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0063.599] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0063.600] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0063.601] ReadFile (in: hFile=0xe4, lpBuffer=0x127bc100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127bc100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0063.602] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0063.604] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0063.604] ReadFile (in: hFile=0x98, lpBuffer=0x127bc300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127bc300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0063.605] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54)) returned 1 [0063.605] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0063.606] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0063.606] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e340 | out: pbBuffer=0x1240e340) returned 1 [0063.607] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127bc402 | out: pbBuffer=0x127bc402) returned 1 [0063.608] ReadFile (in: hFile=0xc0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429abc*=0x800000, lpOverlapped=0x0) returned 1 [0063.796] SetEvent (hEvent=0xb8) returned 1 [0063.796] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0063.796] SetEvent (hEvent=0xb8) returned 1 [0063.797] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0063.845] GetFileType (hFile=0xc0) returned 0x1 [0063.845] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0063.845] WriteFile (in: hFile=0xc0, lpBuffer=0x13608000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13608000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0063.944] GetFileType (hFile=0xc0) returned 0x1 [0063.944] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0063.944] GetFileType (hFile=0xc0) returned 0x1 [0063.944] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0063.944] WriteFile (in: hFile=0xc0, lpBuffer=0x13608000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13608000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0064.041] GetFileType (hFile=0xc0) returned 0x1 [0064.041] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.041] GetFileType (hFile=0xc0) returned 0x1 [0064.041] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.041] WriteFile (in: hFile=0xc0, lpBuffer=0x13608000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13608000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0064.137] GetFileType (hFile=0xc0) returned 0x1 [0064.137] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.137] GetFileType (hFile=0xc0) returned 0x1 [0064.137] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.137] WriteFile (in: hFile=0xc0, lpBuffer=0x13608000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13608000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0064.234] GetFileType (hFile=0xc0) returned 0x1 [0064.235] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.235] GetFileType (hFile=0xc0) returned 0x1 [0064.235] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.235] WriteFile (in: hFile=0xc0, lpBuffer=0x13608000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13608000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0064.337] GetFileType (hFile=0xc0) returned 0x1 [0064.338] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.338] GetFileType (hFile=0xc0) returned 0x1 [0064.338] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.338] WriteFile (in: hFile=0xc0, lpBuffer=0x13608000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13608000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0064.433] GetFileType (hFile=0xc0) returned 0x1 [0064.433] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.433] GetFileType (hFile=0xc0) returned 0x1 [0064.433] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.433] WriteFile (in: hFile=0xc0, lpBuffer=0x13608000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13608000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0064.528] GetFileType (hFile=0xc0) returned 0x1 [0064.528] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.528] GetFileType (hFile=0xc0) returned 0x1 [0064.528] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.528] WriteFile (in: hFile=0xc0, lpBuffer=0x13608000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13608000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0064.624] GetFileType (hFile=0xc0) returned 0x1 [0064.624] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.624] ReadFile (in: hFile=0xc0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429abc*=0x800000, lpOverlapped=0x0) returned 1 [0064.747] SetEvent (hEvent=0xb8) returned 1 [0064.747] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0064.748] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0064.748] SetEvent (hEvent=0xb8) returned 1 [0064.748] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0064.797] GetFileType (hFile=0xc0) returned 0x1 [0064.797] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.797] WriteFile (in: hFile=0xc0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0064.894] GetFileType (hFile=0xc0) returned 0x1 [0064.894] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.894] ReadFile (in: hFile=0xc0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429abc*=0x416b54, lpOverlapped=0x0) returned 1 [0064.948] SetEvent (hEvent=0x6c) returned 1 [0064.949] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0064.949] SetEvent (hEvent=0x6c) returned 1 [0064.949] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0064.974] GetFileType (hFile=0xc0) returned 0x1 [0064.974] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0064.975] WriteFile (in: hFile=0xc0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x416b54, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429aa0*=0x416b54, lpOverlapped=0x12429aac) returned 1 [0065.031] GetFileType (hFile=0xc0) returned 0x1 [0065.031] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x1416b54, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0065.031] ReadFile (in: hFile=0xc0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0065.031] CloseHandle (hObject=0xc0) returned 1 [0065.480] SetEvent (hEvent=0xac) returned 1 [0065.480] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0065.481] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0065.538] WriteFile (in: hFile=0xc0, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0065.538] CloseHandle (hObject=0xc0) returned 1 [0065.971] SetEvent (hEvent=0xac) returned 1 [0065.971] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x6f, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x12429774*=0x6f) returned 1 [0065.978] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400)) returned 1 [0065.978] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2)) returned 1 [0065.978] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0065.978] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0065.978] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0065.978] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0065.978] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0065.978] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0065.978] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0065.979] CloseHandle (hObject=0xc0) returned 1 [0065.979] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0065.980] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0065.980] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0065.980] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0065.980] WriteFile (in: hFile=0xc0, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0065.981] CloseHandle (hObject=0xc0) returned 1 [0065.981] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0065.982] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0065.982] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0065.982] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9d853c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd9d853c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0065.982] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9d853c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd9d853c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.982] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xd9d853c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xd9d853c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd9d853c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0065.982] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0065.982] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0065.982] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0065.982] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0065.982] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.982] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0065.982] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0065.982] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0065.982] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0065.983] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0065.983] ReadFile (in: hFile=0xc0, lpBuffer=0x127bc100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc100*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0065.992] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0065.993] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0065.993] ReadFile (in: hFile=0xbc, lpBuffer=0x127bc200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0065.995] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0065.995] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0065.995] ReadFile (in: hFile=0xe4, lpBuffer=0x127bc300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc300*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0065.997] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0065.998] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0065.998] ReadFile (in: hFile=0x98, lpBuffer=0x127bc500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc500*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0065.999] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b)) returned 1 [0065.999] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0066.000] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0066.000] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e380 | out: pbBuffer=0x1240e380) returned 1 [0066.001] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410114 | out: pbBuffer=0x12410114) returned 1 [0066.001] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127bc602 | out: pbBuffer=0x127bc602) returned 1 [0066.001] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127bc639 | out: pbBuffer=0x127bc639) returned 1 [0066.002] SetEvent (hEvent=0xb8) returned 1 [0066.002] ReadFile (in: hFile=0xdc, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x2cb13b, lpOverlapped=0x0) returned 1 [0066.043] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0066.044] SetEvent (hEvent=0xb8) returned 1 [0066.044] SetEvent (hEvent=0x6c) returned 1 [0066.044] CloseHandle (hObject=0x98) returned 1 [0066.044] CloseHandle (hObject=0xe4) returned 1 [0066.044] CloseHandle (hObject=0xbc) returned 1 [0066.044] CloseHandle (hObject=0xc0) returned 1 [0066.066] GetFileType (hFile=0xdc) returned 0x1 [0066.066] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0066.066] WriteFile (in: hFile=0xdc, lpBuffer=0x13818000*, nNumberOfBytesToWrite=0x2cb13b, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13818000*, lpNumberOfBytesWritten=0x12429b48*=0x2cb13b, lpOverlapped=0x12429b54) returned 1 [0066.096] GetFileType (hFile=0xdc) returned 0x1 [0066.096] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x2cb13b, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0066.096] ReadFile (in: hFile=0xdc, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0066.096] CloseHandle (hObject=0xdc) returned 1 [0066.144] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0066.144] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0066.145] WriteFile (in: hFile=0xdc, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0066.145] CloseHandle (hObject=0xdc) returned 1 [0066.187] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124de000*, nNumberOfCharsToWrite=0x69, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124de000*, lpNumberOfCharsWritten=0x1242981c*=0x69) returned 1 [0066.188] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600)) returned 1 [0066.188] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567)) returned 1 [0066.188] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1 [0066.188] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0066.188] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0066.188] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0066.188] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0066.188] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0066.188] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0043-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0066.189] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0066.189] CloseHandle (hObject=0xdc) returned 1 [0066.189] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0066.190] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0066.190] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0066.190] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0066.191] WriteFile (in: hFile=0xdc, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0066.192] CloseHandle (hObject=0xdc) returned 1 [0066.192] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0066.192] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0066.192] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0066.192] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f4bd30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd9f4bd30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0066.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9f4bd30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd9f4bd30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xd9f4bd30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xd9f4bd30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd9f50b50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0066.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0066.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0066.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0066.193] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0066.193] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.193] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0066.193] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0066.193] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0066.193] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0066.193] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0066.193] ReadFile (in: hFile=0xdc, lpBuffer=0x127bc700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0066.195] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0066.196] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0066.197] ReadFile (in: hFile=0xc0, lpBuffer=0x127bc800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0066.198] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0066.198] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0066.199] ReadFile (in: hFile=0xbc, lpBuffer=0x127bc900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0066.201] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0066.201] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0066.201] ReadFile (in: hFile=0xe4, lpBuffer=0x127bca00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bca00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0066.205] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204)) returned 1 [0066.205] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0044-0409-1000-0000000FF1CE}-C/InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0066.205] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0066.205] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e360 | out: pbBuffer=0x1240e360) returned 1 [0066.206] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410124 | out: pbBuffer=0x12410124) returned 1 [0066.206] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127bcb02 | out: pbBuffer=0x127bcb02) returned 1 [0066.206] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127bcb1d | out: pbBuffer=0x127bcb1d) returned 1 [0066.207] SetEvent (hEvent=0x6c) returned 1 [0066.207] ReadFile (in: hFile=0x98, lpBuffer=0x13ae4000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13ae4000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0066.391] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0066.394] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0066.586] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0067.432] SetEvent (hEvent=0x6c) returned 1 [0067.432] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0067.485] SetEvent (hEvent=0x6c) returned 1 [0067.485] SwitchToThread () returned 1 [0067.591] SetEvent (hEvent=0xb8) returned 1 [0067.591] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0067.893] SetEvent (hEvent=0xb8) returned 1 [0067.893] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0067.925] SetEvent (hEvent=0xb8) returned 1 [0067.925] SwitchToThread () returned 1 [0067.926] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0067.970] SetEvent (hEvent=0xb8) returned 1 [0067.971] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0067.972] SetEvent (hEvent=0xb8) returned 1 [0067.972] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0068.010] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0068.010] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0068.155] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0068.270] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0069.161] SetEvent (hEvent=0x6c) returned 1 [0069.161] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0069.161] SetEvent (hEvent=0x6c) returned 1 [0069.161] SwitchToThread () returned 1 [0069.223] SetEvent (hEvent=0xb8) returned 1 [0069.223] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0069.615] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0069.824] SetEvent (hEvent=0x6c) returned 1 [0069.824] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0069.833] SetEvent (hEvent=0x6c) returned 1 [0069.833] SwitchToThread () returned 1 [0069.911] SetEvent (hEvent=0xb8) returned 1 [0069.911] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0070.287] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0070.435] SetEvent (hEvent=0x6c) returned 1 [0070.435] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0070.444] SetEvent (hEvent=0x6c) returned 1 [0070.444] SwitchToThread () returned 1 [0070.520] SetEvent (hEvent=0xb8) returned 1 [0070.525] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0071.157] SetEvent (hEvent=0xb8) returned 1 [0071.157] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0071.158] SetEvent (hEvent=0xb8) returned 1 [0071.158] SetEvent (hEvent=0xa0) returned 1 [0071.158] CloseHandle (hObject=0xc0) returned 1 [0071.158] CloseHandle (hObject=0xdc) returned 1 [0071.757] CloseHandle (hObject=0x98) returned 1 [0071.757] CloseHandle (hObject=0xe4) returned 1 [0071.757] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0071.975] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0072.756] SetEvent (hEvent=0x6c) returned 1 [0072.756] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0072.756] SetEvent (hEvent=0x6c) returned 1 [0072.757] SwitchToThread () returned 1 [0072.807] SetEvent (hEvent=0xa0) returned 1 [0072.807] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0073.101] SetEvent (hEvent=0xa0) returned 1 [0073.101] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0073.107] SetEvent (hEvent=0xa0) returned 1 [0073.107] SetEvent (hEvent=0x6c) returned 1 [0073.107] CloseHandle (hObject=0xdc) returned 1 [0073.108] CloseHandle (hObject=0x98) returned 1 [0073.108] CloseHandle (hObject=0xe4) returned 1 [0073.108] CloseHandle (hObject=0xbc) returned 1 [0073.109] SwitchToThread () returned 1 [0073.152] SetEvent (hEvent=0xa0) returned 1 [0073.152] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0073.154] SetEvent (hEvent=0xa0) returned 1 [0073.154] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0073.155] SetEvent (hEvent=0xa0) returned 1 [0073.155] SwitchToThread () returned 1 [0073.252] SetEvent (hEvent=0x6c) returned 1 [0073.252] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0073.765] SetEvent (hEvent=0x6c) returned 1 [0073.765] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0073.765] SetEvent (hEvent=0x6c) returned 1 [0073.765] SetEvent (hEvent=0xa0) returned 1 [0073.765] CloseHandle (hObject=0x98) returned 1 [0073.765] CloseHandle (hObject=0xe4) returned 1 [0073.766] CloseHandle (hObject=0xbc) returned 1 [0073.766] CloseHandle (hObject=0xc0) returned 1 [0073.767] SwitchToThread () returned 1 [0073.767] SetEvent (hEvent=0x6c) returned 1 [0073.767] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0073.832] SetEvent (hEvent=0x6c) returned 1 [0073.832] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0073.832] SetEvent (hEvent=0x6c) returned 1 [0073.832] SwitchToThread () returned 1 [0073.833] SetEvent (hEvent=0xa0) returned 1 [0073.833] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0074.084] SetEvent (hEvent=0xa0) returned 1 [0074.084] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0074.084] SetEvent (hEvent=0xa0) returned 1 [0074.084] SetEvent (hEvent=0x6c) returned 1 [0074.084] CloseHandle (hObject=0xfc) returned 1 [0074.086] CloseHandle (hObject=0xf8) returned 1 [0074.086] CloseHandle (hObject=0xf4) returned 1 [0074.086] CloseHandle (hObject=0xf0) returned 1 [0074.086] CloseHandle (hObject=0xec) returned 1 [0074.086] CloseHandle (hObject=0xe8) returned 1 [0074.086] CloseHandle (hObject=0xcc) returned 1 [0074.086] CloseHandle (hObject=0xd8) returned 1 [0074.086] CloseHandle (hObject=0xe0) returned 1 [0074.086] CloseHandle (hObject=0xc8) returned 1 [0074.086] CloseHandle (hObject=0xd0) returned 1 [0074.086] CloseHandle (hObject=0x98) returned 1 [0074.086] CloseHandle (hObject=0xe4) returned 1 [0074.086] CloseHandle (hObject=0xbc) returned 1 [0074.086] CloseHandle (hObject=0xc0) returned 1 [0074.086] CloseHandle (hObject=0xdc) returned 1 [0074.087] SwitchToThread () returned 1 [0074.087] SetEvent (hEvent=0xa0) returned 1 [0074.087] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0074.088] SetEvent (hEvent=0xa0) returned 1 [0074.088] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0074.088] SetEvent (hEvent=0xa0) returned 1 [0074.088] SwitchToThread () returned 1 [0074.089] SetEvent (hEvent=0xa0) returned 1 [0074.089] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0074.185] SetEvent (hEvent=0x6c) returned 1 [0074.185] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0074.282] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0074.282] SetEvent (hEvent=0x6c) returned 1 [0074.282] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0074.379] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0074.379] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0075.065] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0075.066] SetEvent (hEvent=0x6c) returned 1 [0075.066] SetEvent (hEvent=0xb8) returned 1 [0075.066] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0075.074] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0075.082] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0075.322] SetEvent (hEvent=0xb8) returned 1 [0075.322] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0075.322] SetEvent (hEvent=0xb8) returned 1 [0075.322] SetEvent (hEvent=0xa0) returned 1 [0075.322] CloseHandle (hObject=0xc8) returned 1 [0075.323] CloseHandle (hObject=0xd0) returned 1 [0075.323] CloseHandle (hObject=0x98) returned 1 [0075.323] CloseHandle (hObject=0xe4) returned 1 [0075.323] CloseHandle (hObject=0xbc) returned 1 [0075.323] CloseHandle (hObject=0xc0) returned 1 [0075.323] CloseHandle (hObject=0xdc) returned 1 [0075.323] CloseHandle (hObject=0x100) returned 1 [0075.324] SwitchToThread () returned 1 [0075.325] SetEvent (hEvent=0xb8) returned 1 [0075.325] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0075.325] SetEvent (hEvent=0xb8) returned 1 [0075.325] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0075.326] SetEvent (hEvent=0xb8) returned 1 [0075.326] SwitchToThread () returned 1 [0075.422] SetEvent (hEvent=0xa0) returned 1 [0075.422] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0076.742] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0076.802] SetEvent (hEvent=0xb8) returned 1 [0076.806] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0076.814] SetEvent (hEvent=0xb8) returned 1 [0076.814] SwitchToThread () returned 1 [0076.854] SetEvent (hEvent=0xa0) returned 1 [0076.858] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0077.105] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0077.180] SetEvent (hEvent=0xa0) returned 1 [0077.180] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0077.181] SetEvent (hEvent=0xa0) returned 1 [0077.181] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0077.182] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0081.853] SetEvent (hEvent=0xb8) returned 1 [0081.853] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0081.861] SetEvent (hEvent=0xb8) returned 1 [0081.861] SetEvent (hEvent=0xa0) returned 1 [0081.862] VirtualAlloc (lpAddress=0x15400000, dwSize=0x800000, flAllocationType=0x1000, flProtect=0x4) returned 0x15400000 [0081.880] VirtualAlloc (lpAddress=0x2397000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x2397000 [0081.880] VirtualAlloc (lpAddress=0x23d7000, dwSize=0x41000, flAllocationType=0x1000, flProtect=0x4) returned 0x23d7000 [0081.881] VirtualFree (lpAddress=0x13c00000, dwSize=0x7b0000, dwFreeType=0x4000) returned 1 [0081.915] VirtualFree (lpAddress=0x13c00000, dwSize=0x800000, dwFreeType=0x4000) returned 1 [0081.922] SwitchToThread () returned 1 [0081.927] SetEvent (hEvent=0xb8) returned 1 [0081.927] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0082.040] SetEvent (hEvent=0xa0) returned 1 [0082.041] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0082.141] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0082.141] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0082.259] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0082.260] SetEvent (hEvent=0x6c) returned 1 [0082.260] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0082.270] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0082.270] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0082.273] SetEvent (hEvent=0xac) returned 1 [0082.273] SetEvent (hEvent=0x6c) returned 1 [0082.348] GetFileType (hFile=0xf0) returned 0x1 [0082.348] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0082.348] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0082.567] GetFileType (hFile=0xf0) returned 0x1 [0082.567] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x2800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0082.567] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0082.743] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0082.862] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0083.224] SetEvent (hEvent=0xa0) returned 1 [0083.224] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0083.288] SetEvent (hEvent=0xa0) returned 1 [0083.288] SwitchToThread () returned 1 [0083.314] SetEvent (hEvent=0xa0) returned 1 [0083.314] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0083.422] SetEvent (hEvent=0x6c) returned 1 [0083.422] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0083.584] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0083.584] SetEvent (hEvent=0x6c) returned 1 [0083.584] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0083.697] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0083.697] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0083.758] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0083.758] SetEvent (hEvent=0xac) returned 1 [0083.758] SetEvent (hEvent=0x6c) returned 1 [0083.803] GetFileType (hFile=0xf0) returned 0x1 [0083.803] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0083.803] WriteFile (in: hFile=0xf0, lpBuffer=0x15400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x15400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0083.953] GetFileType (hFile=0xf0) returned 0x1 [0083.953] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x4000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0083.953] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0084.154] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0084.392] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0084.713] SetEvent (hEvent=0xb8) returned 1 [0084.713] SetEvent (hEvent=0xa0) returned 1 [0084.713] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0085.911] SetEvent (hEvent=0xb8) returned 1 [0085.911] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0086.012] SetEvent (hEvent=0xb8) returned 1 [0086.012] SetEvent (hEvent=0x6c) returned 1 [0086.014] SwitchToThread () returned 1 [0086.071] SetEvent (hEvent=0xb8) returned 1 [0086.071] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0086.239] SetEvent (hEvent=0x6c) returned 1 [0086.240] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0086.417] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0086.417] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0086.445] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0086.445] SetEvent (hEvent=0xa0) returned 1 [0086.445] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0086.447] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0086.448] SetEvent (hEvent=0xac) returned 1 [0086.448] SetEvent (hEvent=0xa0) returned 1 [0086.492] GetFileType (hFile=0xf0) returned 0x1 [0086.492] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0086.492] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0086.587] GetFileType (hFile=0xf0) returned 0x1 [0086.587] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x7000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0086.587] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0086.733] SwitchToThread () returned 1 [0086.741] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0086.999] SetEvent (hEvent=0xb8) returned 1 [0086.999] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0087.040] SetEvent (hEvent=0xb8) returned 1 [0087.040] SwitchToThread () returned 1 [0087.041] SetEvent (hEvent=0xb8) returned 1 [0087.041] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0087.137] SetEvent (hEvent=0xa0) returned 1 [0087.137] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0087.331] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0087.331] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0087.360] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0087.360] SetEvent (hEvent=0x6c) returned 1 [0087.360] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0087.362] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0087.363] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0087.363] SetEvent (hEvent=0xac) returned 1 [0087.363] SetEvent (hEvent=0x6c) returned 1 [0087.408] GetFileType (hFile=0xf0) returned 0x1 [0087.408] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0087.408] WriteFile (in: hFile=0xf0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0087.502] GetFileType (hFile=0xf0) returned 0x1 [0087.502] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x8800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0087.502] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0087.596] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0087.599] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0087.931] SetEvent (hEvent=0xa0) returned 1 [0087.931] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0088.038] SetEvent (hEvent=0xa0) returned 1 [0088.038] SwitchToThread () returned 1 [0088.055] SetEvent (hEvent=0xa0) returned 1 [0088.055] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0088.156] SetEvent (hEvent=0x6c) returned 1 [0088.157] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0088.367] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0088.368] SetEvent (hEvent=0x6c) returned 1 [0088.368] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0088.455] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0088.455] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0088.504] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0088.504] SetEvent (hEvent=0xac) returned 1 [0088.504] SetEvent (hEvent=0x6c) returned 1 [0088.548] GetFileType (hFile=0xf0) returned 0x1 [0088.548] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0088.548] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0088.650] GetFileType (hFile=0xf0) returned 0x1 [0088.650] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0xa000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0088.650] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0088.778] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0088.909] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0089.125] SetEvent (hEvent=0xb8) returned 1 [0089.125] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0089.177] SetEvent (hEvent=0xb8) returned 1 [0089.177] SetEvent (hEvent=0x6c) returned 1 [0089.186] GetFileType (hFile=0xf0) returned 0x1 [0089.186] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0089.186] WriteFile (in: hFile=0xf0, lpBuffer=0x124f2000*, nNumberOfBytesToWrite=0x17cbdb, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124f2000*, lpNumberOfBytesWritten=0x12429b48*=0x17cbdb, lpOverlapped=0x12429b54) returned 1 [0089.201] GetFileType (hFile=0xf0) returned 0x1 [0089.201] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0xa97cbdb, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0089.201] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0089.201] CloseHandle (hObject=0xf0) returned 1 [0089.275] SetEvent (hEvent=0xac) returned 1 [0089.276] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0089.276] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0089.335] WriteFile (in: hFile=0xf0, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0089.335] CloseHandle (hObject=0xf0) returned 1 [0089.436] SetEvent (hEvent=0xac) returned 1 [0089.438] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124de000*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124de000*, lpNumberOfCharsWritten=0x1242981c*=0x68) returned 1 [0089.458] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31)) returned 1 [0089.458] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0089.458] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0089.485] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e220 | out: pbBuffer=0x1240e220) returned 1 [0089.485] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c4102 | out: pbBuffer=0x124c4102) returned 1 [0089.485] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c410f | out: pbBuffer=0x124c410f) returned 1 [0089.485] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c4120 | out: pbBuffer=0x124c4120) returned 1 [0089.487] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0089.721] SetEvent (hEvent=0x6c) returned 1 [0089.722] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0089.737] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0089.737] SetEvent (hEvent=0x6c) returned 1 [0089.737] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0089.763] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0089.810] GetFileType (hFile=0xf0) returned 0x1 [0089.810] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0089.810] WriteFile (in: hFile=0xf0, lpBuffer=0x15400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x15400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0089.964] GetFileType (hFile=0xf0) returned 0x1 [0089.964] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0089.964] GetFileType (hFile=0xf0) returned 0x1 [0089.964] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0089.964] WriteFile (in: hFile=0xf0, lpBuffer=0x15400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x15400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0090.118] GetFileType (hFile=0xf0) returned 0x1 [0090.118] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0090.118] GetFileType (hFile=0xf0) returned 0x1 [0090.118] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0090.118] WriteFile (in: hFile=0xf0, lpBuffer=0x15400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x15400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0090.253] GetFileType (hFile=0xf0) returned 0x1 [0090.254] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0090.254] GetFileType (hFile=0xf0) returned 0x1 [0090.254] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0090.254] WriteFile (in: hFile=0xf0, lpBuffer=0x15400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x15400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0090.457] GetFileType (hFile=0xf0) returned 0x1 [0090.457] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0090.457] GetFileType (hFile=0xf0) returned 0x1 [0090.457] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0090.457] WriteFile (in: hFile=0xf0, lpBuffer=0x15400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x15400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0090.611] GetFileType (hFile=0xf0) returned 0x1 [0090.611] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0090.611] GetFileType (hFile=0xf0) returned 0x1 [0090.611] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0090.611] WriteFile (in: hFile=0xf0, lpBuffer=0x15400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x15400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0090.732] GetFileType (hFile=0xf0) returned 0x1 [0090.732] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0090.732] GetFileType (hFile=0xf0) returned 0x1 [0090.732] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0090.732] WriteFile (in: hFile=0xf0, lpBuffer=0x15400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x15400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0090.846] GetFileType (hFile=0xf0) returned 0x1 [0090.846] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0090.846] GetFileType (hFile=0xf0) returned 0x1 [0090.846] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0090.846] WriteFile (in: hFile=0xf0, lpBuffer=0x15400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x15400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0090.959] GetFileType (hFile=0xf0) returned 0x1 [0090.959] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0090.960] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0091.119] SetEvent (hEvent=0xb8) returned 1 [0091.119] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0091.125] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0091.125] SetEvent (hEvent=0xb8) returned 1 [0091.125] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0091.126] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0091.180] GetFileType (hFile=0xf0) returned 0x1 [0091.180] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0091.180] WriteFile (in: hFile=0xf0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0091.280] GetFileType (hFile=0xf0) returned 0x1 [0091.280] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0091.280] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0091.443] SetEvent (hEvent=0x6c) returned 1 [0091.443] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0091.448] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0091.448] SetEvent (hEvent=0x6c) returned 1 [0091.448] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0091.460] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0091.508] GetFileType (hFile=0xf0) returned 0x1 [0091.508] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0091.508] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0091.610] GetFileType (hFile=0xf0) returned 0x1 [0091.610] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x1800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0091.610] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0091.773] SetEvent (hEvent=0xb8) returned 1 [0091.773] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0091.794] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0091.794] SetEvent (hEvent=0xb8) returned 1 [0091.794] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0091.849] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0091.896] GetFileType (hFile=0xf0) returned 0x1 [0091.896] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0091.896] WriteFile (in: hFile=0xf0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0092.044] GetFileType (hFile=0xf0) returned 0x1 [0092.044] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x2000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0092.044] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0092.239] SetEvent (hEvent=0x6c) returned 1 [0092.239] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0092.291] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0092.291] SetEvent (hEvent=0x6c) returned 1 [0092.291] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0092.343] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0092.450] GetFileType (hFile=0xf0) returned 0x1 [0092.450] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0092.450] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0092.555] GetFileType (hFile=0xf0) returned 0x1 [0092.555] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x2800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0092.555] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0092.649] SetEvent (hEvent=0xb8) returned 1 [0092.649] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0092.649] SetEvent (hEvent=0xb8) returned 1 [0092.649] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0092.698] GetFileType (hFile=0xf0) returned 0x1 [0092.698] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0092.698] WriteFile (in: hFile=0xf0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0092.854] GetFileType (hFile=0xf0) returned 0x1 [0092.854] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x3000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0092.854] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0093.001] SetEvent (hEvent=0x6c) returned 1 [0093.002] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0093.002] SetEvent (hEvent=0x6c) returned 1 [0093.002] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0093.050] GetFileType (hFile=0xf0) returned 0x1 [0093.050] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0093.050] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0093.147] GetFileType (hFile=0xf0) returned 0x1 [0093.147] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x3800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0093.147] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0093.304] SetEvent (hEvent=0xb8) returned 1 [0093.304] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0093.305] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0093.305] SetEvent (hEvent=0xb8) returned 1 [0093.305] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0093.353] GetFileType (hFile=0xf0) returned 0x1 [0093.353] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0093.353] WriteFile (in: hFile=0xf0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0093.457] GetFileType (hFile=0xf0) returned 0x1 [0093.457] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x4000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0093.457] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0093.604] SetEvent (hEvent=0x6c) returned 1 [0093.605] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0093.605] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0093.605] SetEvent (hEvent=0x6c) returned 1 [0093.605] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0093.652] GetFileType (hFile=0xf0) returned 0x1 [0093.653] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0093.653] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0093.749] GetFileType (hFile=0xf0) returned 0x1 [0093.749] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x4800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0093.750] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0093.924] SetEvent (hEvent=0xb8) returned 1 [0093.925] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0093.932] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0093.932] SetEvent (hEvent=0xb8) returned 1 [0093.932] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0093.947] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0093.995] GetFileType (hFile=0xf0) returned 0x1 [0093.995] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0093.995] WriteFile (in: hFile=0xf0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0094.102] GetFileType (hFile=0xf0) returned 0x1 [0094.102] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x5000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0094.102] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0094.245] SetEvent (hEvent=0x6c) returned 1 [0094.245] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0094.251] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0094.251] SetEvent (hEvent=0x6c) returned 1 [0094.251] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0094.257] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0094.307] GetFileType (hFile=0xf0) returned 0x1 [0094.307] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0094.307] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0094.402] GetFileType (hFile=0xf0) returned 0x1 [0094.402] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x5800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0094.403] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0094.613] SetEvent (hEvent=0xb8) returned 1 [0094.613] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0094.617] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0094.617] SetEvent (hEvent=0xb8) returned 1 [0094.617] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0094.619] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0094.668] GetFileType (hFile=0xf0) returned 0x1 [0094.668] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0094.668] WriteFile (in: hFile=0xf0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0094.771] GetFileType (hFile=0xf0) returned 0x1 [0094.771] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x6000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0094.771] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0094.920] SetEvent (hEvent=0x6c) returned 1 [0094.921] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0094.928] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0094.928] SetEvent (hEvent=0x6c) returned 1 [0094.928] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0094.989] GetFileType (hFile=0xf0) returned 0x1 [0094.989] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0094.989] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0095.089] GetFileType (hFile=0xf0) returned 0x1 [0095.090] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x6800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0095.090] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0095.250] SetEvent (hEvent=0xb8) returned 1 [0095.250] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0095.258] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0095.258] SetEvent (hEvent=0xb8) returned 1 [0095.258] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0095.264] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0095.312] GetFileType (hFile=0xf0) returned 0x1 [0095.312] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0095.312] WriteFile (in: hFile=0xf0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0095.419] GetFileType (hFile=0xf0) returned 0x1 [0095.419] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x7000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0095.419] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0095.581] SetEvent (hEvent=0x6c) returned 1 [0095.582] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0095.588] SetEvent (hEvent=0x6c) returned 1 [0095.588] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0095.595] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0095.650] GetFileType (hFile=0xf0) returned 0x1 [0095.650] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0095.650] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0095.783] GetFileType (hFile=0xf0) returned 0x1 [0095.784] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x7800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0095.784] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0095.904] SetEvent (hEvent=0xb8) returned 1 [0095.904] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0095.925] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0095.926] SetEvent (hEvent=0xb8) returned 1 [0095.926] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0095.988] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0096.105] GetFileType (hFile=0xf0) returned 0x1 [0096.105] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0096.105] WriteFile (in: hFile=0xf0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0096.259] GetFileType (hFile=0xf0) returned 0x1 [0096.259] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x8000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0096.259] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0096.543] SetEvent (hEvent=0x6c) returned 1 [0096.544] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0096.598] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0096.598] SetEvent (hEvent=0x6c) returned 1 [0096.598] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0096.653] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0096.759] GetFileType (hFile=0xf0) returned 0x1 [0096.759] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0096.759] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0096.889] GetFileType (hFile=0xf0) returned 0x1 [0096.889] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x8800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0096.889] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0097.037] SetEvent (hEvent=0xb8) returned 1 [0097.037] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0097.070] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0097.070] SetEvent (hEvent=0xb8) returned 1 [0097.070] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0097.125] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0097.225] GetFileType (hFile=0xf0) returned 0x1 [0097.225] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0097.225] WriteFile (in: hFile=0xf0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0097.350] GetFileType (hFile=0xf0) returned 0x1 [0097.350] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x9000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0097.350] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0097.567] SetEvent (hEvent=0x6c) returned 1 [0097.568] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0097.578] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0097.578] SetEvent (hEvent=0x6c) returned 1 [0097.578] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0097.581] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0097.629] GetFileType (hFile=0xf0) returned 0x1 [0097.629] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0097.629] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0097.770] GetFileType (hFile=0xf0) returned 0x1 [0097.770] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x9800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0097.770] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0097.860] SetEvent (hEvent=0xb8) returned 1 [0097.860] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0097.861] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0097.861] SetEvent (hEvent=0xb8) returned 1 [0097.861] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0097.920] GetFileType (hFile=0xf0) returned 0x1 [0097.921] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0097.921] WriteFile (in: hFile=0xf0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0098.017] GetFileType (hFile=0xf0) returned 0x1 [0098.017] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0xa000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0098.017] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0098.487] SetEvent (hEvent=0xac) returned 1 [0098.488] SetEvent (hEvent=0x6c) returned 1 [0098.488] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0098.550] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0098.550] SetEvent (hEvent=0x6c) returned 1 [0098.550] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0098.602] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0098.650] GetFileType (hFile=0xf0) returned 0x1 [0098.650] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0098.650] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0098.762] GetFileType (hFile=0xf0) returned 0x1 [0098.762] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0xa800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0098.762] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0098.935] SetEvent (hEvent=0xb8) returned 1 [0098.936] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0098.952] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0098.952] SetEvent (hEvent=0xb8) returned 1 [0098.952] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0099.004] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0099.053] GetFileType (hFile=0xf0) returned 0x1 [0099.053] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0099.053] WriteFile (in: hFile=0xf0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0099.202] GetFileType (hFile=0xf0) returned 0x1 [0099.202] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0xb000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0099.202] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0099.355] SetEvent (hEvent=0x6c) returned 1 [0099.355] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0099.408] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0099.408] SetEvent (hEvent=0x6c) returned 1 [0099.408] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0099.463] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0099.559] GetFileType (hFile=0xf0) returned 0x1 [0099.559] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0099.559] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0099.695] GetFileType (hFile=0xf0) returned 0x1 [0099.695] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0xb800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0099.695] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0099.892] SetEvent (hEvent=0xb8) returned 1 [0099.894] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0099.943] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0099.943] SetEvent (hEvent=0xb8) returned 1 [0099.943] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0099.996] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0100.121] GetFileType (hFile=0xf0) returned 0x1 [0100.121] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0100.121] WriteFile (in: hFile=0xf0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0100.228] GetFileType (hFile=0xf0) returned 0x1 [0100.228] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0xc000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0100.228] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0100.421] SetEvent (hEvent=0x6c) returned 1 [0100.421] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0100.446] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0100.446] SetEvent (hEvent=0x6c) returned 1 [0100.446] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0100.501] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0100.549] GetFileType (hFile=0xf0) returned 0x1 [0100.549] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0100.549] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0100.707] GetFileType (hFile=0xf0) returned 0x1 [0100.707] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0xc800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0100.707] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0100.888] SetEvent (hEvent=0xb8) returned 1 [0100.888] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0100.935] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0100.935] SetEvent (hEvent=0xb8) returned 1 [0100.935] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0100.992] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0101.095] GetFileType (hFile=0xf0) returned 0x1 [0101.095] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0101.095] WriteFile (in: hFile=0xf0, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0101.195] GetFileType (hFile=0xf0) returned 0x1 [0101.195] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0xd000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0101.195] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x49ee31, lpOverlapped=0x0) returned 1 [0101.252] SetEvent (hEvent=0x6c) returned 1 [0101.333] GetFileType (hFile=0xf0) returned 0x1 [0101.333] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0101.333] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x49ee31, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x49ee31, lpOverlapped=0x12429b54) returned 1 [0101.388] GetFileType (hFile=0xf0) returned 0x1 [0101.388] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0xd49ee31, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0101.388] ReadFile (in: hFile=0xf0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0101.388] CloseHandle (hObject=0xf0) returned 1 [0101.417] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0101.495] SetEvent (hEvent=0x6c) returned 1 [0101.495] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0101.547] SetEvent (hEvent=0x6c) returned 1 [0101.547] SetEvent (hEvent=0xb8) returned 1 [0101.548] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0101.548] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0101.602] WriteFile (in: hFile=0xf0, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0101.602] CloseHandle (hObject=0xf0) returned 1 [0101.660] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124de000*, nNumberOfCharsToWrite=0x69, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124de000*, lpNumberOfCharsWritten=0x1242981c*=0x69) returned 1 [0101.667] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976)) returned 1 [0101.668] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1 [0101.668] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1 [0101.668] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1 [0101.668] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1 [0101.668] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0101.668] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0101.668] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0101.669] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0101.669] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0101.669] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0101.669] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0101.720] CloseHandle (hObject=0xf0) returned 1 [0101.720] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0101.721] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0101.721] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0101.721] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0101.776] WriteFile (in: hFile=0xf0, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0101.777] CloseHandle (hObject=0xf0) returned 1 [0101.777] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0101.777] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0101.777] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0101.777] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xee9a2b80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xee9a2b80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xee9a2b80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xee9a2b80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xee9a2b80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xee9a2b80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xeea28ff0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0101.778] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0101.778] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0101.778] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0101.779] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0101.779] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0101.835] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0101.885] ReadFile (in: hFile=0xf0, lpBuffer=0x124c4700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0101.934] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0101.990] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0102.044] ReadFile (in: hFile=0xe0, lpBuffer=0x12774000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12774000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0102.099] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0102.099] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0102.153] ReadFile (in: hFile=0x100, lpBuffer=0x124c4800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0102.207] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0102.207] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0102.259] ReadFile (in: hFile=0xdc, lpBuffer=0x124c4900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0102.313] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0102.368] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0102.418] ReadFile (in: hFile=0xc0, lpBuffer=0x124c4a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4a00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0102.446] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0102.481] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0102.530] ReadFile (in: hFile=0xbc, lpBuffer=0x12774100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12774100*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0102.584] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0102.585] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0102.638] ReadFile (in: hFile=0xe4, lpBuffer=0x124c4b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4b00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0102.675] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0102.676] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0102.682] ReadFile (in: hFile=0x98, lpBuffer=0x124c4c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4c00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0102.690] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0102.691] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0102.696] ReadFile (in: hFile=0xd0, lpBuffer=0x124c4d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4d00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0102.705] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0102.706] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0102.708] ReadFile (in: hFile=0xc8, lpBuffer=0x124c4e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4e00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0102.723] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0102.729] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0102.736] ReadFile (in: hFile=0xd8, lpBuffer=0x124c4f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4f00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0102.744] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0102.744] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0102.751] ReadFile (in: hFile=0xcc, lpBuffer=0x124c5000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c5000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0102.758] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1 [0102.758] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0102.758] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0102.766] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e3c0 | out: pbBuffer=0x1240e3c0) returned 1 [0102.767] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c5102 | out: pbBuffer=0x124c5102) returned 1 [0102.785] ReadFile (in: hFile=0xe8, lpBuffer=0x14d40000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14d40000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0102.938] SetEvent (hEvent=0xb8) returned 1 [0102.938] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0102.999] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0102.999] SetEvent (hEvent=0xb8) returned 1 [0102.999] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0103.001] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0103.051] GetFileType (hFile=0xe8) returned 0x1 [0103.051] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.051] WriteFile (in: hFile=0xe8, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0103.152] GetFileType (hFile=0xe8) returned 0x1 [0103.152] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.152] GetFileType (hFile=0xe8) returned 0x1 [0103.152] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.152] WriteFile (in: hFile=0xe8, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0103.252] GetFileType (hFile=0xe8) returned 0x1 [0103.252] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.252] GetFileType (hFile=0xe8) returned 0x1 [0103.252] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.252] WriteFile (in: hFile=0xe8, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0103.347] GetFileType (hFile=0xe8) returned 0x1 [0103.347] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.347] GetFileType (hFile=0xe8) returned 0x1 [0103.347] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.347] WriteFile (in: hFile=0xe8, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0103.445] GetFileType (hFile=0xe8) returned 0x1 [0103.445] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.446] GetFileType (hFile=0xe8) returned 0x1 [0103.446] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.446] WriteFile (in: hFile=0xe8, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0103.547] GetFileType (hFile=0xe8) returned 0x1 [0103.547] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.547] GetFileType (hFile=0xe8) returned 0x1 [0103.547] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.547] WriteFile (in: hFile=0xe8, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0103.654] GetFileType (hFile=0xe8) returned 0x1 [0103.654] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.654] GetFileType (hFile=0xe8) returned 0x1 [0103.654] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.654] WriteFile (in: hFile=0xe8, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0103.820] GetFileType (hFile=0xe8) returned 0x1 [0103.820] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.820] GetFileType (hFile=0xe8) returned 0x1 [0103.820] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.820] WriteFile (in: hFile=0xe8, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0103.959] GetFileType (hFile=0xe8) returned 0x1 [0103.959] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0103.959] ReadFile (in: hFile=0xe8, lpBuffer=0x14d40000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14d40000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0104.122] SetEvent (hEvent=0xb8) returned 1 [0104.122] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0104.167] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0104.167] SetEvent (hEvent=0xb8) returned 1 [0104.167] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0104.224] GetFileType (hFile=0xe8) returned 0x1 [0104.224] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0104.224] WriteFile (in: hFile=0xe8, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0104.346] GetFileType (hFile=0xe8) returned 0x1 [0104.346] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0104.346] ReadFile (in: hFile=0xe8, lpBuffer=0x14d40000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14d40000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0104.498] SetEvent (hEvent=0x6c) returned 1 [0104.498] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0104.498] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0104.498] SetEvent (hEvent=0x6c) returned 1 [0104.498] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0104.547] GetFileType (hFile=0xe8) returned 0x1 [0104.547] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0104.547] WriteFile (in: hFile=0xe8, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0104.644] GetFileType (hFile=0xe8) returned 0x1 [0104.644] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0104.644] ReadFile (in: hFile=0xe8, lpBuffer=0x14d40000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14d40000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0104.761] SetEvent (hEvent=0xb8) returned 1 [0104.761] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0104.761] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0104.761] SetEvent (hEvent=0xb8) returned 1 [0104.761] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0104.810] GetFileType (hFile=0xe8) returned 0x1 [0104.810] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0104.810] WriteFile (in: hFile=0xe8, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0104.906] GetFileType (hFile=0xe8) returned 0x1 [0104.906] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x2000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0104.906] ReadFile (in: hFile=0xe8, lpBuffer=0x14d40000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14d40000*, lpNumberOfBytesRead=0x12429b64*=0x28df5c, lpOverlapped=0x0) returned 1 [0104.965] GetFileType (hFile=0xe8) returned 0x1 [0104.965] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0104.965] WriteFile (in: hFile=0xe8, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x28df5c, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429b48*=0x28df5c, lpOverlapped=0x12429b54) returned 1 [0104.995] GetFileType (hFile=0xe8) returned 0x1 [0104.995] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x228df5c, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0104.995] ReadFile (in: hFile=0xe8, lpBuffer=0x14d40000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14d40000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0104.995] CloseHandle (hObject=0xe8) returned 1 [0104.995] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0104.995] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0104.995] WriteFile (in: hFile=0xe8, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0104.996] CloseHandle (hObject=0xe8) returned 1 [0104.996] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124de000*, nNumberOfCharsToWrite=0x69, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124de000*, lpNumberOfCharsWritten=0x1242981c*=0x69) returned 1 [0104.997] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1 [0104.997] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1 [0104.997] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1 [0104.997] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400)) returned 1 [0104.997] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915)) returned 1 [0104.997] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f)) returned 1 [0104.997] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-003B-0000-1000-0000000FF1CE}-C/PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0104.997] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0104.997] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e220 | out: pbBuffer=0x1240e220) returned 1 [0104.998] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0104.998] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c4002 | out: pbBuffer=0x124c4002) returned 1 [0104.998] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c407f | out: pbBuffer=0x124c407f) returned 1 [0104.998] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c40a9 | out: pbBuffer=0x124c40a9) returned 1 [0105.000] SetEvent (hEvent=0x6c) returned 1 [0105.000] ReadFile (in: hFile=0xe8, lpBuffer=0x13400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0105.193] SwitchToThread () returned 1 [0105.194] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0105.393] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0106.179] SetEvent (hEvent=0x6c) returned 1 [0106.179] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0106.185] SetEvent (hEvent=0x6c) returned 1 [0106.185] SwitchToThread () returned 1 [0106.288] SetEvent (hEvent=0xb8) returned 1 [0106.288] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0106.734] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0106.830] SetEvent (hEvent=0x6c) returned 1 [0106.830] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0106.836] SetEvent (hEvent=0x6c) returned 1 [0106.836] SwitchToThread () returned 1 [0106.858] SetEvent (hEvent=0xb8) returned 1 [0106.858] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0107.407] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0107.475] SetEvent (hEvent=0x6c) returned 1 [0107.475] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0107.483] SetEvent (hEvent=0x6c) returned 1 [0107.483] SwitchToThread () returned 1 [0107.534] SetEvent (hEvent=0xb8) returned 1 [0107.534] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0107.912] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0108.113] SetEvent (hEvent=0x6c) returned 1 [0108.113] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0108.121] SetEvent (hEvent=0x6c) returned 1 [0108.121] SwitchToThread () returned 1 [0108.194] SetEvent (hEvent=0xb8) returned 1 [0108.197] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0108.611] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0108.771] SetEvent (hEvent=0x6c) returned 1 [0108.771] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0108.771] SetEvent (hEvent=0x6c) returned 1 [0108.771] SwitchToThread () returned 1 [0108.904] SetEvent (hEvent=0xb8) returned 1 [0108.904] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0109.315] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0109.387] SetEvent (hEvent=0x6c) returned 1 [0109.387] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0109.387] SetEvent (hEvent=0x6c) returned 1 [0109.387] SwitchToThread () returned 1 [0109.412] SetEvent (hEvent=0xb8) returned 1 [0109.412] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0109.923] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0109.973] SetEvent (hEvent=0x6c) returned 1 [0109.973] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0109.975] SetEvent (hEvent=0x6c) returned 1 [0109.975] SwitchToThread () returned 1 [0110.024] SetEvent (hEvent=0xb8) returned 1 [0110.024] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0110.506] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0110.679] SetEvent (hEvent=0x6c) returned 1 [0110.679] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0110.679] SetEvent (hEvent=0x6c) returned 1 [0110.679] SwitchToThread () returned 1 [0110.753] SetEvent (hEvent=0xb8) returned 1 [0110.753] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0111.124] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0111.271] SetEvent (hEvent=0x6c) returned 1 [0111.271] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0111.271] SetEvent (hEvent=0x6c) returned 1 [0111.271] SwitchToThread () returned 1 [0111.275] SetEvent (hEvent=0xb8) returned 1 [0111.275] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0111.690] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0111.772] SetEvent (hEvent=0x6c) returned 1 [0111.772] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0111.774] SetEvent (hEvent=0x6c) returned 1 [0111.774] SwitchToThread () returned 1 [0111.775] SetEvent (hEvent=0xb8) returned 1 [0111.775] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0112.062] SetEvent (hEvent=0xb8) returned 1 [0112.062] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0112.063] SetEvent (hEvent=0xb8) returned 1 [0112.063] SetEvent (hEvent=0x6c) returned 1 [0112.063] CloseHandle (hObject=0xe0) returned 1 [0112.063] CloseHandle (hObject=0xcc) returned 1 [0112.063] CloseHandle (hObject=0xd8) returned 1 [0112.063] CloseHandle (hObject=0xc8) returned 1 [0112.063] CloseHandle (hObject=0xd0) returned 1 [0112.063] CloseHandle (hObject=0x98) returned 1 [0112.063] CloseHandle (hObject=0xe4) returned 1 [0112.063] CloseHandle (hObject=0xc0) returned 1 [0112.063] CloseHandle (hObject=0xdc) returned 1 [0112.063] CloseHandle (hObject=0x100) returned 1 [0112.064] CloseHandle (hObject=0xf0) returned 1 [0112.064] CloseHandle (hObject=0xe8) returned 1 [0112.065] SwitchToThread () returned 1 [0112.065] SetEvent (hEvent=0xb8) returned 1 [0112.065] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0112.065] SetEvent (hEvent=0xb8) returned 1 [0112.065] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0112.066] SetEvent (hEvent=0xb8) returned 1 [0112.066] SwitchToThread () returned 1 [0112.067] SetEvent (hEvent=0xb8) returned 1 [0112.067] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0112.168] SetEvent (hEvent=0x6c) returned 1 [0112.168] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0112.264] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0112.264] SetEvent (hEvent=0x6c) returned 1 [0112.264] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0112.361] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0112.361] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0113.333] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0113.376] SetEvent (hEvent=0xb8) returned 1 [0113.376] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0113.384] SetEvent (hEvent=0xb8) returned 1 [0113.384] SwitchToThread () returned 1 [0113.456] SetEvent (hEvent=0x6c) returned 1 [0113.456] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0113.803] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0113.904] SetEvent (hEvent=0x6c) returned 1 [0113.904] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0113.913] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0113.913] SetEvent (hEvent=0x6c) returned 1 [0113.913] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0113.964] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0113.964] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0114.356] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0115.409] SetEvent (hEvent=0x6c) returned 1 [0115.409] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0115.446] SetEvent (hEvent=0x6c) returned 1 [0115.446] SwitchToThread () returned 1 [0115.525] SetEvent (hEvent=0xb8) returned 1 [0115.525] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0115.996] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0116.157] SetEvent (hEvent=0x6c) returned 1 [0116.157] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0116.157] SetEvent (hEvent=0x6c) returned 1 [0116.157] SwitchToThread () returned 1 [0116.253] SetEvent (hEvent=0xb8) returned 1 [0116.253] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0116.757] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0116.980] SetEvent (hEvent=0x6c) returned 1 [0116.980] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0116.980] SetEvent (hEvent=0x6c) returned 1 [0116.980] SwitchToThread () returned 1 [0117.080] SetEvent (hEvent=0xb8) returned 1 [0117.080] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0117.588] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0117.637] SetEvent (hEvent=0x6c) returned 1 [0117.637] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0117.637] SetEvent (hEvent=0x6c) returned 1 [0117.637] SwitchToThread () returned 1 [0117.685] SetEvent (hEvent=0xb8) returned 1 [0117.685] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0118.036] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0118.260] SetEvent (hEvent=0x6c) returned 1 [0118.260] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0118.260] SetEvent (hEvent=0x6c) returned 1 [0118.260] SwitchToThread () returned 1 [0118.311] SetEvent (hEvent=0xb8) returned 1 [0118.311] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0118.671] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0118.681] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0119.119] SetEvent (hEvent=0x6c) returned 1 [0119.119] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0119.128] SetEvent (hEvent=0x6c) returned 1 [0119.131] SwitchToThread () returned 1 [0119.236] SetEvent (hEvent=0xb8) returned 1 [0119.236] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0119.680] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0119.770] SetEvent (hEvent=0x6c) returned 1 [0119.770] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0119.776] SetEvent (hEvent=0x6c) returned 1 [0119.776] SwitchToThread () returned 1 [0119.799] SetEvent (hEvent=0xb8) returned 1 [0119.799] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0120.339] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0120.421] SetEvent (hEvent=0x6c) returned 1 [0120.421] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0120.427] SetEvent (hEvent=0x6c) returned 1 [0120.427] SwitchToThread () returned 1 [0120.456] SetEvent (hEvent=0xb8) returned 1 [0120.457] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0121.198] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0121.308] SetEvent (hEvent=0x6c) returned 1 [0121.308] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0121.359] SetEvent (hEvent=0x6c) returned 1 [0121.359] SwitchToThread () returned 1 [0121.456] SetEvent (hEvent=0xb8) returned 1 [0121.456] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0122.054] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0122.102] SetEvent (hEvent=0x6c) returned 1 [0122.102] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0122.157] SetEvent (hEvent=0x6c) returned 1 [0122.157] SwitchToThread () returned 1 [0122.213] SetEvent (hEvent=0xb8) returned 1 [0122.213] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0122.786] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0122.842] SetEvent (hEvent=0x6c) returned 1 [0122.842] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0122.895] SetEvent (hEvent=0x6c) returned 1 [0122.895] SwitchToThread () returned 1 [0123.001] SetEvent (hEvent=0xb8) returned 1 [0123.001] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0123.493] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0123.611] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0123.720] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0123.990] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0124.526] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0124.570] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0124.739] SetEvent (hEvent=0x6c) returned 1 [0124.743] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0124.750] SetEvent (hEvent=0x6c) returned 1 [0124.750] SetEvent (hEvent=0xb8) returned 1 [0124.750] CloseHandle (hObject=0xc0) returned 1 [0124.750] CloseHandle (hObject=0xdc) returned 1 [0124.750] SwitchToThread () returned 1 [0124.755] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0124.793] SetEvent (hEvent=0x6c) returned 1 [0124.796] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0124.804] SetEvent (hEvent=0x6c) returned 1 [0124.804] SwitchToThread () returned 1 [0124.833] SetEvent (hEvent=0xb8) returned 1 [0124.833] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0124.989] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.300] SetEvent (hEvent=0xb8) returned 1 [0125.300] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.301] SetEvent (hEvent=0xb8) returned 1 [0125.301] SetEvent (hEvent=0xa0) returned 1 [0125.301] CloseHandle (hObject=0x118) returned 1 [0125.301] CloseHandle (hObject=0xf0) returned 1 [0125.301] SwitchToThread () returned 1 [0125.304] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.358] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.419] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.464] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.530] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.556] SetEvent (hEvent=0xa0) returned 1 [0125.556] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0125.557] SetEvent (hEvent=0xa0) returned 1 [0125.558] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0125.561] CloseHandle (hObject=0xdc) returned 1 [0125.561] CloseHandle (hObject=0x100) returned 1 [0125.561] CloseHandle (hObject=0xe4) returned 1 [0125.561] CloseHandle (hObject=0xe8) returned 1 [0125.561] CloseHandle (hObject=0xbc) returned 1 [0125.561] CloseHandle (hObject=0x11c) returned 1 [0125.561] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.641] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.667] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.751] SetEvent (hEvent=0x6c) returned 1 [0125.751] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.751] SetEvent (hEvent=0x6c) returned 1 [0125.751] SetEvent (hEvent=0xb8) returned 1 [0125.751] CloseHandle (hObject=0xe8) returned 1 [0125.751] CloseHandle (hObject=0xbc) returned 1 [0125.751] CloseHandle (hObject=0x11c) returned 1 [0125.751] CloseHandle (hObject=0x120) returned 1 [0125.751] CloseHandle (hObject=0x100) returned 1 [0125.751] SwitchToThread () returned 1 [0125.752] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.756] SetEvent (hEvent=0x6c) returned 1 [0125.756] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.756] SetEvent (hEvent=0x6c) returned 1 [0125.756] SwitchToThread () returned 1 [0125.757] SetEvent (hEvent=0xb8) returned 1 [0125.757] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.764] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.766] SetEvent (hEvent=0x6c) returned 1 [0125.766] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0125.767] SetEvent (hEvent=0x6c) returned 1 [0125.767] SwitchToThread () returned 1 [0125.768] SetEvent (hEvent=0xb8) returned 1 [0125.768] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0126.083] SetEvent (hEvent=0xb8) returned 1 [0126.083] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0126.084] SetEvent (hEvent=0xb8) returned 1 [0126.084] SetEvent (hEvent=0xa0) returned 1 [0126.084] CloseHandle (hObject=0x180) returned 1 [0126.084] CloseHandle (hObject=0x17c) returned 1 [0126.084] CloseHandle (hObject=0x178) returned 1 [0126.084] CloseHandle (hObject=0x174) returned 1 [0126.084] CloseHandle (hObject=0x170) returned 1 [0126.084] SwitchToThread () returned 1 [0126.121] SwitchToThread () returned 1 [0126.122] SetEvent (hEvent=0xb8) returned 1 [0126.122] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0126.122] SetEvent (hEvent=0xb8) returned 1 [0126.122] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0126.122] SetEvent (hEvent=0xb8) returned 1 [0126.122] SwitchToThread () returned 1 [0126.124] SetEvent (hEvent=0xa0) returned 1 [0126.124] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0126.130] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0126.134] SetEvent (hEvent=0xb8) returned 1 [0126.134] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0126.134] SetEvent (hEvent=0xb8) returned 1 [0126.134] SwitchToThread () returned 1 [0126.135] SetEvent (hEvent=0xa0) returned 1 [0126.135] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0126.312] SetEvent (hEvent=0xa0) returned 1 [0126.312] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0126.315] SetEvent (hEvent=0xa0) returned 1 [0126.315] SetEvent (hEvent=0x6c) returned 1 [0126.315] CloseHandle (hObject=0xf4) returned 1 [0126.316] CloseHandle (hObject=0x108) returned 1 [0126.316] CloseHandle (hObject=0x104) returned 1 [0126.316] CloseHandle (hObject=0xfc) returned 1 [0126.316] CloseHandle (hObject=0xf8) returned 1 [0126.316] CloseHandle (hObject=0x158) returned 1 [0126.316] CloseHandle (hObject=0x154) returned 1 [0126.316] CloseHandle (hObject=0xec) returned 1 [0126.316] CloseHandle (hObject=0xe0) returned 1 [0126.316] CloseHandle (hObject=0xcc) returned 1 [0126.316] CloseHandle (hObject=0xd8) returned 1 [0126.316] CloseHandle (hObject=0x140) returned 1 [0126.316] CloseHandle (hObject=0x10c) returned 1 [0126.316] SwitchToThread () returned 1 [0126.319] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0126.425] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0126.444] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0126.492] SetEvent (hEvent=0x6c) returned 1 [0126.492] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0126.493] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0126.494] SetEvent (hEvent=0x6c) returned 1 [0126.494] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0126.496] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0126.496] CloseHandle (hObject=0x150) returned 1 [0126.497] CloseHandle (hObject=0x14c) returned 1 [0126.497] CloseHandle (hObject=0x148) returned 1 [0126.497] CloseHandle (hObject=0x144) returned 1 [0126.497] CloseHandle (hObject=0x16c) returned 1 [0126.497] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0127.109] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0127.390] SetEvent (hEvent=0xa0) returned 1 [0127.390] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0127.396] SetEvent (hEvent=0xa0) returned 1 [0127.396] SwitchToThread () returned 1 [0127.397] SetEvent (hEvent=0xa0) returned 1 [0127.397] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0127.397] SetEvent (hEvent=0xa0) returned 1 [0127.397] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0127.397] SetEvent (hEvent=0xa0) returned 1 [0127.398] SwitchToThread () returned 1 [0127.399] SetEvent (hEvent=0xb8) returned 1 [0127.399] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0127.411] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0127.414] SetEvent (hEvent=0xa0) returned 1 [0127.414] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0127.414] SetEvent (hEvent=0xa0) returned 1 [0127.414] SwitchToThread () returned 1 [0127.415] SetEvent (hEvent=0xb8) returned 1 [0127.415] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0127.614] SetEvent (hEvent=0xb8) returned 1 [0127.614] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0127.616] SetEvent (hEvent=0xb8) returned 1 [0127.616] SetEvent (hEvent=0x6c) returned 1 [0127.616] CloseHandle (hObject=0xe8) returned 1 [0127.616] CloseHandle (hObject=0xbc) returned 1 [0127.616] CloseHandle (hObject=0x134) returned 1 [0127.616] CloseHandle (hObject=0x130) returned 1 [0127.616] CloseHandle (hObject=0x154) returned 1 [0127.616] CloseHandle (hObject=0xec) returned 1 [0127.616] CloseHandle (hObject=0xe0) returned 1 [0127.616] CloseHandle (hObject=0xcc) returned 1 [0127.616] CloseHandle (hObject=0xd8) returned 1 [0127.617] SwitchToThread () returned 1 [0127.619] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0127.695] SetEvent (hEvent=0x6c) returned 1 [0127.695] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0127.697] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0127.697] SetEvent (hEvent=0x6c) returned 1 [0127.697] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0127.702] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0127.702] SetEvent (hEvent=0xac) returned 1 [0127.702] SetEvent (hEvent=0xa0) returned 1 [0127.702] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x127e9624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x127e9624*=0x1103, lpOverlapped=0x0) returned 1 [0127.703] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0127.703] SetEvent (hEvent=0xa0) returned 1 [0127.703] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0127.703] GetFileType (hFile=0x16c) returned 0x1 [0127.703] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242b5ec | out: lpNewFilePointer=0x0) returned 1 [0127.703] WriteFile (in: hFile=0x16c, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1103, lpNumberOfBytesWritten=0x1242b608, lpOverlapped=0x1242b614 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x1242b608*=0x1103, lpOverlapped=0x1242b614) returned 1 [0127.703] GetFileType (hFile=0x16c) returned 0x1 [0127.703] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x1103, lpNewFilePointer=0x0, dwMoveMethod=0x1242b5ec | out: lpNewFilePointer=0x0) returned 1 [0127.704] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242b624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242b624*=0x0, lpOverlapped=0x0) returned 1 [0127.704] CloseHandle (hObject=0x16c) returned 1 [0127.704] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.704] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242b614 | out: lpMode=0x1242b614) returned 0 [0127.704] WriteFile (in: hFile=0x16c, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x1242b618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x1242b618*=0x108, lpOverlapped=0x0) returned 1 [0127.704] CloseHandle (hObject=0x16c) returned 1 [0127.705] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xb5, lpNumberOfCharsWritten=0x1242b2dc, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x1242b2dc*=0xb5) returned 1 [0127.705] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/dasherSettingSchema.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b518 | out: lpFileInformation=0x1242b518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x356)) returned 1 [0127.706] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x1242b518 | out: lpFileInformation=0x1242b518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c)) returned 1 [0127.706] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.706] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242b614 | out: lpMode=0x1242b614) returned 0 [0127.706] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e040 | out: pbBuffer=0x1249e040) returned 1 [0127.707] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12524102 | out: pbBuffer=0x12524102) returned 1 [0127.707] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12524147 | out: pbBuffer=0x12524147) returned 1 [0127.707] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12524182 | out: pbBuffer=0x12524182) returned 1 [0127.707] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12524192 | out: pbBuffer=0x12524192) returned 1 [0127.708] SetEvent (hEvent=0x6c) returned 1 [0127.708] ReadFile (in: hFile=0x16c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242b624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242b624*=0x5b6c, lpOverlapped=0x0) returned 1 [0127.708] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0127.709] SetEvent (hEvent=0x6c) returned 1 [0127.709] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0127.709] GetFileType (hFile=0x16c) returned 0x1 [0127.709] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242b5ec | out: lpNewFilePointer=0x0) returned 1 [0127.709] WriteFile (in: hFile=0x16c, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x5b6c, lpNumberOfBytesWritten=0x1242b608, lpOverlapped=0x1242b614 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x1242b608*=0x5b6c, lpOverlapped=0x1242b614) returned 1 [0127.709] GetFileType (hFile=0x16c) returned 0x1 [0127.709] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x5b6c, lpNewFilePointer=0x0, dwMoveMethod=0x1242b5ec | out: lpNewFilePointer=0x0) returned 1 [0127.709] ReadFile (in: hFile=0x16c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242b624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242b624*=0x0, lpOverlapped=0x0) returned 1 [0127.709] CloseHandle (hObject=0x16c) returned 1 [0127.710] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.710] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242b614 | out: lpMode=0x1242b614) returned 0 [0127.710] WriteFile (in: hFile=0x16c, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x1242b618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x1242b618*=0x108, lpOverlapped=0x0) returned 1 [0127.710] CloseHandle (hObject=0x16c) returned 1 [0127.710] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12778000*, nNumberOfCharsToWrite=0xb1, lpNumberOfCharsWritten=0x1242b2dc, lpReserved=0x0 | out: lpBuffer=0x12778000*, lpNumberOfCharsWritten=0x1242b2dc*=0xb1) returned 1 [0127.711] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b518 | out: lpFileInformation=0x1242b518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1 [0127.711] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x1242b518 | out: lpFileInformation=0x1242b518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0127.711] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.711] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242b614 | out: lpMode=0x1242b614) returned 0 [0127.712] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0127.712] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12524002 | out: pbBuffer=0x12524002) returned 1 [0127.713] SetEvent (hEvent=0xa0) returned 1 [0127.713] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242b624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242b624*=0xe0, lpOverlapped=0x0) returned 1 [0127.714] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0127.714] SetEvent (hEvent=0xa0) returned 1 [0127.714] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0127.714] GetFileType (hFile=0x16c) returned 0x1 [0127.714] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242b5ec | out: lpNewFilePointer=0x0) returned 1 [0127.714] WriteFile (in: hFile=0x16c, lpBuffer=0x12466000*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1242b608, lpOverlapped=0x1242b614 | out: lpBuffer=0x12466000*, lpNumberOfBytesWritten=0x1242b608*=0xe0, lpOverlapped=0x1242b614) returned 1 [0127.714] GetFileType (hFile=0x16c) returned 0x1 [0127.714] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x1242b5ec | out: lpNewFilePointer=0x0) returned 1 [0127.714] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242b624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242b624*=0x0, lpOverlapped=0x0) returned 1 [0127.714] CloseHandle (hObject=0x16c) returned 1 [0127.715] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.715] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242b614 | out: lpMode=0x1242b614) returned 0 [0127.715] WriteFile (in: hFile=0x16c, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x1242b618, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x1242b618*=0x108, lpOverlapped=0x0) returned 1 [0127.715] CloseHandle (hObject=0x16c) returned 1 [0127.715] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xb0, lpNumberOfCharsWritten=0x1242b2dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x1242b2dc*=0xb0) returned 1 [0127.716] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.716] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b468 | out: lpFindFileData=0x1242b468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.716] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.716] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b460 | out: lpFindFileData=0x1242b460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.716] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.716] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.716] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242b664 | out: lpMode=0x1242b664) returned 0 [0127.716] CloseHandle (hObject=0x16c) returned 1 [0127.717] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.717] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b468 | out: lpFindFileData=0x1242b468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.717] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.718] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242b728 | out: lpMode=0x1242b728) returned 0 [0127.718] WriteFile (in: hFile=0x16c, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b72c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242b72c*=0x1033, lpOverlapped=0x0) returned 1 [0127.719] CloseHandle (hObject=0x16c) returned 1 [0127.719] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.719] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.720] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.720] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales\\*", lpFindFileData=0x1242b39c | out: lpFindFileData=0x1242b39c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdb766f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdb766f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.720] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdb766f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdb766f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.720] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdb766f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdb766f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdb9c850, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="az", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_CA", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1 [0127.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="km", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lo", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0127.722] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_HK", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 1 [0127.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.723] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.723] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.724] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.724] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.724] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.724] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.725] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.725] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.725] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.725] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.725] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.726] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.726] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.726] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.726] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.726] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.726] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.728] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.728] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.729] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.729] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.729] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.729] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.730] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.730] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.730] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.730] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.730] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.730] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.731] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.731] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.731] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.731] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.732] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.732] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.732] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.733] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.733] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.733] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.733] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.733] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.734] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.734] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.734] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.734] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.735] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.735] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.735] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.735] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.736] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.736] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.736] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.736] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.737] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.737] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.737] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.737] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.737] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.737] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.738] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.738] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.738] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.739] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.739] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.739] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.739] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.739] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr_CA" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.739] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr_CA\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.740] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.740] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/gl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.740] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/gl\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.741] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.741] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/gu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.741] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/gu\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.742] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.742] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.742] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/hi\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.742] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.742] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.742] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/hr\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.743] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.743] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.743] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/hu\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.744] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.744] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/hy" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.744] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/hy\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.745] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.745] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.745] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/id\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.745] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.745] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/is" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.745] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/is\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.746] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.746] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.746] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/it\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.746] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.747] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/iw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.747] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/iw\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.747] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.748] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.748] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ja\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.748] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.748] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ka" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.748] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ka\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.749] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.749] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/km" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.749] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/km\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.749] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.749] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/kn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.749] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/kn\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.750] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.750] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.750] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ko\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.751] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.751] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/lo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.751] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/lo\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.752] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.752] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.752] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/lt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.752] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.752] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.752] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/lv\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.753] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.753] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.753] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ml\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.753] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.754] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/mn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.754] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/mn\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.754] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.754] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/mr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.755] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/mr\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.755] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.755] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.755] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ms\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.755] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.755] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ne" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.755] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ne\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.756] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.757] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.757] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/nl\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.757] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.758] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.758] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/no\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.758] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.758] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.758] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/pl\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.759] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.759] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.759] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/pt_BR\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.759] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.759] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.759] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/pt_PT\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.760] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.760] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.760] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ro\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.761] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.761] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.761] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ru\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.762] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.762] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/si" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.762] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/si\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.762] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.762] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.762] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sk\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.763] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.763] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.763] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sl\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.763] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.764] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.764] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sr\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.764] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.765] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.765] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sv\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.765] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.765] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.765] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sw\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.766] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.766] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.766] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ta\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.767] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.767] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/te" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.767] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/te\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.768] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.768] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.768] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/th\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.768] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.768] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.768] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/tr\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.769] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.769] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.769] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/uk\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.769] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.770] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ur" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.770] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ur\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.770] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.770] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.771] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/vi\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.771] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.771] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.771] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/zh_CN\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.772] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.772] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/zh_HK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.772] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/zh_HK\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.772] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.772] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.772] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/zh_TW\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.773] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.773] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/zu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.773] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/zu\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.774] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.774] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.774] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.774] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.774] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3b8 | out: lpFindFileData=0x1242b3b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.774] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.774] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.774] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242b5bc | out: lpMode=0x1242b5bc) returned 0 [0127.774] CloseHandle (hObject=0x16c) returned 1 [0127.775] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.775] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.775] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.775] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.776] WriteFile (in: hFile=0x16c, lpBuffer=0x127ba000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x127ba000*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.777] CloseHandle (hObject=0x16c) returned 1 [0127.777] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.777] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.777] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.777] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc205b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc205b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.777] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc205b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc205b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.777] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdc205b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdc205b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc253d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.777] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.777] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.777] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.778] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.778] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.778] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.778] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.778] ReadFile (in: hFile=0x16c, lpBuffer=0x12524100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524100*, lpNumberOfBytesRead=0x1242b5f0*=0x84, lpOverlapped=0x0) returned 1 [0127.779] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x84)) returned 1 [0127.779] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.779] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.780] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.780] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.780] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.780] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/af/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0127.780] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.780] CloseHandle (hObject=0xc8) returned 1 [0127.780] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.780] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.780] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0127.781] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.781] WriteFile (in: hFile=0xc8, lpBuffer=0x127bc600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x127bc600*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.782] CloseHandle (hObject=0xc8) returned 1 [0127.782] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.782] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.783] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.783] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc2c900, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc2c900, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc2c900, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc2c900, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdc2c900, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdc2c900, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc31720, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.783] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.783] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.783] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.783] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.783] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0127.783] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.784] ReadFile (in: hFile=0xc8, lpBuffer=0x12524200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524200*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0127.785] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0127.785] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.785] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.785] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.785] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.785] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.785] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0127.785] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.785] CloseHandle (hObject=0x118) returned 1 [0127.786] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.786] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.786] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0127.786] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.786] WriteFile (in: hFile=0x118, lpBuffer=0x127bec00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x127bec00*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.787] CloseHandle (hObject=0x118) returned 1 [0127.788] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.788] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.788] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.788] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc38c50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc38c50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.788] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc38c50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc38c50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.788] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdc38c50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdc38c50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc3da70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.788] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.788] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.788] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.788] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.788] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.788] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0127.789] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.789] ReadFile (in: hFile=0x118, lpBuffer=0x12524300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524300*, lpNumberOfBytesRead=0x1242b5f0*=0xed, lpOverlapped=0x0) returned 1 [0127.790] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0127.790] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.790] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.790] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.790] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.790] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.790] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0127.791] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.791] CloseHandle (hObject=0x108) returned 1 [0127.791] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.791] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.791] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0127.791] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.792] WriteFile (in: hFile=0x108, lpBuffer=0x124ad300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x124ad300*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.793] CloseHandle (hObject=0x108) returned 1 [0127.793] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.793] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.793] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.793] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc476b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc476b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.793] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc476b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc476b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.793] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdc476b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdc476b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc49dc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.793] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.794] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.794] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.794] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.794] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.794] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0127.794] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.794] ReadFile (in: hFile=0x108, lpBuffer=0x12524400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524400*, lpNumberOfBytesRead=0x1242b5f0*=0xa7, lpOverlapped=0x0) returned 1 [0127.795] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xa7)) returned 1 [0127.795] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.795] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.795] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.796] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.796] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.796] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/az/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0127.796] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.796] CloseHandle (hObject=0x10c) returned 1 [0127.796] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.796] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.796] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0127.797] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.797] WriteFile (in: hFile=0x10c, lpBuffer=0x124af900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x124af900*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.798] CloseHandle (hObject=0x10c) returned 1 [0127.798] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.798] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.798] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.798] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc53a00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc53a00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.799] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc53a00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc53a00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.799] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdc53a00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdc53a00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc56110, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.799] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.799] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.799] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.799] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.799] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.799] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0127.799] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.799] ReadFile (in: hFile=0x10c, lpBuffer=0x12524500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524500*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0127.800] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x114)) returned 1 [0127.801] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.801] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.801] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.801] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.801] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.801] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0127.801] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.801] CloseHandle (hObject=0x160) returned 1 [0127.801] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.801] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.802] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0127.802] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.802] WriteFile (in: hFile=0x160, lpBuffer=0x12740000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12740000*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.803] CloseHandle (hObject=0x160) returned 1 [0127.803] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.804] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.804] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.804] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc5fd50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc5fd50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.804] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc5fd50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc5fd50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.804] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdc5fd50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdc5fd50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc64b70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.804] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.804] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.804] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.804] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.804] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.804] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0127.805] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.805] ReadFile (in: hFile=0x160, lpBuffer=0x12524600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524600*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0127.806] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14b)) returned 1 [0127.806] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.806] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.806] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.806] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.806] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.806] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0127.806] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.807] CloseHandle (hObject=0x164) returned 1 [0127.807] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.807] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.807] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0127.807] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.807] WriteFile (in: hFile=0x164, lpBuffer=0x12742600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12742600*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.808] CloseHandle (hObject=0x164) returned 1 [0127.809] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.809] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.809] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.809] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc6c0a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc6c0a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.809] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc6c0a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc6c0a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.809] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdc6c0a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdc6c0a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc70ec0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.809] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.810] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.810] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.810] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.810] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.810] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0127.810] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.810] ReadFile (in: hFile=0x164, lpBuffer=0x12524700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524700*, lpNumberOfBytesRead=0x1242b5f0*=0xcf, lpOverlapped=0x0) returned 1 [0127.811] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1 [0127.811] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.812] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.812] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.812] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0127.812] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.812] CloseHandle (hObject=0x168) returned 1 [0127.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.812] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0127.813] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.813] WriteFile (in: hFile=0x168, lpBuffer=0x12744c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12744c00*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.814] CloseHandle (hObject=0x168) returned 1 [0127.814] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.814] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.815] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.815] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc7ab00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc7ab00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.815] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc7ab00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc7ab00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.815] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdc7ab00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdc7ab00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc7d210, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.815] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.815] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.815] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.815] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.815] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.815] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0127.816] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.816] ReadFile (in: hFile=0x168, lpBuffer=0x12524800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524800*, lpNumberOfBytesRead=0x1242b5f0*=0xad, lpOverlapped=0x0) returned 1 [0127.817] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xad)) returned 1 [0127.817] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.817] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.817] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.817] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.817] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.817] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0127.817] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.818] CloseHandle (hObject=0x13c) returned 1 [0127.818] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.818] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.818] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0127.818] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.819] WriteFile (in: hFile=0x13c, lpBuffer=0x1275b300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x1275b300*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.820] CloseHandle (hObject=0x13c) returned 1 [0127.820] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.820] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.820] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.820] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc89560, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc89560, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.820] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc89560, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc89560, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.820] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdc89560, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdc89560, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc8bc70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.820] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.820] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.821] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.821] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.821] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.821] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0127.821] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.821] ReadFile (in: hFile=0x13c, lpBuffer=0x12524900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524900*, lpNumberOfBytesRead=0x1242b5f0*=0xac, lpOverlapped=0x0) returned 1 [0127.822] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1 [0127.822] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.823] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.823] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.823] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.823] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.823] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0127.823] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.823] CloseHandle (hObject=0x178) returned 1 [0127.823] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.823] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.823] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0127.824] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.824] WriteFile (in: hFile=0x178, lpBuffer=0x1275d900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x1275d900*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.825] CloseHandle (hObject=0x178) returned 1 [0127.826] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.826] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.826] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.826] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc958b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc958b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.826] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdc958b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc958b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.826] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdc958b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdc958b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdc9a6d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.826] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.826] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.826] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.826] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.826] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.827] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0127.827] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.827] ReadFile (in: hFile=0x178, lpBuffer=0x12524a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524a00*, lpNumberOfBytesRead=0x1242b5f0*=0xc1, lpOverlapped=0x0) returned 1 [0127.828] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc1)) returned 1 [0127.828] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.828] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.828] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.828] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.828] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.828] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0127.829] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.829] CloseHandle (hObject=0x11c) returned 1 [0127.829] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.829] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.829] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0127.829] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.829] WriteFile (in: hFile=0x11c, lpBuffer=0x124f4000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x124f4000*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.831] CloseHandle (hObject=0x11c) returned 1 [0127.831] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.831] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.831] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.831] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdca4310, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdca4310, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.831] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdca4310, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdca4310, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.831] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdca4310, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdca4310, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdca6a20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.831] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.832] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.832] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.832] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.832] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.832] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0127.832] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.832] ReadFile (in: hFile=0x11c, lpBuffer=0x12524b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524b00*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0127.834] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12a)) returned 1 [0127.834] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.834] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.834] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.834] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.834] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.834] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0127.834] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.834] CloseHandle (hObject=0x170) returned 1 [0127.835] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.835] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.835] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0127.835] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.835] WriteFile (in: hFile=0x170, lpBuffer=0x124f6600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x124f6600*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.836] CloseHandle (hObject=0x170) returned 1 [0127.836] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.837] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.837] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.837] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdcadf50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcadf50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.837] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdcadf50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcadf50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.837] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdcadf50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdcadf50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcb2d70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.837] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.837] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.837] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.837] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.837] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.837] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0127.838] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.838] ReadFile (in: hFile=0x170, lpBuffer=0x12524c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524c00*, lpNumberOfBytesRead=0x1242b5f0*=0xb2, lpOverlapped=0x0) returned 1 [0127.839] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1 [0127.839] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.839] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.839] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.839] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.839] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.839] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0127.839] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.840] CloseHandle (hObject=0x174) returned 1 [0127.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.840] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0127.840] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.840] WriteFile (in: hFile=0x174, lpBuffer=0x124f8c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x124f8c00*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.841] CloseHandle (hObject=0x174) returned 1 [0127.842] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.842] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.842] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.842] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdcba2a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcba2a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.842] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdcba2a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcba2a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.842] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdcba2a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdcba2a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcbf0c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.843] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.843] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.843] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.843] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0127.843] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.843] ReadFile (in: hFile=0x174, lpBuffer=0x12524d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524d00*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0127.844] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1 [0127.844] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.844] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.845] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.845] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.845] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.845] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0127.845] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.845] CloseHandle (hObject=0xf4) returned 1 [0127.845] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.845] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.845] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0127.846] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.846] WriteFile (in: hFile=0xf4, lpBuffer=0x1250b300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x1250b300*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.847] CloseHandle (hObject=0xf4) returned 1 [0127.847] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.847] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.848] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.848] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdcc8d00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcc8d00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.848] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdcc8d00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcc8d00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.848] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdcc8d00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdcc8d00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdccdb20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.848] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.848] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.848] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.848] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.848] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.848] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0127.849] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.849] ReadFile (in: hFile=0xf4, lpBuffer=0x12524e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524e00*, lpNumberOfBytesRead=0x1242b5f0*=0xcc, lpOverlapped=0x0) returned 1 [0127.850] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcc)) returned 1 [0127.850] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.850] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.850] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.850] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.850] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.850] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0127.850] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.850] CloseHandle (hObject=0xdc) returned 1 [0127.851] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.851] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.851] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0127.851] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.852] WriteFile (in: hFile=0xdc, lpBuffer=0x1250d900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x1250d900*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.853] CloseHandle (hObject=0xdc) returned 1 [0127.853] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.853] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.853] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.853] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdcd5050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcd5050, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.853] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdcd5050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcd5050, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.853] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdcd5050, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdcd5050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcd9e70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.853] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.853] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.854] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.854] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.854] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.854] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0127.854] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.854] ReadFile (in: hFile=0xdc, lpBuffer=0x12524f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12524f00*, lpNumberOfBytesRead=0x1242b5f0*=0xe3, lpOverlapped=0x0) returned 1 [0127.855] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1 [0127.855] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.855] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.855] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.856] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.856] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.856] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0127.856] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.856] CloseHandle (hObject=0x110) returned 1 [0127.856] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.856] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.856] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0127.857] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.857] WriteFile (in: hFile=0x110, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.858] CloseHandle (hObject=0x110) returned 1 [0127.858] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.858] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.858] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.858] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdce3ab0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdce3ab0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.858] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdce3ab0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdce3ab0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.859] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdce3ab0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdce3ab0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdce61c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.859] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.859] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.859] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.859] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.859] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.859] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0127.859] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.859] ReadFile (in: hFile=0x110, lpBuffer=0x12525000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12525000*, lpNumberOfBytesRead=0x1242b5f0*=0xd4, lpOverlapped=0x0) returned 1 [0127.860] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1 [0127.860] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.860] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.861] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.861] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.861] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.861] CloseHandle (hObject=0x124) returned 1 [0127.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.861] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.862] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.862] WriteFile (in: hFile=0x124, lpBuffer=0x1278c600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x1278c600*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.863] CloseHandle (hObject=0x124) returned 1 [0127.863] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.863] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.863] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.863] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdcefe00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcefe00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.864] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdcefe00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcefe00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.864] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdcefe00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdcefe00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcf2510, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.864] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.864] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.864] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.864] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.864] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.864] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.864] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.865] ReadFile (in: hFile=0x124, lpBuffer=0x12525100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12525100*, lpNumberOfBytesRead=0x1242b5f0*=0x98, lpOverlapped=0x0) returned 1 [0127.866] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x98)) returned 1 [0127.866] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.866] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.866] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.866] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.866] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.866] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0127.866] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.867] CloseHandle (hObject=0xc0) returned 1 [0127.867] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.867] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.867] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0127.867] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.867] WriteFile (in: hFile=0xc0, lpBuffer=0x1278ec00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x1278ec00*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.869] CloseHandle (hObject=0xc0) returned 1 [0127.869] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.869] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.869] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.869] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdcfc150, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcfc150, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.869] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdcfc150, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdcfc150, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.869] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdcfc150, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdcfc150, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd00f70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.870] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.870] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.870] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.870] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.870] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.870] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0127.870] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.870] ReadFile (in: hFile=0xc0, lpBuffer=0x12525200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12525200*, lpNumberOfBytesRead=0x1242b5f0*=0xff, lpOverlapped=0x0) returned 1 [0127.871] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1 [0127.871] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.872] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.872] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.872] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.872] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.872] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0127.872] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.872] CloseHandle (hObject=0x98) returned 1 [0127.872] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.872] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.872] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0127.873] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.873] WriteFile (in: hFile=0x98, lpBuffer=0x1279f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x1279f300*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.874] CloseHandle (hObject=0x98) returned 1 [0127.874] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.874] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.875] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.875] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd0abb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd0abb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.875] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd0abb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd0abb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.875] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdd0abb0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdd0abb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd0f9d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.875] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.875] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.875] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.875] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.876] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.876] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0127.876] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.876] ReadFile (in: hFile=0x98, lpBuffer=0x12525300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12525300*, lpNumberOfBytesRead=0x1242b5f0*=0xb7, lpOverlapped=0x0) returned 1 [0127.877] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb7)) returned 1 [0127.877] SetEvent (hEvent=0x6c) returned 1 [0127.877] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.877] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.878] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.878] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.878] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.878] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0127.878] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.878] CloseHandle (hObject=0xd0) returned 1 [0127.878] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.879] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.879] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0127.879] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.879] WriteFile (in: hFile=0xd0, lpBuffer=0x127a1900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x127a1900*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.880] CloseHandle (hObject=0xd0) returned 1 [0127.880] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.880] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.881] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.881] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd19610, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd19610, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.881] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd19610, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd19610, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.881] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdd19610, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdd19610, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd1e430, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.881] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.881] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.881] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.881] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.881] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.882] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0127.882] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.882] ReadFile (in: hFile=0xd0, lpBuffer=0x12794000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12794000*, lpNumberOfBytesRead=0x1242b5f0*=0xc7, lpOverlapped=0x0) returned 1 [0127.883] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc7)) returned 1 [0127.883] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.883] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.883] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.883] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.884] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.884] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0127.884] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.886] CloseHandle (hObject=0x144) returned 1 [0127.886] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.886] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.886] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0127.886] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0127.886] WriteFile (in: hFile=0x144, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0127.887] CloseHandle (hObject=0x144) returned 1 [0127.888] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.888] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.888] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.888] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd28070, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd28070, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.888] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd28070, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd28070, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.888] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdd28070, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdd28070, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd2ce90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.888] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.888] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.889] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.889] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.889] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.889] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0127.889] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0127.889] ReadFile (in: hFile=0x144, lpBuffer=0x12794100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12794100*, lpNumberOfBytesRead=0x1242b5f0*=0xbb, lpOverlapped=0x0) returned 1 [0127.890] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0127.890] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.890] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.890] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.891] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.891] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.891] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.891] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0127.891] CloseHandle (hObject=0x16c) returned 1 [0127.891] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr_CA\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.891] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr_CA\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.893] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/fr_CA\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.894] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd36ad0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd36ad0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.894] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdd36ad0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdd36ad0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd3b8f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.894] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.894] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.894] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.897] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/gl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd40710, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd40710, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdd40710, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdd40710, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd42e20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.897] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.906] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/gu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.906] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd47c40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd47c40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.906] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdd47c40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdd47c40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd58db0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.906] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.906] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.906] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.909] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd5dbd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd5dbd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdd5dbd0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdd5dbd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd602e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.909] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.913] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.913] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd67810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd67810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.913] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdd67810, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdd67810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd69f20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.913] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.913] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.913] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.916] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.916] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd6ed40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd6ed40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.916] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdd6ed40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdd6ed40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd71450, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.916] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.916] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.916] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.919] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/hy\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.920] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd76270, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd76270, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.920] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdd76270, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdd76270, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd7b090, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.920] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.920] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.920] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.923] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.924] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd825c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd825c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.924] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdd825c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdd825c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd84cd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.924] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.924] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.924] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.927] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/is\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.927] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd89af0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd89af0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.927] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdd89af0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdd89af0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd8c200, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.927] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.927] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.927] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.930] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.930] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd91020, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd91020, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdd91020, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdd91020, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd95e40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.931] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.934] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/iw\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.934] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdd9ac60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd9ac60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.934] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdd9ac60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdd9ac60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdd9d370, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.934] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.934] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.934] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.937] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.937] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdda2190, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdda2190, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.937] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdda2190, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdda2190, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdda48a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.937] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.937] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.937] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.940] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ka\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfddabdd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddabdd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfddabdd0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfddabdd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddabdd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.941] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.944] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/km\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.944] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfddb0bf0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddb0bf0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.944] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfddb0bf0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfddb0bf0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddb3300, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.944] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.944] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.944] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.948] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/kn\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.949] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfddba830, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddba830, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.949] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfddba830, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfddba830, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddbf650, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.949] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.949] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.949] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.952] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.952] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfddc4470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddc4470, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.952] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfddc4470, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfddc4470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddc6b80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.952] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.952] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.952] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.956] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/lo\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.956] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfddce0b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddce0b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.956] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfddce0b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfddce0b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddd07c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.956] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.956] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.956] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.959] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.959] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfddd55e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddd55e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.959] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfddd55e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfddd55e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddd7cf0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.959] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.959] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.959] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.962] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.962] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdddcb10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdddcb10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.963] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdddcb10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdddcb10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdde1930, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.963] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.963] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.963] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.966] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ml\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.966] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdde6750, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdde6750, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.966] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdde6750, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdde6750, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdde8e60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.966] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.966] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.966] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.970] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/mn\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.970] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfddf0390, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddf0390, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.970] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfddf0390, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfddf0390, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddf2aa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.971] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.971] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.971] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.974] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/mr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.974] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfddf9fd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddf9fd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.974] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfddf9fd0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfddf9fd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfddfc6e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.974] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.974] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.974] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.977] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.977] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde01500, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde01500, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.977] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde01500, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde01500, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde03c10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.977] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.977] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.978] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.980] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ne\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.981] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde0b140, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde0b140, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.981] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde0b140, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde0b140, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde0d850, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.981] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.981] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.981] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.984] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.984] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde12670, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde12670, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.985] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde12670, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde12670, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde17490, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.985] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.985] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.985] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.987] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.988] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde1c2b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde1c2b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.988] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde1c2b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde1c2b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde1e9c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.988] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.988] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.988] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.991] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.992] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde237e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde237e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.992] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde237e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde237e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde25ef0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.992] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.992] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.992] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.994] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/pt_BR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.995] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde2d420, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde2d420, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.995] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde2d420, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde2d420, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde2fb30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.995] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.995] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.995] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.998] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/pt_PT\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde32240, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde32240, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde32240, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde32240, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde37060, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.999] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.001] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ro\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.002] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde3be80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde3be80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.002] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde3be80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde3be80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde3e590, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.002] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.002] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.002] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.005] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ru\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.005] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde433b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde433b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.005] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde433b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde433b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde45ac0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.005] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.005] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.005] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.009] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/si\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.009] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde4cff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde4cff0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.009] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde4cff0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde4cff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde4f700, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.010] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.010] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.010] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.013] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.013] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde56c30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde56c30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.013] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde56c30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde56c30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde59340, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.013] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.013] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.013] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.016] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.017] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde60870, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde60870, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.017] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde60870, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde60870, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde62f80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.017] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.017] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.017] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.020] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.020] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde67da0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde67da0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.020] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde67da0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde67da0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde6a4b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.020] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.020] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.020] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.023] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.024] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde6f2d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde6f2d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.024] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde6f2d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde6f2d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde740f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.024] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.024] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.024] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.027] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/sw\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde78f10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde78f10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde78f10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde78f10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde7b620, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.027] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.030] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ta\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.031] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde80440, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde80440, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.031] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde80440, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde80440, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde85260, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.031] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x150, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.031] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.031] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.034] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/te\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.034] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde8a080, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde8a080, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.034] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde8a080, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde8a080, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde8c790, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.034] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.034] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.034] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.047] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/th\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.048] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfde93cc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde93cc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.048] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfde915b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfde915b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfde963d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.048] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.048] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.048] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.051] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/tr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.051] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdeb3890, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdeb3890, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.051] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdeb3890, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdeb3890, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdeb5fa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.051] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.051] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.051] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.054] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/uk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.054] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdebadc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdebadc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.054] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdebadc0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdebadc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdebadc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.054] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.055] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.055] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.057] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/ur\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdec22f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdec22f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdec22f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdec22f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdec4a00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.058] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.061] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/vi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.061] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdec9820, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdec9820, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.061] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdec9820, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdec9820, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdecbf30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.061] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.061] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.061] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.064] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/zh_CN\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.065] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfded3460, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfded3460, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.065] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfded3460, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfded3460, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfded5b70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.065] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.065] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.065] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.068] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/zh_HK\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.069] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdeda990, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdeda990, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.069] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdeda990, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdeda990, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdedf7b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.069] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.069] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.069] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.072] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/zh_TW\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.072] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdee45d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdee45d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.072] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdee45d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdee45d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdee6ce0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.072] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.072] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.072] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.076] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_locales/zu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.076] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdeebb00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdeebb00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.076] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdeebb00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdeebb00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdef0920, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.076] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.076] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.076] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.080] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/_metadata\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdef7e50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdef7e50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdef5740, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdef5740, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdefcc70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8636e710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0128.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x4454, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0128.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.081] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.087] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.087] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b568 | out: lpFindFileData=0x1242b568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdf08fc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdf08fc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.087] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b568 | out: lpFindFileData=0x1242b568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.2_0", cAlternateFileName="100~1.2_0")) returned 1 [0128.087] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b568 | out: lpFindFileData=0x1242b568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdf08fc0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdf08fc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdf0b6d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.087] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b568 | out: lpFindFileData=0x1242b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.087] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.093] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.093] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b4c0 | out: lpFindFileData=0x1242b4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdf15310, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdf15310, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.093] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b4c0 | out: lpFindFileData=0x1242b4c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdf15310, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdf15310, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdf1a130, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.093] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b4c0 | out: lpFindFileData=0x1242b4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82888510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8288ac20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_background.js", cAlternateFileName="CRAW_B~1.JS")) returned 1 [0128.093] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b4c0 | out: lpFindFileData=0x1242b4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8288d330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82892150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x3b059, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.js", cAlternateFileName="CRAW_W~1.JS")) returned 1 [0128.093] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b4c0 | out: lpFindFileData=0x1242b4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0128.093] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b4c0 | out: lpFindFileData=0x1242b4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="html", cAlternateFileName="")) returned 1 [0128.093] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b4c0 | out: lpFindFileData=0x1242b4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0128.093] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b4c0 | out: lpFindFileData=0x1242b4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826545a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e2a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aa3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0128.093] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b4c0 | out: lpFindFileData=0x1242b4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0128.093] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b4c0 | out: lpFindFileData=0x1242b4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0128.093] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b4c0 | out: lpFindFileData=0x1242b4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.093] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.108] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249f7c0 | out: pbBuffer=0x1249f7c0) returned 1 [0128.109] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12535802 | out: pbBuffer=0x12535802) returned 1 [0128.110] SetEvent (hEvent=0xa0) returned 1 [0128.110] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242b624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242b624*=0x32a2e, lpOverlapped=0x0) returned 1 [0128.115] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0128.115] SetEvent (hEvent=0xa0) returned 1 [0128.115] SetEvent (hEvent=0xb8) returned 1 [0128.116] CloseHandle (hObject=0x198) returned 1 [0128.116] CloseHandle (hObject=0x194) returned 1 [0128.116] CloseHandle (hObject=0x190) returned 1 [0128.117] GetFileType (hFile=0x19c) returned 0x1 [0128.117] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242b5ec | out: lpNewFilePointer=0x0) returned 1 [0128.117] WriteFile (in: hFile=0x19c, lpBuffer=0x12610000*, nNumberOfBytesToWrite=0x32a2e, lpNumberOfBytesWritten=0x1242b608, lpOverlapped=0x1242b614 | out: lpBuffer=0x12610000*, lpNumberOfBytesWritten=0x1242b608*=0x32a2e, lpOverlapped=0x1242b614) returned 1 [0128.118] GetFileType (hFile=0x19c) returned 0x1 [0128.118] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x32a2e, lpNewFilePointer=0x0, dwMoveMethod=0x1242b5ec | out: lpNewFilePointer=0x0) returned 1 [0128.118] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242b624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242b624*=0x0, lpOverlapped=0x0) returned 1 [0128.118] CloseHandle (hObject=0x19c) returned 1 [0128.118] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0128.119] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242b614 | out: lpMode=0x1242b614) returned 0 [0128.124] WriteFile (in: hFile=0x19c, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x1242b618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x1242b618*=0x108, lpOverlapped=0x0) returned 1 [0128.124] CloseHandle (hObject=0x19c) returned 1 [0128.124] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1274a000*, nNumberOfCharsToWrite=0xb2, lpNumberOfCharsWritten=0x1242b2dc, lpReserved=0x0 | out: lpBuffer=0x1274a000*, lpNumberOfCharsWritten=0x1242b2dc*=0xb2) returned 1 [0128.125] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), fInfoLevelId=0x0, lpFileInformation=0x1242b518 | out: lpFileInformation=0x1242b518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8288d330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82892150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x3b059)) returned 1 [0128.125] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0128.125] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242b614 | out: lpMode=0x1242b614) returned 0 [0128.125] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e220 | out: pbBuffer=0x1240e220) returned 1 [0128.126] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12534002 | out: pbBuffer=0x12534002) returned 1 [0128.127] SetEvent (hEvent=0xb8) returned 1 [0128.127] ReadFile (in: hFile=0x19c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242b624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242b624*=0x3b059, lpOverlapped=0x0) returned 1 [0128.130] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0128.130] SetEvent (hEvent=0xb8) returned 1 [0128.130] SetEvent (hEvent=0xa0) returned 1 [0128.132] GetFileType (hFile=0x19c) returned 0x1 [0128.132] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242b5ec | out: lpNewFilePointer=0x0) returned 1 [0128.132] WriteFile (in: hFile=0x19c, lpBuffer=0x12536000*, nNumberOfBytesToWrite=0x3b059, lpNumberOfBytesWritten=0x1242b608, lpOverlapped=0x1242b614 | out: lpBuffer=0x12536000*, lpNumberOfBytesWritten=0x1242b608*=0x3b059, lpOverlapped=0x1242b614) returned 1 [0128.133] GetFileType (hFile=0x19c) returned 0x1 [0128.133] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x3b059, lpNewFilePointer=0x0, dwMoveMethod=0x1242b5ec | out: lpNewFilePointer=0x0) returned 1 [0128.133] ReadFile (in: hFile=0x19c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242b624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242b624*=0x0, lpOverlapped=0x0) returned 1 [0128.133] CloseHandle (hObject=0x19c) returned 1 [0128.133] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0128.134] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242b614 | out: lpMode=0x1242b614) returned 0 [0128.134] WriteFile (in: hFile=0x19c, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x1242b618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x1242b618*=0x108, lpOverlapped=0x0) returned 1 [0128.134] CloseHandle (hObject=0x19c) returned 1 [0128.134] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xae, lpNumberOfCharsWritten=0x1242b2dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x1242b2dc*=0xae) returned 1 [0128.135] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b518 | out: lpFileInformation=0x1242b518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826545a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e2a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aa3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0128.135] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.135] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b468 | out: lpFindFileData=0x1242b468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.135] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.135] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b460 | out: lpFindFileData=0x1242b460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.135] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.136] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0128.136] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242b664 | out: lpMode=0x1242b664) returned 0 [0128.136] CloseHandle (hObject=0x19c) returned 1 [0128.136] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.137] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b468 | out: lpFindFileData=0x1242b468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.137] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0128.137] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242b728 | out: lpMode=0x1242b728) returned 0 [0128.137] WriteFile (in: hFile=0x19c, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b72c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242b72c*=0x1033, lpOverlapped=0x0) returned 1 [0128.138] CloseHandle (hObject=0x19c) returned 1 [0128.139] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.139] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.139] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.139] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales\\*", lpFindFileData=0x1242b39c | out: lpFindFileData=0x1242b39c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdf809d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdf809d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.139] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdf809d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdf809d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.139] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdf809d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdf809d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdf857f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.139] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0128.139] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0128.139] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0128.139] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0128.139] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0128.139] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0128.139] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0128.139] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0128.139] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0128.139] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0128.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.141] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.141] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.141] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.141] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.142] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.142] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.142] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.143] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.143] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.143] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.143] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.144] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.144] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.144] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.144] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.144] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.144] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.145] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.145] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.145] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.146] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.146] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.146] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.147] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.147] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.147] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.147] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.147] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.147] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.148] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.148] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.148] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.149] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.149] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.149] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.149] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.150] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.150] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.150] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.151] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.151] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.151] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.151] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.151] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.151] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.152] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.152] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.153] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.153] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.153] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.153] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.154] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.154] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.154] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.154] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.154] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.154] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.155] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.155] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.155] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.156] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.156] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.156] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.157] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.157] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.157] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.157] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.157] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.157] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.158] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.158] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.158] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.159] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.159] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.159] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/pl\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.160] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.160] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.160] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/pt_BR\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.160] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.160] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.160] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/pt_PT\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.161] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.161] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.161] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ro\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.162] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.162] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.162] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ru\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.162] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.163] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.163] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/sk\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.163] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.163] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.163] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/sl\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.164] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.164] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.164] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/sr\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.164] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.164] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.164] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/sv\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.165] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.165] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.165] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/th\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.166] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.166] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.166] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/tr\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.167] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.167] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.167] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/uk\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.167] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.167] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.167] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/vi\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.168] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.168] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.168] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/zh_CN\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.169] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.169] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.169] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/zh_TW\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.169] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.169] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.169] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.169] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.169] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3b8 | out: lpFindFileData=0x1242b3b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.170] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.170] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0128.170] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242b5bc | out: lpMode=0x1242b5bc) returned 0 [0128.170] CloseHandle (hObject=0x19c) returned 1 [0128.170] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.170] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.170] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0128.170] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.171] WriteFile (in: hFile=0x19c, lpBuffer=0x12520000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12520000*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.172] CloseHandle (hObject=0x19c) returned 1 [0128.172] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.172] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.172] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.172] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdfd12e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdfd12e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.173] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdfd12e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdfd12e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.173] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdfd12e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdfd12e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdfd12e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.173] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.173] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.173] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.173] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.173] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.173] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0128.173] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.174] ReadFile (in: hFile=0x19c, lpBuffer=0x12534100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12534100*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.176] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376)) returned 1 [0128.176] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.176] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.176] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.176] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.176] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.176] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0128.176] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.177] CloseHandle (hObject=0x128) returned 1 [0128.177] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.177] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.177] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0128.177] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.177] WriteFile (in: hFile=0x128, lpBuffer=0x12522600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12522600*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.179] CloseHandle (hObject=0x128) returned 1 [0128.179] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.179] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.179] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.179] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdfdfd40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdfdfd40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.180] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdfdfd40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdfdfd40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.180] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdfdfd40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdfdfd40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdfe2450, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.180] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.180] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.180] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.180] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.180] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.180] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0128.180] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.180] ReadFile (in: hFile=0x128, lpBuffer=0x12534200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12534200*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.182] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1)) returned 1 [0128.182] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.182] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.182] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.182] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.182] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.182] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0128.183] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.183] CloseHandle (hObject=0x12c) returned 1 [0128.183] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.183] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.183] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0128.183] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.183] WriteFile (in: hFile=0x12c, lpBuffer=0x12524c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12524c00*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.184] CloseHandle (hObject=0x12c) returned 1 [0128.185] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.185] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.185] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.185] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdfee7a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdfee7a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.185] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdfee7a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdfee7a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.185] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdfee7a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdfee7a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdff0eb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.185] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.185] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.185] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.186] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.186] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.186] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0128.186] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.186] ReadFile (in: hFile=0x12c, lpBuffer=0x12534300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12534300*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.188] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297)) returned 1 [0128.188] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.188] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.188] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.188] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.188] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.189] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0128.189] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.189] CloseHandle (hObject=0x17c) returned 1 [0128.189] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.189] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.189] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0128.190] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.190] WriteFile (in: hFile=0x17c, lpBuffer=0x12455300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12455300*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.191] CloseHandle (hObject=0x17c) returned 1 [0128.191] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.191] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.191] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.191] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdffd200, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdffd200, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.191] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdffd200, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdffd200, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.191] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdffd200, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdffd200, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdfff910, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.192] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.192] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.192] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.192] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0128.192] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.192] ReadFile (in: hFile=0x17c, lpBuffer=0x12534400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12534400*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.194] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1 [0128.194] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.194] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.194] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.194] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.194] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.194] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0128.195] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.195] CloseHandle (hObject=0x180) returned 1 [0128.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.195] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0128.195] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.196] WriteFile (in: hFile=0x180, lpBuffer=0x12457900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12457900*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.197] CloseHandle (hObject=0x180) returned 1 [0128.197] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.197] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.197] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.197] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe00bc60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe00bc60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.197] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe00bc60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe00bc60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.197] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe00bc60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe00bc60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe00e370, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.198] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.198] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.198] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.198] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0128.198] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.198] ReadFile (in: hFile=0x180, lpBuffer=0x12534500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x12534500*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.200] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd)) returned 1 [0128.200] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.200] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.200] SetEvent (hEvent=0xa0) returned 1 [0128.200] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.201] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.201] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.201] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0128.201] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.201] CloseHandle (hObject=0x188) returned 1 [0128.201] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.201] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.201] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0128.202] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.202] WriteFile (in: hFile=0x188, lpBuffer=0x124ac000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x124ac000*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.204] CloseHandle (hObject=0x188) returned 1 [0128.204] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.204] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.204] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.204] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe01a6c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe01a6c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.204] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe01a6c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe01a6c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.205] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe01a6c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe01a6c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe01f4e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.205] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.205] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.205] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.205] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.205] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.205] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0128.205] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.206] ReadFile (in: hFile=0x188, lpBuffer=0x1273a000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273a000*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.208] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b)) returned 1 [0128.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.208] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.208] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.208] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0128.208] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.209] CloseHandle (hObject=0x19c) returned 1 [0128.209] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.209] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.209] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0128.210] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.210] WriteFile (in: hFile=0x19c, lpBuffer=0x12455300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12455300*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.211] CloseHandle (hObject=0x19c) returned 1 [0128.211] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.211] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe02df40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe02df40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.211] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe02df40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe02df40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.212] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe02df40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe02df40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe030650, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.212] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.212] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.212] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.212] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.212] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.212] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0128.212] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.212] ReadFile (in: hFile=0x19c, lpBuffer=0x1273a100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273a100*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.214] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1 [0128.214] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.214] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.214] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.214] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.214] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.214] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0128.215] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.215] CloseHandle (hObject=0x128) returned 1 [0128.215] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.215] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.215] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0128.215] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.215] WriteFile (in: hFile=0x128, lpBuffer=0x12457900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12457900*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.216] CloseHandle (hObject=0x128) returned 1 [0128.217] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.217] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.217] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.217] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe03a290, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe03a290, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.217] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe03a290, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe03a290, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.217] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe03a290, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe03a290, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe03f0b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.217] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.218] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.218] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.218] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.218] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.218] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0128.218] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.218] ReadFile (in: hFile=0x128, lpBuffer=0x1273a200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273a200*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.220] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1 [0128.220] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.220] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.220] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.220] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.221] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.221] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0128.221] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.221] CloseHandle (hObject=0x12c) returned 1 [0128.221] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.221] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.221] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0128.221] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.222] WriteFile (in: hFile=0x12c, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.223] CloseHandle (hObject=0x12c) returned 1 [0128.223] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.223] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.223] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.223] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe04b400, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe04b400, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe04b400, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe04b400, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe04b400, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe04b400, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe04db10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.223] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.224] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.224] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.224] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.224] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0128.224] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.224] ReadFile (in: hFile=0x12c, lpBuffer=0x1273a300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273a300*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.226] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1 [0128.226] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.226] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.226] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.226] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.226] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.226] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0128.226] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.226] CloseHandle (hObject=0x17c) returned 1 [0128.227] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.227] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.227] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0128.227] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.227] WriteFile (in: hFile=0x17c, lpBuffer=0x124ad300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x124ad300*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.229] CloseHandle (hObject=0x17c) returned 1 [0128.229] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.229] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.229] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.229] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe057750, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe057750, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe057750, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe057750, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe057750, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe057750, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe05c570, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.229] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.230] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.230] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.230] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.230] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.230] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0128.230] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.230] ReadFile (in: hFile=0x17c, lpBuffer=0x1273a400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273a400*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.233] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b)) returned 1 [0128.233] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.233] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.234] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.234] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.234] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.234] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0128.234] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.234] CloseHandle (hObject=0x180) returned 1 [0128.234] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.234] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.234] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0128.235] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.235] WriteFile (in: hFile=0x180, lpBuffer=0x124af900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x124af900*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.236] CloseHandle (hObject=0x180) returned 1 [0128.236] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.236] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.236] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.237] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe0688c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0688c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.237] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe0688c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0688c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.237] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe0688c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe0688c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe06d6e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.237] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.237] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.237] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.237] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.237] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.237] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0128.237] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.238] ReadFile (in: hFile=0x180, lpBuffer=0x1273a500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273a500*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.239] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261)) returned 1 [0128.239] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.239] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.239] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.239] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.239] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.239] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0128.240] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.240] CloseHandle (hObject=0x18c) returned 1 [0128.240] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.240] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.240] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0128.240] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.241] WriteFile (in: hFile=0x18c, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.242] CloseHandle (hObject=0x18c) returned 1 [0128.242] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.242] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.242] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.242] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe077320, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe077320, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.242] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe077320, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe077320, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.242] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe077320, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe077320, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe079a30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.242] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.243] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.243] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.243] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.243] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.243] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0128.243] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.243] ReadFile (in: hFile=0x18c, lpBuffer=0x1273a600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273a600*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.245] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1)) returned 1 [0128.245] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.245] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.245] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.245] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.245] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.245] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0128.245] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.245] CloseHandle (hObject=0x138) returned 1 [0128.246] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.246] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.246] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0128.246] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.246] WriteFile (in: hFile=0x138, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.247] CloseHandle (hObject=0x138) returned 1 [0128.248] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.248] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.248] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.248] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe083670, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe083670, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.248] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe083670, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe083670, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.248] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe083670, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe083670, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe088490, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.248] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.248] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.248] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.249] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.249] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.249] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0128.249] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.249] ReadFile (in: hFile=0x138, lpBuffer=0x1273a700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273a700*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.251] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4)) returned 1 [0128.251] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.251] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.251] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.251] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.251] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.251] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0128.251] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.251] CloseHandle (hObject=0x184) returned 1 [0128.252] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.252] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.252] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0128.252] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.252] WriteFile (in: hFile=0x184, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.254] CloseHandle (hObject=0x184) returned 1 [0128.254] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.254] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.254] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.254] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe0920d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0920d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.254] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe0920d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0920d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.254] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe0920d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe0920d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe096ef0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.254] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.254] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.254] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.255] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.255] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.255] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0128.255] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.255] ReadFile (in: hFile=0x184, lpBuffer=0x1273a800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273a800*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.257] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4)) returned 1 [0128.257] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.257] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.257] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.257] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.257] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.257] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0128.257] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.257] CloseHandle (hObject=0x15c) returned 1 [0128.258] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.258] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.258] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0128.258] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.258] WriteFile (in: hFile=0x15c, lpBuffer=0x12491300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12491300*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.259] CloseHandle (hObject=0x15c) returned 1 [0128.260] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.260] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.260] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.260] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe0a0b30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0a0b30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.260] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe0a0b30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0a0b30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.260] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe0a0b30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe0a0b30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0a5950, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.260] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.260] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.260] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.260] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.261] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.261] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0128.261] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.261] ReadFile (in: hFile=0x15c, lpBuffer=0x1273a900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273a900*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.263] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad)) returned 1 [0128.263] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.263] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.263] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.263] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.263] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.263] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.263] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.263] CloseHandle (hObject=0x150) returned 1 [0128.263] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.264] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.264] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.264] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.264] WriteFile (in: hFile=0x150, lpBuffer=0x12493900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12493900*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.265] CloseHandle (hObject=0x150) returned 1 [0128.265] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.266] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.266] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.266] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe0af590, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0af590, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.266] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe0af590, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0af590, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.266] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe0af590, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe0af590, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0b43b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.266] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.266] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.266] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.266] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.266] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.266] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.267] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.267] ReadFile (in: hFile=0x150, lpBuffer=0x1273aa00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273aa00*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.268] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279)) returned 1 [0128.269] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.269] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.269] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.269] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.269] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.269] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0128.269] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.269] CloseHandle (hObject=0xfc) returned 1 [0128.269] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.269] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.270] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0128.270] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.270] WriteFile (in: hFile=0xfc, lpBuffer=0x1273c000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x1273c000*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.271] CloseHandle (hObject=0xfc) returned 1 [0128.271] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.271] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.272] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.272] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe0bdff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0bdff0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.272] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe0bdff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0bdff0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.272] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe0bdff0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe0bdff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0c2e10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.272] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.272] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.272] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.272] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.272] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.272] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0128.273] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.273] ReadFile (in: hFile=0xfc, lpBuffer=0x1273ab00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273ab00*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.276] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6)) returned 1 [0128.276] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.277] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.277] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.277] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.277] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.277] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0128.277] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.277] CloseHandle (hObject=0x104) returned 1 [0128.277] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.277] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.277] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0128.278] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.278] WriteFile (in: hFile=0x104, lpBuffer=0x1273e600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x1273e600*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.279] CloseHandle (hObject=0x104) returned 1 [0128.279] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.279] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.280] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.280] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe0cf160, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0cf160, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.280] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe0cf160, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0cf160, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.280] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe0cf160, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe0cf160, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0d3f80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.280] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.280] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.280] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.280] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.280] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.280] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0128.281] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.281] ReadFile (in: hFile=0x104, lpBuffer=0x1273ac00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273ac00*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.294] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1 [0128.294] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.294] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.294] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.294] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.294] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.294] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0128.295] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.295] CloseHandle (hObject=0xf0) returned 1 [0128.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.295] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0128.295] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.295] WriteFile (in: hFile=0xf0, lpBuffer=0x12740c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12740c00*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.296] CloseHandle (hObject=0xf0) returned 1 [0128.297] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.297] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.297] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.297] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe0f6260, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0f6260, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.297] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe0f6260, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0f6260, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.297] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe0f6260, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe0f6260, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe0f8970, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.297] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.297] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.297] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.297] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.298] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.298] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0128.298] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.298] ReadFile (in: hFile=0xf0, lpBuffer=0x1273ad00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273ad00*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.300] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e)) returned 1 [0128.300] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.300] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.300] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.300] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.300] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.300] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0128.300] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.300] CloseHandle (hObject=0xe4) returned 1 [0128.300] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.301] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.301] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0128.301] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.301] WriteFile (in: hFile=0xe4, lpBuffer=0x12599300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12599300*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.302] CloseHandle (hObject=0xe4) returned 1 [0128.302] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.302] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.303] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.303] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe1025b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1025b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe1025b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1025b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe1025b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe1025b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1073d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.303] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.303] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.303] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.303] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0128.304] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.304] ReadFile (in: hFile=0xe4, lpBuffer=0x1273ae00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273ae00*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.305] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a)) returned 1 [0128.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.306] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.306] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.306] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0128.306] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.306] CloseHandle (hObject=0x100) returned 1 [0128.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.306] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0128.307] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.307] WriteFile (in: hFile=0x100, lpBuffer=0x1259b900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x1259b900*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.308] CloseHandle (hObject=0x100) returned 1 [0128.308] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.308] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.309] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.309] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe111010, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe111010, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.309] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe111010, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe111010, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.309] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe111010, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe111010, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe115e30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.309] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.309] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.309] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.309] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.309] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.309] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0128.309] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.310] ReadFile (in: hFile=0x100, lpBuffer=0x1273af00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273af00*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.311] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d)) returned 1 [0128.311] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.311] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.311] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.312] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.312] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.312] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0128.312] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.312] CloseHandle (hObject=0x120) returned 1 [0128.312] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.312] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.312] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0128.313] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.313] WriteFile (in: hFile=0x120, lpBuffer=0x1274e000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x1274e000*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.314] CloseHandle (hObject=0x120) returned 1 [0128.315] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.315] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.315] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.315] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe11fa70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe11fa70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe11fa70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe11fa70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe11fa70, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe11fa70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe124890, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.315] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.315] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.315] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.316] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0128.316] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.316] ReadFile (in: hFile=0x120, lpBuffer=0x1273b000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273b000*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.317] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae)) returned 1 [0128.317] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.318] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.318] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.318] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.318] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.318] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0128.318] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.318] CloseHandle (hObject=0x158) returned 1 [0128.318] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.318] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.319] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0128.319] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.319] WriteFile (in: hFile=0x158, lpBuffer=0x12750600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12750600*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.320] CloseHandle (hObject=0x158) returned 1 [0128.320] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.320] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.321] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.321] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe12e4d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe12e4d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.321] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe12e4d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe12e4d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.321] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe12e4d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe12e4d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1332f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.321] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.321] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.321] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.321] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.321] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.321] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0128.322] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.322] ReadFile (in: hFile=0x158, lpBuffer=0x1273b100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273b100*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.323] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb)) returned 1 [0128.323] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.323] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.323] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.323] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.324] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.324] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0128.324] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.324] CloseHandle (hObject=0xf8) returned 1 [0128.324] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.324] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.324] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0128.330] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.330] WriteFile (in: hFile=0xf8, lpBuffer=0x12752c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x12752c00*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.331] CloseHandle (hObject=0xf8) returned 1 [0128.331] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.331] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.331] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.331] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe149280, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe149280, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.332] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe149280, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe149280, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.332] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe13cf30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe13cf30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe14b990, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.332] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.332] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.332] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.332] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.332] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.332] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0128.332] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.333] ReadFile (in: hFile=0xf8, lpBuffer=0x1273b200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273b200*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.341] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284)) returned 1 [0128.341] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.341] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.341] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.341] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b310 | out: lpFindFileData=0x1242b310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.342] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.342] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nb/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0128.342] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x1242b514 | out: lpMode=0x1242b514) returned 0 [0128.342] CloseHandle (hObject=0x130) returned 1 [0128.342] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.342] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b3c0 | out: lpFindFileData=0x1242b3c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.342] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0128.342] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x1242b680 | out: lpMode=0x1242b680) returned 0 [0128.343] WriteFile (in: hFile=0x130, lpBuffer=0x1275f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242b684, lpOverlapped=0x0 | out: lpBuffer=0x1275f300*, lpNumberOfBytesWritten=0x1242b684*=0x1033, lpOverlapped=0x0) returned 1 [0128.344] CloseHandle (hObject=0x130) returned 1 [0128.344] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.344] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.344] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.345] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl\\*", lpFindFileData=0x1242b2f4 | out: lpFindFileData=0x1242b2f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe15a3f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe15a3f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.345] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe15a3f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe15a3f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.345] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe15a3f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe15a3f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe15cb00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.345] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.345] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.345] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.345] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.345] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.345] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0128.345] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x1242b5e0 | out: lpMode=0x1242b5e0) returned 0 [0128.346] ReadFile (in: hFile=0x130, lpBuffer=0x1273b300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242b5f0, lpOverlapped=0x0 | out: lpBuffer=0x1273b300*, lpNumberOfBytesRead=0x1242b5f0*=0x100, lpOverlapped=0x0) returned 1 [0128.347] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242b3c8 | out: lpFileInformation=0x1242b3c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1 [0128.347] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.348] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242b318 | out: lpFindFileData=0x1242b318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.350] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.350] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe168e50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe168e50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.350] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe168e50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe168e50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe16b560, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.350] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.350] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.350] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.354] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/pt_BR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.354] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe172a90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe172a90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.354] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe172a90, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe172a90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1751a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.354] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.354] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.354] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.358] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/pt_PT\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.360] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe17c6d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe17c6d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.360] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe17c6d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe17c6d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe17ede0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.360] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827af080, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.360] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.360] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.363] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ro\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.364] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe188a20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe188a20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.364] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe188a20, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe188a20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe18b130, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.364] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827b65b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.364] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.364] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.367] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/ru\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.367] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe18ff50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe18ff50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.368] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe18ff50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe18ff50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe194d70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.368] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827cc540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cec50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.368] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.368] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.371] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/sk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.371] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe199b90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe199b90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.371] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe199b90, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe199b90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe19c2a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.371] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827e72f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e9a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.371] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.371] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.375] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/sl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.375] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe1a37d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1a37d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.375] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe1a37d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe1a37d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1a5ee0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.375] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827fab70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fd280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.375] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.375] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.379] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/sr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.379] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe1ad410, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1ad410, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.379] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe1ad410, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe1ad410, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1afb20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.379] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8280e3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82821c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.379] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.379] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.383] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/sv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.383] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe1b7050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1b7050, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.383] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe1b7050, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe1b7050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1b9760, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.383] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828306d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8283ca20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.383] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.383] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.386] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/th\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.387] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe1be580, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1be580, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.387] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe1be580, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe1be580, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1c33a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.387] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828529b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.387] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.387] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.390] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/tr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.390] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe1c81c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1c81c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.390] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe1c81c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe1c81c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1ca8d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.390] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82866230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.390] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.391] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.394] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/uk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.394] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe1d1e00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1d1e00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.394] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe1d1e00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe1d1e00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1d4510, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.394] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8286d760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.394] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.394] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.398] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/vi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.398] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe1dba40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1dba40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.398] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe1dba40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe1dba40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1de150, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.398] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82874c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.398] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.398] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.402] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/zh_CN\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.402] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe1e5680, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1e5680, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.402] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe1e5680, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe1e5680, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1e7d90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.402] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8287e8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.402] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.402] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.406] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_locales/zh_TW\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe1ef2c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1ef2c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe1ef2c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe1ef2c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe1f19d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82885e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b370 | out: lpFindFileData=0x1242b370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.407] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.416] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/_metadata\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.416] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe207960, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe207960, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.416] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe207960, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe207960, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe20a070, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.416] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828e9f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0128.416] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.416] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.420] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/css\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe2115a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe2115a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe2115a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe2115a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe2163c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 1 [0128.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.421] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.426] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/html\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.426] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe21d8f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe21d8f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.426] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe21d8f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe21d8f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe220000, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.426] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 1 [0128.426] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x1242b418 | out: lpFindFileData=0x1242b418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.426] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.429] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e840 | out: pbBuffer=0x1249e840) returned 1 [0128.430] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127e2602 | out: pbBuffer=0x127e2602) returned 1 [0128.430] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127e26d1 | out: pbBuffer=0x127e26d1) returned 1 [0128.432] SetEvent (hEvent=0xb8) returned 1 [0128.432] ReadFile (in: hFile=0x98, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1254957c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1254957c*=0x32a, lpOverlapped=0x0) returned 1 [0128.432] GetFileType (hFile=0x98) returned 0x1 [0128.432] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12549544 | out: lpNewFilePointer=0x0) returned 1 [0128.432] WriteFile (in: hFile=0x98, lpBuffer=0x12558000*, nNumberOfBytesToWrite=0x32a, lpNumberOfBytesWritten=0x12549560, lpOverlapped=0x1254956c | out: lpBuffer=0x12558000*, lpNumberOfBytesWritten=0x12549560*=0x32a, lpOverlapped=0x1254956c) returned 1 [0128.432] GetFileType (hFile=0x98) returned 0x1 [0128.432] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x32a, lpNewFilePointer=0x0, dwMoveMethod=0x12549544 | out: lpNewFilePointer=0x0) returned 1 [0128.432] ReadFile (in: hFile=0x98, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1254957c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1254957c*=0x0, lpOverlapped=0x0) returned 1 [0128.433] CloseHandle (hObject=0x98) returned 1 [0128.433] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/html/craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0128.433] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x1254956c | out: lpMode=0x1254956c) returned 0 [0128.433] WriteFile (in: hFile=0x98, lpBuffer=0x127ddb00*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12549570, lpOverlapped=0x0 | out: lpBuffer=0x127ddb00*, lpNumberOfBytesWritten=0x12549570*=0x108, lpOverlapped=0x0) returned 1 [0128.433] CloseHandle (hObject=0x98) returned 1 [0128.434] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248d200*, nNumberOfCharsToWrite=0xb5, lpNumberOfCharsWritten=0x12549234, lpReserved=0x0 | out: lpBuffer=0x1248d200*, lpNumberOfCharsWritten=0x12549234*=0xb5) returned 1 [0128.435] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/html/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.435] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/html/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x125493c0 | out: lpFindFileData=0x125493c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.435] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/html/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.435] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/html/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x125493b8 | out: lpFindFileData=0x125493b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.435] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/html/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.435] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/html/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0128.435] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x125495bc | out: lpMode=0x125495bc) returned 0 [0128.439] CloseHandle (hObject=0x98) returned 1 [0128.439] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.440] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12549468 | out: lpFindFileData=0x12549468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.440] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0128.440] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12549728 | out: lpMode=0x12549728) returned 0 [0128.441] WriteFile (in: hFile=0x98, lpBuffer=0x12455300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1254972c, lpOverlapped=0x0 | out: lpBuffer=0x12455300*, lpNumberOfBytesWritten=0x1254972c*=0x1033, lpOverlapped=0x0) returned 1 [0128.442] CloseHandle (hObject=0x98) returned 1 [0128.442] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.442] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.442] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.442] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images\\*", lpFindFileData=0x1254939c | out: lpFindFileData=0x1254939c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe2449f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe2449f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.443] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12549418 | out: lpFindFileData=0x12549418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe2449f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe2449f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.443] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12549418 | out: lpFindFileData=0x12549418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe2449f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe2449f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe247100, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.443] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12549418 | out: lpFindFileData=0x12549418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="flapper.gif", cAlternateFileName="")) returned 1 [0128.443] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12549418 | out: lpFindFileData=0x12549418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0128.443] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12549418 | out: lpFindFileData=0x12549418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0128.443] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12549418 | out: lpFindFileData=0x12549418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button.png", cAlternateFileName="TOPBAR~1.PNG")) returned 1 [0128.443] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12549418 | out: lpFindFileData=0x12549418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_close.png", cAlternateFileName="TOPBAR~2.PNG")) returned 1 [0128.443] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12549418 | out: lpFindFileData=0x12549418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_hover.png", cAlternateFileName="TOPBAR~3.PNG")) returned 1 [0128.443] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12549418 | out: lpFindFileData=0x12549418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_maximize.png", cAlternateFileName="TOPBAR~4.PNG")) returned 1 [0128.443] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12549418 | out: lpFindFileData=0x12549418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 1 [0128.443] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12549418 | out: lpFindFileData=0x12549418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.443] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.443] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.443] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x125493c0 | out: lpFindFileData=0x125493c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.443] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0128.444] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12549688 | out: lpMode=0x12549688) returned 0 [0128.444] ReadFile (in: hFile=0x98, lpBuffer=0x1247c000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12549698, lpOverlapped=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfBytesRead=0x12549698*=0x100, lpOverlapped=0x0) returned 1 [0128.447] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0128.447] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12549688 | out: lpMode=0x12549688) returned 0 [0128.447] ReadFile (in: hFile=0x188, lpBuffer=0x1247c100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12549698, lpOverlapped=0x0 | out: lpBuffer=0x1247c100*, lpNumberOfBytesRead=0x12549698*=0x100, lpOverlapped=0x0) returned 1 [0128.449] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0128.450] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12549688 | out: lpMode=0x12549688) returned 0 [0128.450] ReadFile (in: hFile=0x100, lpBuffer=0x1247c200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12549698, lpOverlapped=0x0 | out: lpBuffer=0x1247c200*, lpNumberOfBytesRead=0x12549698*=0x100, lpOverlapped=0x0) returned 1 [0128.451] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0128.451] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12549688 | out: lpMode=0x12549688) returned 0 [0128.451] ReadFile (in: hFile=0x120, lpBuffer=0x1247c300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12549698, lpOverlapped=0x0 | out: lpBuffer=0x1247c300*, lpNumberOfBytesRead=0x12549698*=0xa0, lpOverlapped=0x0) returned 1 [0128.452] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0128.453] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12549688 | out: lpMode=0x12549688) returned 0 [0128.453] ReadFile (in: hFile=0x158, lpBuffer=0x1247c400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12549698, lpOverlapped=0x0 | out: lpBuffer=0x1247c400*, lpNumberOfBytesRead=0x12549698*=0xfc, lpOverlapped=0x0) returned 1 [0128.454] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0128.454] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12549688 | out: lpMode=0x12549688) returned 0 [0128.454] ReadFile (in: hFile=0xf8, lpBuffer=0x1247c500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12549698, lpOverlapped=0x0 | out: lpBuffer=0x1247c500*, lpNumberOfBytesRead=0x12549698*=0xa0, lpOverlapped=0x0) returned 1 [0128.455] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0128.455] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12549688 | out: lpMode=0x12549688) returned 0 [0128.455] ReadFile (in: hFile=0x130, lpBuffer=0x1247c600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12549698, lpOverlapped=0x0 | out: lpBuffer=0x1247c600*, lpNumberOfBytesRead=0x12549698*=0xa6, lpOverlapped=0x0) returned 1 [0128.456] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0128.456] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12549688 | out: lpMode=0x12549688) returned 0 [0128.457] ReadFile (in: hFile=0x134, lpBuffer=0x1247c700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12549698, lpOverlapped=0x0 | out: lpBuffer=0x1247c700*, lpNumberOfBytesRead=0x12549698*=0xa0, lpOverlapped=0x0) returned 1 [0128.458] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), fInfoLevelId=0x0, lpFileInformation=0x12549470 | out: lpFileInformation=0x12549470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc)) returned 1 [0128.458] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.458] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1254956c | out: lpMode=0x1254956c) returned 0 [0128.458] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e120 | out: pbBuffer=0x1249e120) returned 1 [0128.459] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1247c802 | out: pbBuffer=0x1247c802) returned 1 [0128.459] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1247c8ca | out: pbBuffer=0x1247c8ca) returned 1 [0128.460] SetEvent (hEvent=0x6c) returned 1 [0128.460] ReadFile (in: hFile=0x150, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1254957c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1254957c*=0x112dc, lpOverlapped=0x0) returned 1 [0128.461] GetFileType (hFile=0x150) returned 0x1 [0128.461] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12549544 | out: lpNewFilePointer=0x0) returned 1 [0128.461] WriteFile (in: hFile=0x150, lpBuffer=0x1273a000*, nNumberOfBytesToWrite=0x112dc, lpNumberOfBytesWritten=0x12549560, lpOverlapped=0x1254956c | out: lpBuffer=0x1273a000*, lpNumberOfBytesWritten=0x12549560*=0x112dc, lpOverlapped=0x1254956c) returned 1 [0128.461] GetFileType (hFile=0x150) returned 0x1 [0128.461] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0x112dc, lpNewFilePointer=0x0, dwMoveMethod=0x12549544 | out: lpNewFilePointer=0x0) returned 1 [0128.461] ReadFile (in: hFile=0x150, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1254957c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1254957c*=0x0, lpOverlapped=0x0) returned 1 [0128.462] CloseHandle (hObject=0x150) returned 1 [0128.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.462] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1254956c | out: lpMode=0x1254956c) returned 0 [0128.462] WriteFile (in: hFile=0x150, lpBuffer=0x127dcfc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12549570, lpOverlapped=0x0 | out: lpBuffer=0x127dcfc0*, lpNumberOfBytesWritten=0x12549570*=0x108, lpOverlapped=0x0) returned 1 [0128.462] CloseHandle (hObject=0x150) returned 1 [0128.463] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c180*, nNumberOfCharsToWrite=0xb2, lpNumberOfCharsWritten=0x12549234, lpReserved=0x0 | out: lpBuffer=0x1248c180*, lpNumberOfCharsWritten=0x12549234*=0xb2) returned 1 [0128.464] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x12549470 | out: lpFileInformation=0x12549470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109)) returned 1 [0128.464] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.464] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1254956c | out: lpMode=0x1254956c) returned 0 [0128.465] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0128.466] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0128.466] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc019 | out: pbBuffer=0x124bc019) returned 1 [0128.467] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0128.467] SetEvent (hEvent=0xb8) returned 1 [0128.467] ReadFile (in: hFile=0x150, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1254957c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1254957c*=0x1109, lpOverlapped=0x0) returned 1 [0128.468] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0128.468] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0128.468] SetEvent (hEvent=0xb8) returned 1 [0128.468] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0128.468] GetFileType (hFile=0x150) returned 0x1 [0128.469] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0128.469] WriteFile (in: hFile=0x150, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1109, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x12429560*=0x1109, lpOverlapped=0x1242956c) returned 1 [0128.469] GetFileType (hFile=0x150) returned 0x1 [0128.469] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0x1109, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0128.469] ReadFile (in: hFile=0x150, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0128.469] CloseHandle (hObject=0x150) returned 1 [0128.469] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.470] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0128.470] WriteFile (in: hFile=0x150, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0128.470] CloseHandle (hObject=0x150) returned 1 [0128.470] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xb3, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x12429234*=0xb3) returned 1 [0128.471] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x12429470 | out: lpFileInformation=0x12429470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c)) returned 1 [0128.471] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.471] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0128.471] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e040 | out: pbBuffer=0x1249e040) returned 1 [0128.472] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc102 | out: pbBuffer=0x124bc102) returned 1 [0128.473] SetEvent (hEvent=0xa0) returned 1 [0128.473] ReadFile (in: hFile=0x150, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1249757c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1249757c*=0x22c, lpOverlapped=0x0) returned 1 [0128.474] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0128.474] SetEvent (hEvent=0xa0) returned 1 [0128.474] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0128.474] GetFileType (hFile=0x150) returned 0x1 [0128.474] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0128.474] WriteFile (in: hFile=0x150, lpBuffer=0x12466000*, nNumberOfBytesToWrite=0x22c, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x12466000*, lpNumberOfBytesWritten=0x12429560*=0x22c, lpOverlapped=0x1242956c) returned 1 [0128.475] GetFileType (hFile=0x150) returned 0x1 [0128.475] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0x22c, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0128.475] ReadFile (in: hFile=0x150, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0128.475] CloseHandle (hObject=0x150) returned 1 [0128.475] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.475] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0128.475] WriteFile (in: hFile=0x150, lpBuffer=0x124666c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x124666c0*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0128.476] CloseHandle (hObject=0x150) returned 1 [0128.476] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xb2, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x12429234*=0xb2) returned 1 [0128.476] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), fInfoLevelId=0x0, lpFileInformation=0x12429470 | out: lpFileInformation=0x12429470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0128.477] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.477] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0128.477] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0128.478] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0128.479] SetEvent (hEvent=0xb8) returned 1 [0128.479] ReadFile (in: hFile=0x150, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1249757c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1249757c*=0xa0, lpOverlapped=0x0) returned 1 [0128.479] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0128.479] SetEvent (hEvent=0xb8) returned 1 [0128.479] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0128.479] GetFileType (hFile=0x150) returned 0x1 [0128.479] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0128.479] WriteFile (in: hFile=0x150, lpBuffer=0x124b4000*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x124b4000*, lpNumberOfBytesWritten=0x12429560*=0xa0, lpOverlapped=0x1242956c) returned 1 [0128.480] GetFileType (hFile=0x150) returned 0x1 [0128.480] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0128.480] ReadFile (in: hFile=0x150, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0128.480] CloseHandle (hObject=0x150) returned 1 [0128.480] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.480] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0128.480] WriteFile (in: hFile=0x150, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0128.480] CloseHandle (hObject=0x150) returned 1 [0128.481] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xc1, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x12429234*=0xc1) returned 1 [0128.481] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), fInfoLevelId=0x0, lpFileInformation=0x12429470 | out: lpFileInformation=0x12429470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc)) returned 1 [0128.481] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.481] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0128.481] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0128.482] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0128.482] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc102 | out: pbBuffer=0x124bc102) returned 1 [0128.483] SetEvent (hEvent=0xa0) returned 1 [0128.483] ReadFile (in: hFile=0x150, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1249757c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1249757c*=0xfc, lpOverlapped=0x0) returned 1 [0128.484] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0128.484] SetEvent (hEvent=0xa0) returned 1 [0128.484] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0128.484] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0128.484] GetFileType (hFile=0x150) returned 0x1 [0128.484] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0128.484] WriteFile (in: hFile=0x150, lpBuffer=0x124bc000*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x124bc000*, lpNumberOfBytesWritten=0x12429560*=0xfc, lpOverlapped=0x1242956c) returned 1 [0128.485] GetFileType (hFile=0x150) returned 0x1 [0128.485] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0128.485] ReadFile (in: hFile=0x150, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0128.485] CloseHandle (hObject=0x150) returned 1 [0128.485] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.485] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0128.485] WriteFile (in: hFile=0x150, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0128.485] CloseHandle (hObject=0x150) returned 1 [0128.486] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0xc7, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x12429234*=0xc7) returned 1 [0128.486] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x12429470 | out: lpFileInformation=0x12429470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0128.486] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.486] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0128.486] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0128.487] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0128.487] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc302 | out: pbBuffer=0x124bc302) returned 1 [0128.488] SetEvent (hEvent=0xb8) returned 1 [0128.488] ReadFile (in: hFile=0x150, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1249757c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1249757c*=0xa0, lpOverlapped=0x0) returned 1 [0128.489] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0128.489] SetEvent (hEvent=0xb8) returned 1 [0128.489] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0128.489] GetFileType (hFile=0x150) returned 0x1 [0128.489] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0128.489] WriteFile (in: hFile=0x150, lpBuffer=0x124b4000*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x124b4000*, lpNumberOfBytesWritten=0x12429560*=0xa0, lpOverlapped=0x1242956c) returned 1 [0128.489] GetFileType (hFile=0x150) returned 0x1 [0128.489] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0128.489] ReadFile (in: hFile=0x150, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0128.489] CloseHandle (hObject=0x150) returned 1 [0128.490] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.490] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0128.490] WriteFile (in: hFile=0x150, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0128.490] CloseHandle (hObject=0x150) returned 1 [0128.490] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0xc7, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x12429234*=0xc7) returned 1 [0128.491] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), fInfoLevelId=0x0, lpFileInformation=0x12429470 | out: lpFileInformation=0x12429470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6)) returned 1 [0128.491] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.491] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0128.491] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0128.492] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0128.492] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0128.493] SetEvent (hEvent=0xa0) returned 1 [0128.493] ReadFile (in: hFile=0x150, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1249757c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1249757c*=0xa6, lpOverlapped=0x0) returned 1 [0128.494] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0128.494] SetEvent (hEvent=0xa0) returned 1 [0128.494] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0128.494] GetFileType (hFile=0x150) returned 0x1 [0128.494] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0128.494] WriteFile (in: hFile=0x150, lpBuffer=0x127fc000*, nNumberOfBytesToWrite=0xa6, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x127fc000*, lpNumberOfBytesWritten=0x12429560*=0xa6, lpOverlapped=0x1242956c) returned 1 [0128.494] GetFileType (hFile=0x150) returned 0x1 [0128.494] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0xa6, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0128.494] ReadFile (in: hFile=0x150, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0128.495] CloseHandle (hObject=0x150) returned 1 [0128.495] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.495] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0128.495] WriteFile (in: hFile=0x150, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0128.495] CloseHandle (hObject=0x150) returned 1 [0128.495] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0xca, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x12429234*=0xca) returned 1 [0128.496] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x12429470 | out: lpFileInformation=0x12429470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0128.496] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.496] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0128.496] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0128.497] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc102 | out: pbBuffer=0x124bc102) returned 1 [0128.498] SetEvent (hEvent=0xb8) returned 1 [0128.498] ReadFile (in: hFile=0x150, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1249757c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1249757c*=0xa0, lpOverlapped=0x0) returned 1 [0128.498] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0128.499] SetEvent (hEvent=0xb8) returned 1 [0128.499] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0128.499] GetFileType (hFile=0x150) returned 0x1 [0128.499] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0128.499] WriteFile (in: hFile=0x150, lpBuffer=0x124b4000*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x124b4000*, lpNumberOfBytesWritten=0x12429560*=0xa0, lpOverlapped=0x1242956c) returned 1 [0128.499] GetFileType (hFile=0x150) returned 0x1 [0128.499] SetFilePointerEx (in: hFile=0x150, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0128.499] ReadFile (in: hFile=0x150, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0128.499] CloseHandle (hObject=0x150) returned 1 [0128.500] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.500] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0128.500] WriteFile (in: hFile=0x150, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0128.500] CloseHandle (hObject=0x150) returned 1 [0128.500] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0xc9, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x12429234*=0xc9) returned 1 [0128.501] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.501] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.501] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.501] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293b8 | out: lpFindFileData=0x124293b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.501] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.501] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.2_0/images/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.501] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x124295bc | out: lpMode=0x124295bc) returned 0 [0128.501] CloseHandle (hObject=0x150) returned 1 [0128.502] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.502] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.502] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.502] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.502] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.502] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.502] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0128.502] CloseHandle (hObject=0x150) returned 1 [0128.503] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.503] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.503] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.503] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0128.503] WriteFile (in: hFile=0x150, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0128.504] CloseHandle (hObject=0x150) returned 1 [0128.504] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.505] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.505] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.505] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe2d98c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe2d98c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.505] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe2d98c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe2d98c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.505] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 1 [0128.505] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe2d98c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe2d98c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe2de6e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.505] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.505] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.505] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.505] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.507] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.508] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.508] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.508] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.508] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.509] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.509] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x124297d0 | out: lpMode=0x124297d0) returned 0 [0128.509] WriteFile (in: hFile=0x150, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124297d4, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x124297d4*=0x1033, lpOverlapped=0x0) returned 1 [0128.511] CloseHandle (hObject=0x150) returned 1 [0128.511] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.511] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.511] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.511] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0\\*", lpFindFileData=0x12429444 | out: lpFindFileData=0x12429444*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe2e8320, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe2e8320, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.511] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe2e8320, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe2e8320, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.511] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x180f, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0128.511] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe2e8320, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe2e8320, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe2ed140, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.512] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x869b0fb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0128.512] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0128.512] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0128.512] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.512] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.512] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.513] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0128.513] ReadFile (in: hFile=0x150, lpBuffer=0x124bc600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x124bc600*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0128.515] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.515] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.515] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.515] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.517] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.517] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.517] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_metadata\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.518] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.518] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0128.519] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0128.519] ReadFile (in: hFile=0x98, lpBuffer=0x124bc700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x124bc700*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0128.520] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x180f)) returned 1 [0128.520] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0128.520] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0128.521] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e2a0 | out: pbBuffer=0x1249e2a0) returned 1 [0128.521] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc802 | out: pbBuffer=0x124bc802) returned 1 [0128.521] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc86a | out: pbBuffer=0x124bc86a) returned 1 [0128.523] SetEvent (hEvent=0xa0) returned 1 [0128.523] ReadFile (in: hFile=0x188, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x180f, lpOverlapped=0x0) returned 1 [0128.523] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0128.523] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0128.523] SetEvent (hEvent=0xa0) returned 1 [0128.523] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0128.524] GetFileType (hFile=0x188) returned 0x1 [0128.524] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0128.524] WriteFile (in: hFile=0x188, lpBuffer=0x12490000*, nNumberOfBytesToWrite=0x180f, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x12490000*, lpNumberOfBytesWritten=0x12429608*=0x180f, lpOverlapped=0x12429614) returned 1 [0128.524] GetFileType (hFile=0x188) returned 0x1 [0128.524] SetFilePointerEx (in: hFile=0x188, liDistanceToMove=0x180f, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0128.524] ReadFile (in: hFile=0x188, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0128.524] CloseHandle (hObject=0x188) returned 1 [0128.525] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0128.525] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0128.525] WriteFile (in: hFile=0x188, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0128.525] CloseHandle (hObject=0x188) returned 1 [0128.525] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa3, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124292dc*=0xa3) returned 1 [0128.526] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x869b0fb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x310)) returned 1 [0128.526] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.526] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.526] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.526] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.526] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.526] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0128.526] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0128.526] CloseHandle (hObject=0x188) returned 1 [0128.527] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.527] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.527] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0128.528] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12429728 | out: lpMode=0x12429728) returned 0 [0128.528] WriteFile (in: hFile=0x188, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242972c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242972c*=0x1033, lpOverlapped=0x0) returned 1 [0128.529] CloseHandle (hObject=0x188) returned 1 [0128.529] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.529] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.530] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.530] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales\\*", lpFindFileData=0x1242939c | out: lpFindFileData=0x1242939c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe316950, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe316950, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe316950, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe316950, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe316950, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe316950, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe31b770, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0128.530] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0128.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.531] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.531] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.531] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.532] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.532] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.532] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.533] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.533] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.533] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.533] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.533] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.534] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.534] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.534] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.535] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.535] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.535] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.536] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.536] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.536] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.537] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.537] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.537] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.538] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.538] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.538] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.539] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.539] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.539] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.539] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.539] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.539] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.540] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.540] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.540] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.541] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.541] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.541] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.542] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.542] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.542] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.542] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.542] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.542] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.543] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.543] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.543] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.543] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.543] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.543] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.544] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.544] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.544] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.545] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.545] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.545] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.545] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.545] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.545] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.546] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.546] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.546] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.546] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.546] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.546] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.547] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.547] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.547] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.547] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.547] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.547] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.547] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.548] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.548] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.548] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.548] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.548] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.549] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.549] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.549] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_PT\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.549] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.549] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.550] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ro\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.550] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.550] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.550] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ru\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.550] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.550] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/se" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.550] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/se\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.551] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.551] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.551] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/sk\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.551] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.551] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.551] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/sl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.552] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.552] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.552] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/sr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.552] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.552] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.552] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/th\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.552] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.553] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.553] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/tr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.553] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.553] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.553] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/uk\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.553] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.553] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.554] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/vi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.554] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.554] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.554] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/zh_CN\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.554] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.555] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.555] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/zh_TW\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.555] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.555] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.555] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.555] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.555] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293b8 | out: lpFindFileData=0x124293b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.555] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.555] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0128.555] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x124295bc | out: lpMode=0x124295bc) returned 0 [0128.556] CloseHandle (hObject=0x188) returned 1 [0128.556] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.556] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.556] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0128.556] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.556] WriteFile (in: hFile=0x188, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.557] CloseHandle (hObject=0x188) returned 1 [0128.558] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.558] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.558] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.558] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe3560f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3560f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.558] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe3560f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3560f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.558] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe3560f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe3560f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe35af10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.558] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.558] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.558] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.559] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.559] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.559] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0128.560] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.560] ReadFile (in: hFile=0x188, lpBuffer=0x124bc000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0128.561] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138)) returned 1 [0128.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.561] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.561] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.561] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.561] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.561] CloseHandle (hObject=0x150) returned 1 [0128.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.562] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.562] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.562] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.562] WriteFile (in: hFile=0x150, lpBuffer=0x12454600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12454600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.565] CloseHandle (hObject=0x150) returned 1 [0128.566] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.566] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.571] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.571] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe364b50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe364b50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.571] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe364b50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe364b50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.571] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe364b50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe364b50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe36e790, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.571] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.572] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.572] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.572] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.572] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.572] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0128.572] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.573] ReadFile (in: hFile=0x150, lpBuffer=0x124bc100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bc100*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0128.574] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124)) returned 1 [0128.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.574] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.574] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.574] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0128.574] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.575] CloseHandle (hObject=0x98) returned 1 [0128.575] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.575] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.575] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0128.575] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.575] WriteFile (in: hFile=0x98, lpBuffer=0x12456c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12456c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.576] CloseHandle (hObject=0x98) returned 1 [0128.577] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.577] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.577] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.577] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe384720, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe384720, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe384720, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe384720, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe384720, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe384720, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe389540, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.577] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.577] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.578] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.578] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0128.578] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.579] ReadFile (in: hFile=0x98, lpBuffer=0x124bc200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bc200*, lpNumberOfBytesRead=0x124295f0*=0xfe, lpOverlapped=0x0) returned 1 [0128.579] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1 [0128.580] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.580] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.580] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.580] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.580] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.580] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0128.580] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.580] CloseHandle (hObject=0x100) returned 1 [0128.580] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.580] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.581] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0128.581] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.581] WriteFile (in: hFile=0x100, lpBuffer=0x12741300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12741300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.582] CloseHandle (hObject=0x100) returned 1 [0128.582] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.582] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.583] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.583] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe393180, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe393180, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.583] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe393180, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe393180, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.583] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe393180, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe393180, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe397fa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.583] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.583] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.583] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.583] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.583] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.583] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0128.583] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.584] ReadFile (in: hFile=0x100, lpBuffer=0x124bc300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bc300*, lpNumberOfBytesRead=0x124295f0*=0xf9, lpOverlapped=0x0) returned 1 [0128.585] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1 [0128.585] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.585] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.585] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.585] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.585] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.585] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0128.585] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.585] CloseHandle (hObject=0x120) returned 1 [0128.586] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.586] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.586] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0128.586] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.586] WriteFile (in: hFile=0x120, lpBuffer=0x12743900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12743900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.587] CloseHandle (hObject=0x120) returned 1 [0128.587] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.587] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.588] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.588] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe39f4d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe39f4d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.588] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe39f4d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe39f4d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.588] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe39f4d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe39f4d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3a42f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.588] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.588] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.588] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.588] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.588] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.589] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0128.589] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.590] ReadFile (in: hFile=0x120, lpBuffer=0x124bc400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bc400*, lpNumberOfBytesRead=0x124295f0*=0xec, lpOverlapped=0x0) returned 1 [0128.590] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1 [0128.591] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.591] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.591] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.591] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.591] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.591] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0128.591] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.591] CloseHandle (hObject=0x158) returned 1 [0128.591] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.591] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.592] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0128.592] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.592] WriteFile (in: hFile=0x158, lpBuffer=0x127b8000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127b8000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.593] CloseHandle (hObject=0x158) returned 1 [0128.594] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.594] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.594] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.594] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe3adf30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3adf30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.594] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe3adf30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3adf30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.594] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe3adf30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe3adf30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3b2d50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.594] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.594] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.594] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.595] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.595] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.595] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0128.595] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.595] ReadFile (in: hFile=0x158, lpBuffer=0x124bc500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bc500*, lpNumberOfBytesRead=0x124295f0*=0xef, lpOverlapped=0x0) returned 1 [0128.596] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef)) returned 1 [0128.596] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.597] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.597] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.597] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.597] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.597] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0128.597] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.597] CloseHandle (hObject=0xf8) returned 1 [0128.597] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.597] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.597] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0128.598] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.598] WriteFile (in: hFile=0xf8, lpBuffer=0x127ba600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127ba600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.599] CloseHandle (hObject=0xf8) returned 1 [0128.599] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.599] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.599] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.600] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe3bc990, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3bc990, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.600] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe3bc990, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3bc990, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.600] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe3bc990, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe3bc990, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3c17b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.600] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.600] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.600] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.600] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.600] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.600] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0128.602] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.602] ReadFile (in: hFile=0xf8, lpBuffer=0x124bc600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bc600*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0128.603] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1 [0128.603] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.603] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.604] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.604] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.604] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.604] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0128.604] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.604] CloseHandle (hObject=0x130) returned 1 [0128.604] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.604] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.604] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0128.605] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.605] WriteFile (in: hFile=0x130, lpBuffer=0x127bcc00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127bcc00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.606] CloseHandle (hObject=0x130) returned 1 [0128.606] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.606] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.607] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.607] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe3cdb00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3cdb00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe3cdb00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3cdb00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe3cdb00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe3cdb00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3d2920, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.607] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.607] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.607] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.607] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0128.608] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.608] ReadFile (in: hFile=0x130, lpBuffer=0x124bc700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bc700*, lpNumberOfBytesRead=0x124295f0*=0xd7, lpOverlapped=0x0) returned 1 [0128.609] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0128.609] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.609] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.609] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.609] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.609] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.609] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0128.609] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.610] CloseHandle (hObject=0x134) returned 1 [0128.610] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.610] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.610] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0128.610] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.610] WriteFile (in: hFile=0x134, lpBuffer=0x124a1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124a1300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.611] CloseHandle (hObject=0x134) returned 1 [0128.612] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.612] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.612] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.612] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe3d9e50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3d9e50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.612] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe3d9e50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3d9e50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.612] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe3d9e50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe3d9e50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3dec70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.612] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.612] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.612] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.613] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.613] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.613] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0128.613] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.614] ReadFile (in: hFile=0x134, lpBuffer=0x124bc900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bc900*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0128.615] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d)) returned 1 [0128.615] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.615] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.615] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.615] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.615] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.615] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0128.615] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.615] CloseHandle (hObject=0xfc) returned 1 [0128.616] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.616] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.616] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0128.616] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.616] WriteFile (in: hFile=0xfc, lpBuffer=0x124a3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124a3900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.617] CloseHandle (hObject=0xfc) returned 1 [0128.618] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.618] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.618] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.618] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe3e88b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3e88b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.618] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe3e88b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3e88b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.618] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe3e88b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe3e88b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3eafc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.618] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.618] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.618] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.618] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.618] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.619] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0128.620] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.620] ReadFile (in: hFile=0xfc, lpBuffer=0x124bca00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bca00*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0128.621] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0128.621] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.621] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.621] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.621] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.621] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.621] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0128.621] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.621] CloseHandle (hObject=0x104) returned 1 [0128.621] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.621] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.622] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0128.622] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.622] WriteFile (in: hFile=0x104, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.623] CloseHandle (hObject=0x104) returned 1 [0128.623] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.623] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.624] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.624] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe3f4c00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3f4c00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.624] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe3f4c00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3f4c00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.624] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe3f4c00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe3f4c00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe3f9a20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.624] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.624] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.624] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.624] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.624] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.624] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0128.625] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.625] ReadFile (in: hFile=0x104, lpBuffer=0x124bcb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bcb00*, lpNumberOfBytesRead=0x124295f0*=0xea, lpOverlapped=0x0) returned 1 [0128.626] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1 [0128.626] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.626] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.627] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.627] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.627] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.627] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0128.627] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.627] CloseHandle (hObject=0xf0) returned 1 [0128.627] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.627] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.627] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0128.628] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.628] WriteFile (in: hFile=0xf0, lpBuffer=0x127e4600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127e4600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.629] CloseHandle (hObject=0xf0) returned 1 [0128.629] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.629] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.629] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.629] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe403660, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe403660, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.629] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe403660, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe403660, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.629] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe403660, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe403660, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe405d70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.630] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.630] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.630] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.630] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.630] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.630] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0128.630] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.630] ReadFile (in: hFile=0xf0, lpBuffer=0x124bcc00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bcc00*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0128.631] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1 [0128.631] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.632] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.632] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.632] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.632] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.632] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0128.632] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.632] CloseHandle (hObject=0xe4) returned 1 [0128.632] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.632] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.632] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0128.633] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.633] WriteFile (in: hFile=0xe4, lpBuffer=0x127e6c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127e6c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.634] CloseHandle (hObject=0xe4) returned 1 [0128.634] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.634] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.634] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.634] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe40f9b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe40f9b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.635] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe40f9b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe40f9b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.635] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe40f9b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe40f9b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe4120c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.635] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.635] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.635] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.635] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.635] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.635] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0128.635] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.635] ReadFile (in: hFile=0xe4, lpBuffer=0x124bcd00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bcd00*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0128.636] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121)) returned 1 [0128.637] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.637] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.637] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.637] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.637] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.637] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0128.637] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.637] CloseHandle (hObject=0x18c) returned 1 [0128.637] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.637] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.637] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0128.638] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.638] WriteFile (in: hFile=0x18c, lpBuffer=0x12597300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12597300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.639] CloseHandle (hObject=0x18c) returned 1 [0128.639] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.639] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.640] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.640] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe41bd00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe41bd00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.640] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe41bd00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe41bd00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.640] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe41bd00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe41bd00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe420b20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.640] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.640] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.640] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.640] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.640] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.640] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0128.641] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.641] ReadFile (in: hFile=0x18c, lpBuffer=0x124bce00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bce00*, lpNumberOfBytesRead=0x124295f0*=0xe6, lpOverlapped=0x0) returned 1 [0128.642] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0128.642] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.642] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.642] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.642] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.642] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.642] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0128.642] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.642] CloseHandle (hObject=0x138) returned 1 [0128.643] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.643] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.643] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0128.643] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.643] WriteFile (in: hFile=0x138, lpBuffer=0x12599900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12599900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.644] CloseHandle (hObject=0x138) returned 1 [0128.644] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.644] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.645] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.645] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe428050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe428050, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.645] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe428050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe428050, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.645] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe428050, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe428050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe42ce70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.645] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.645] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.645] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.645] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.645] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.645] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0128.646] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.646] ReadFile (in: hFile=0x138, lpBuffer=0x124bcf00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bcf00*, lpNumberOfBytesRead=0x124295f0*=0xe2, lpOverlapped=0x0) returned 1 [0128.647] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0128.647] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.647] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.647] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.647] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.647] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.647] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0128.647] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.648] CloseHandle (hObject=0x184) returned 1 [0128.648] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.648] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.648] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0128.648] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.648] WriteFile (in: hFile=0x184, lpBuffer=0x125ac000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125ac000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.649] CloseHandle (hObject=0x184) returned 1 [0128.649] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.650] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.650] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.650] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe4343a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe4343a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.650] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe4343a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe4343a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.650] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe4343a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe4343a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe4391c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.650] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.650] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.650] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.650] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.650] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.651] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0128.651] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.651] ReadFile (in: hFile=0x184, lpBuffer=0x124bd000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bd000*, lpNumberOfBytesRead=0x124295f0*=0xf2, lpOverlapped=0x0) returned 1 [0128.652] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1 [0128.652] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.652] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.652] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.652] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.652] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.653] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0128.653] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.653] CloseHandle (hObject=0x15c) returned 1 [0128.653] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.653] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.653] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0128.653] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.654] WriteFile (in: hFile=0x15c, lpBuffer=0x125ae600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125ae600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.655] CloseHandle (hObject=0x15c) returned 1 [0128.655] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.655] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.655] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.655] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe442e00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe442e00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.655] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe442e00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe442e00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.655] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe442e00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe442e00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe445510, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.655] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.655] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.656] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.656] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.656] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.656] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0128.656] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.656] ReadFile (in: hFile=0x15c, lpBuffer=0x124bd100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bd100*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0128.657] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0128.658] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.658] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.658] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.658] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.658] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.658] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0128.658] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.658] CloseHandle (hObject=0x19c) returned 1 [0128.658] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.658] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.659] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0128.659] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.659] WriteFile (in: hFile=0x19c, lpBuffer=0x125b0c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125b0c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.660] CloseHandle (hObject=0x19c) returned 1 [0128.661] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.661] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.661] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.661] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe44f150, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe44f150, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.661] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe44f150, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe44f150, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.661] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe44f150, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe44f150, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe453f70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.661] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.661] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.661] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.662] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.662] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.662] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0128.662] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.662] ReadFile (in: hFile=0x19c, lpBuffer=0x124bd200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bd200*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0128.663] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0128.663] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.663] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.663] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.664] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.664] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.664] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0128.664] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.664] CloseHandle (hObject=0x128) returned 1 [0128.664] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.664] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.664] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0128.665] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.665] WriteFile (in: hFile=0x128, lpBuffer=0x12761300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12761300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.666] CloseHandle (hObject=0x128) returned 1 [0128.666] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.666] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.666] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.666] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe45dbb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe45dbb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.667] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe45dbb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe45dbb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.667] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe45dbb0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe45dbb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe4602c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.667] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.667] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.667] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.667] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.667] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.667] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0128.667] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.667] ReadFile (in: hFile=0x128, lpBuffer=0x124bd300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bd300*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0128.668] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0128.668] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.669] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.669] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.669] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.669] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.669] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0128.669] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.669] CloseHandle (hObject=0x12c) returned 1 [0128.669] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.669] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.669] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0128.670] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.670] WriteFile (in: hFile=0x12c, lpBuffer=0x12763900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12763900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.671] CloseHandle (hObject=0x12c) returned 1 [0128.671] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.671] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.671] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.671] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe469f00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe469f00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.672] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe469f00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe469f00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.672] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe469f00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe469f00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe46c610, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.672] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.672] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.672] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.672] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.672] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.672] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0128.673] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.673] ReadFile (in: hFile=0x12c, lpBuffer=0x124bd400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bd400*, lpNumberOfBytesRead=0x124295f0*=0xfd, lpOverlapped=0x0) returned 1 [0128.674] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd)) returned 1 [0128.674] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.675] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.675] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.675] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.675] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.675] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0128.675] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.675] CloseHandle (hObject=0x17c) returned 1 [0128.675] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.675] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.675] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0128.676] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.676] WriteFile (in: hFile=0x17c, lpBuffer=0x12784000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12784000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.677] CloseHandle (hObject=0x17c) returned 1 [0128.677] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.677] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.678] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe478960, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe478960, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.678] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe478960, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe478960, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.678] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe478960, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe478960, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe47b070, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.678] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.678] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.678] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.678] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.678] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.678] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0128.678] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.679] ReadFile (in: hFile=0x17c, lpBuffer=0x124bd500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bd500*, lpNumberOfBytesRead=0x124295f0*=0xee, lpOverlapped=0x0) returned 1 [0128.680] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee)) returned 1 [0128.680] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.680] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.680] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.680] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.680] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.680] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0128.680] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.680] CloseHandle (hObject=0x180) returned 1 [0128.680] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.681] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.681] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0128.681] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.681] WriteFile (in: hFile=0x180, lpBuffer=0x12786600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12786600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.682] CloseHandle (hObject=0x180) returned 1 [0128.684] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.684] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.684] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.684] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe484cb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe484cb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.684] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe484cb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe484cb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.684] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe484cb0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe484cb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe4873c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.684] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.684] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.684] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.685] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.685] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.685] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0128.685] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.685] ReadFile (in: hFile=0x180, lpBuffer=0x124bd600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bd600*, lpNumberOfBytesRead=0x124295f0*=0xe8, lpOverlapped=0x0) returned 1 [0128.686] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0128.686] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.686] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.686] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.686] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.687] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.687] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0128.687] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.687] CloseHandle (hObject=0xbc) returned 1 [0128.687] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.687] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.687] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0128.688] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.688] WriteFile (in: hFile=0xbc, lpBuffer=0x12788c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12788c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.689] CloseHandle (hObject=0xbc) returned 1 [0128.689] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.689] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.689] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.689] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe493710, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe493710, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.689] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe493710, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe493710, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.689] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe493710, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe493710, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe495e20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.690] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.690] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.690] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.690] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.690] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.690] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0128.690] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.690] ReadFile (in: hFile=0xbc, lpBuffer=0x124bd700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bd700*, lpNumberOfBytesRead=0x124295f0*=0xd2, lpOverlapped=0x0) returned 1 [0128.691] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0128.691] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.691] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.692] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.692] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.692] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.692] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0128.692] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.692] CloseHandle (hObject=0xe8) returned 1 [0128.692] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.692] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.692] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0128.693] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.693] WriteFile (in: hFile=0xe8, lpBuffer=0x1279f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1279f300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.694] CloseHandle (hObject=0xe8) returned 1 [0128.694] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.694] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.694] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.694] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe49fa60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe49fa60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe49fa60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe49fa60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe49fa60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe49fa60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe4a2170, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.695] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.695] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.695] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.695] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0128.695] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.696] ReadFile (in: hFile=0xe8, lpBuffer=0x124bd800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bd800*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0128.697] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0128.697] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.697] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.697] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.697] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.697] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.697] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0128.697] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.848] CloseHandle (hObject=0x114) returned 1 [0128.848] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.848] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.848] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0128.849] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0128.857] WriteFile (in: hFile=0x114, lpBuffer=0x127a1900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127a1900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0128.858] CloseHandle (hObject=0x114) returned 1 [0128.858] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\@_read_to_recover_files_@.txt")) returned 0x2020 [0128.858] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.858] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.858] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe617a00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe617a00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0128.858] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe617a00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe617a00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.858] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe617a00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe617a00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe62d990, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.858] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.858] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.858] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.859] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.859] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.859] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0128.859] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0128.860] ReadFile (in: hFile=0x114, lpBuffer=0x124bd900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x124bd900*, lpNumberOfBytesRead=0x124295f0*=0xde, lpOverlapped=0x0) returned 1 [0128.861] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0128.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.861] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0128.861] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.861] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0128.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_BR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0128.861] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0128.867] CloseHandle (hObject=0x10c) returned 1 [0128.877] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/pt_PT\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.878] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe646030, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe646030, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.878] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe646030, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe646030, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe65bfc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.878] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.878] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.878] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.899] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ro\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.900] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe6809b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe6809b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.900] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe6809b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe6809b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe691b20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.900] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.900] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.900] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.926] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/ru\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.927] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe6c9d90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe6c9d90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.927] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe6c9d90, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe6c9d90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe6d39d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.927] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.927] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.927] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.945] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/se\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.945] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe6f83c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe6f83c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.945] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe6f83c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe6f83c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe6fd1e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.945] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.945] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.945] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0128.986] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/sk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0128.986] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe72df20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe72df20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.986] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe72df20, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe72df20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe761370, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0128.986] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0128.986] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.986] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.014] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/sl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.014] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe785d60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe785d60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.014] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe785d60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe785d60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe7a3220, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.014] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.014] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.015] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.043] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/sr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.044] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe7ca320, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe7ca320, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.044] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe7ca320, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe7ca320, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe7ec600, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.044] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.044] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.044] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.064] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/th\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.064] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe80e8e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe80e8e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.065] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe80e8e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe80e8e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe81d340, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.065] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.065] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.065] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.080] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/tr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe8380f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe8380f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe8380f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe8380f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe844440, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.081] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.084] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/uk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.084] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe849260, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe849260, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.084] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe849260, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe849260, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe84b970, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.084] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.084] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.084] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.087] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/vi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.088] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe850790, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe850790, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.088] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe850790, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe850790, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe8555b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.088] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.088] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.088] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.091] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/zh_CN\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.091] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe85a3d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe85a3d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.091] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe85a3d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe85a3d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe85cae0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.091] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.091] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.091] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.094] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_locales/zh_TW\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.095] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe861900, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe861900, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.095] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe861900, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe861900, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe866720, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.095] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.095] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.095] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.098] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pjkljhegncpnkpknbcohdijeoejaedia/8.1_0/_metadata\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.103] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe86b540, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe86b540, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.104] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe86b540, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe86b540, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe86dc50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.104] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ae0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86adfb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xdd12c400, ftLastWriteTime.dwHighDateTime=0x1d0683e, nFileSizeHigh=0x0, nFileSizeLow=0x2686, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0129.104] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.104] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.108] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.109] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe883be0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe883be0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.109] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5817.313.0.5_0", cAlternateFileName="581731~1.5_0")) returned 1 [0129.109] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe883be0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe883be0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe8862f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.109] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.109] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.113] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.114] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfe892640, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe892640, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.114] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfe892640, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfe892640, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfe894d50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.114] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83637bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8363f0f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="angular.js", cAlternateFileName="")) returned 1 [0129.114] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83641800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83643f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xa89c, dwReserved0=0x0, dwReserved1=0x0, cFileName="background_script.js", cAlternateFileName="BACKGR~1.JS")) returned 1 [0129.114] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83646620, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83648d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x181aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_game_sender.js", cAlternateFileName="CAST_G~1.JS")) returned 1 [0129.114] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8364db50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8364db50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x111e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_route_details.html", cAlternateFileName="CAST_R~1.HTM")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83652970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83657790, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3a258, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_route_details.js", cAlternateFileName="CAST_R~1.JS")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8365ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836613d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xce17, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_sender.js", cAlternateFileName="CAST_S~1.JS")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_setup", cAlternateFileName="CAST_S~1")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_route_details", cAlternateFileName="CLOUD_~1")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83696f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83699640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc878, dwReserved0=0x0, dwReserved1=0x0, cFileName="common.js", cAlternateFileName="")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8369bd50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8369bd50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc26, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback.css", cAlternateFileName="")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a0b70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a0b70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x38a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback.html", cAlternateFileName="FEEDBA~1.HTM")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a5990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a5990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback_script.js", cAlternateFileName="FEEDBA~1.JS")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836af5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8395fd70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b1ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b43f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x46039, dwReserved0=0x0, dwReserved1=0x0, cFileName="material_css_min.css", cAlternateFileName="MATERI~1.CSS")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b6b00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b9210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x7c33, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_cast_streaming.js", cAlternateFileName="MIRROR~1.JS")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836c2e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836c5560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2adeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_common.js", cAlternateFileName="MIRROR~2.JS")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836ca380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836cf1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x794cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_hangouts.js", cAlternateFileName="MIRROR~3.JS")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836d3fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836d66d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x941, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_webrtc.js", cAlternateFileName="MIRROR~4.JS")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0129.115] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.115] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.165] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240ef80 | out: pbBuffer=0x1240ef80) returned 1 [0129.166] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12537902 | out: pbBuffer=0x12537902) returned 1 [0129.166] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12537968 | out: pbBuffer=0x12537968) returned 1 [0129.167] SetEvent (hEvent=0xa0) returned 1 [0129.168] ReadFile (in: hFile=0x198, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x8c0bf, lpOverlapped=0x0) returned 1 [0129.176] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0129.176] SetEvent (hEvent=0xa0) returned 1 [0129.176] SetEvent (hEvent=0xb8) returned 1 [0129.176] CloseHandle (hObject=0x194) returned 1 [0129.179] GetFileType (hFile=0x198) returned 0x1 [0129.179] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.179] WriteFile (in: hFile=0x198, lpBuffer=0x125d2000*, nNumberOfBytesToWrite=0x8c0bf, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x125d2000*, lpNumberOfBytesWritten=0x12429608*=0x8c0bf, lpOverlapped=0x12429614) returned 1 [0129.181] GetFileType (hFile=0x198) returned 0x1 [0129.181] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x8c0bf, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.181] ReadFile (in: hFile=0x198, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0129.181] CloseHandle (hObject=0x198) returned 1 [0129.181] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.182] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.186] WriteFile (in: hFile=0x198, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0129.187] CloseHandle (hObject=0x198) returned 1 [0129.187] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xaf, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124292dc*=0xaf) returned 1 [0129.187] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83641800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83643f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xa89c)) returned 1 [0129.188] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.188] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.188] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0129.189] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12536002 | out: pbBuffer=0x12536002) returned 1 [0129.190] SetEvent (hEvent=0xb8) returned 1 [0129.190] ReadFile (in: hFile=0x198, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0xa89c, lpOverlapped=0x0) returned 1 [0129.190] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.191] SetEvent (hEvent=0xb8) returned 1 [0129.191] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.191] GetFileType (hFile=0x198) returned 0x1 [0129.191] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.191] WriteFile (in: hFile=0x198, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xa89c, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429608*=0xa89c, lpOverlapped=0x12429614) returned 1 [0129.192] GetFileType (hFile=0x198) returned 0x1 [0129.192] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xa89c, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.192] ReadFile (in: hFile=0x198, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0129.192] CloseHandle (hObject=0x198) returned 1 [0129.192] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.192] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.192] WriteFile (in: hFile=0x198, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0129.193] CloseHandle (hObject=0x198) returned 1 [0129.193] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0xb9, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x124292dc*=0xb9) returned 1 [0129.193] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83646620, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83648d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x181aa)) returned 1 [0129.194] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.194] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.194] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0129.195] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12536102 | out: pbBuffer=0x12536102) returned 1 [0129.195] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12536115 | out: pbBuffer=0x12536115) returned 1 [0129.195] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1253611d | out: pbBuffer=0x1253611d) returned 1 [0129.196] SetEvent (hEvent=0xa0) returned 1 [0129.196] ReadFile (in: hFile=0x198, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x181aa, lpOverlapped=0x0) returned 1 [0129.196] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.197] SetEvent (hEvent=0xa0) returned 1 [0129.197] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.197] GetFileType (hFile=0x198) returned 0x1 [0129.197] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.198] WriteFile (in: hFile=0x198, lpBuffer=0x12794000*, nNumberOfBytesToWrite=0x181aa, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x12794000*, lpNumberOfBytesWritten=0x12429608*=0x181aa, lpOverlapped=0x12429614) returned 1 [0129.198] GetFileType (hFile=0x198) returned 0x1 [0129.198] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x181aa, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.198] ReadFile (in: hFile=0x198, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0129.198] CloseHandle (hObject=0x198) returned 1 [0129.198] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.198] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.199] WriteFile (in: hFile=0x198, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0129.199] CloseHandle (hObject=0x198) returned 1 [0129.199] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xb8, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x124292dc*=0xb8) returned 1 [0129.200] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8364db50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8364db50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x111e1)) returned 1 [0129.200] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.200] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.200] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0129.201] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0129.201] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12536002 | out: pbBuffer=0x12536002) returned 1 [0129.201] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x125360a4 | out: pbBuffer=0x125360a4) returned 1 [0129.202] SetEvent (hEvent=0xb8) returned 1 [0129.202] ReadFile (in: hFile=0x198, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x111e1, lpOverlapped=0x0) returned 1 [0129.203] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.203] SetEvent (hEvent=0xb8) returned 1 [0129.203] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.204] GetFileType (hFile=0x198) returned 0x1 [0129.204] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.204] WriteFile (in: hFile=0x198, lpBuffer=0x12780000*, nNumberOfBytesToWrite=0x111e1, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x12780000*, lpNumberOfBytesWritten=0x12429608*=0x111e1, lpOverlapped=0x12429614) returned 1 [0129.204] GetFileType (hFile=0x198) returned 0x1 [0129.204] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x111e1, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.204] ReadFile (in: hFile=0x198, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0129.204] CloseHandle (hObject=0x198) returned 1 [0129.205] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.205] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.205] WriteFile (in: hFile=0x198, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0129.205] CloseHandle (hObject=0x198) returned 1 [0129.206] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xbc, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x124292dc*=0xbc) returned 1 [0129.206] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83652970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83657790, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3a258)) returned 1 [0129.206] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.207] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.207] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0129.208] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0129.208] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12536102 | out: pbBuffer=0x12536102) returned 1 [0129.209] SetEvent (hEvent=0xa0) returned 1 [0129.209] ReadFile (in: hFile=0x198, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x3a258, lpOverlapped=0x0) returned 1 [0129.213] GetFileType (hFile=0x198) returned 0x1 [0129.213] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.213] WriteFile (in: hFile=0x198, lpBuffer=0x125b6000*, nNumberOfBytesToWrite=0x3a258, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x125b6000*, lpNumberOfBytesWritten=0x12429608*=0x3a258, lpOverlapped=0x12429614) returned 1 [0129.213] GetFileType (hFile=0x198) returned 0x1 [0129.214] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x3a258, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.214] ReadFile (in: hFile=0x198, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0129.214] CloseHandle (hObject=0x198) returned 1 [0129.214] SwitchToThread () returned 1 [0129.214] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.214] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.214] WriteFile (in: hFile=0x198, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0129.215] CloseHandle (hObject=0x198) returned 1 [0129.215] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xba, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x124292dc*=0xba) returned 1 [0129.215] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8365ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836613d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xce17)) returned 1 [0129.215] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.216] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.216] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0129.216] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12536002 | out: pbBuffer=0x12536002) returned 1 [0129.218] SetEvent (hEvent=0xb8) returned 1 [0129.218] ReadFile (in: hFile=0x198, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0xce17, lpOverlapped=0x0) returned 1 [0129.218] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0129.218] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0129.218] SetEvent (hEvent=0xb8) returned 1 [0129.218] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.219] GetFileType (hFile=0x198) returned 0x1 [0129.219] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.219] WriteFile (in: hFile=0x198, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xce17, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429608*=0xce17, lpOverlapped=0x12429614) returned 1 [0129.219] GetFileType (hFile=0x198) returned 0x1 [0129.219] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xce17, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.219] ReadFile (in: hFile=0x198, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0129.219] CloseHandle (hObject=0x198) returned 1 [0129.219] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.220] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.220] WriteFile (in: hFile=0x198, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0129.220] CloseHandle (hObject=0x198) returned 1 [0129.220] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xb3, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x124292dc*=0xb3) returned 1 [0129.221] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83696f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83699640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc878)) returned 1 [0129.221] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.221] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.221] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0129.222] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0129.222] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12536102 | out: pbBuffer=0x12536102) returned 1 [0129.223] SetEvent (hEvent=0xa0) returned 1 [0129.223] ReadFile (in: hFile=0x198, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0xc878, lpOverlapped=0x0) returned 1 [0129.223] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.224] SetEvent (hEvent=0xa0) returned 1 [0129.224] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.224] GetFileType (hFile=0x198) returned 0x1 [0129.224] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.224] WriteFile (in: hFile=0x198, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xc878, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429608*=0xc878, lpOverlapped=0x12429614) returned 1 [0129.225] GetFileType (hFile=0x198) returned 0x1 [0129.225] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0xc878, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.225] ReadFile (in: hFile=0x198, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0129.225] CloseHandle (hObject=0x198) returned 1 [0129.225] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.225] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.225] WriteFile (in: hFile=0x198, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0129.225] CloseHandle (hObject=0x198) returned 1 [0129.225] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xae, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124292dc*=0xae) returned 1 [0129.226] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8369bd50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8369bd50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc26)) returned 1 [0129.226] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a0b70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a0b70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x38a8)) returned 1 [0129.226] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.226] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.226] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0129.227] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0129.227] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12536002 | out: pbBuffer=0x12536002) returned 1 [0129.227] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12536002 | out: pbBuffer=0x12536002) returned 1 [0129.227] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x125360d3 | out: pbBuffer=0x125360d3) returned 1 [0129.227] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x125360d8 | out: pbBuffer=0x125360d8) returned 1 [0129.229] SetEvent (hEvent=0xb8) returned 1 [0129.229] ReadFile (in: hFile=0x198, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x38a8, lpOverlapped=0x0) returned 1 [0129.229] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.229] SetEvent (hEvent=0xb8) returned 1 [0129.229] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.229] GetFileType (hFile=0x198) returned 0x1 [0129.229] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.230] WriteFile (in: hFile=0x198, lpBuffer=0x1244a000*, nNumberOfBytesToWrite=0x38a8, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x1244a000*, lpNumberOfBytesWritten=0x12429608*=0x38a8, lpOverlapped=0x12429614) returned 1 [0129.230] GetFileType (hFile=0x198) returned 0x1 [0129.230] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x38a8, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.230] ReadFile (in: hFile=0x198, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0129.230] CloseHandle (hObject=0x198) returned 1 [0129.230] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.230] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.231] WriteFile (in: hFile=0x198, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0129.231] CloseHandle (hObject=0x198) returned 1 [0129.231] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xb2, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x124292dc*=0xb2) returned 1 [0129.231] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a5990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a5990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2b20)) returned 1 [0129.232] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.232] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.232] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0129.233] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0129.233] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12536102 | out: pbBuffer=0x12536102) returned 1 [0129.233] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1253617e | out: pbBuffer=0x1253617e) returned 1 [0129.234] SetEvent (hEvent=0xa0) returned 1 [0129.234] ReadFile (in: hFile=0x198, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x2b20, lpOverlapped=0x0) returned 1 [0129.234] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.234] SetEvent (hEvent=0xa0) returned 1 [0129.234] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.235] GetFileType (hFile=0x198) returned 0x1 [0129.235] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.235] WriteFile (in: hFile=0x198, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x2b20, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429608*=0x2b20, lpOverlapped=0x12429614) returned 1 [0129.235] GetFileType (hFile=0x198) returned 0x1 [0129.235] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x2b20, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.235] ReadFile (in: hFile=0x198, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0129.235] CloseHandle (hObject=0x198) returned 1 [0129.235] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.236] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.236] WriteFile (in: hFile=0x198, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0129.236] CloseHandle (hObject=0x198) returned 1 [0129.236] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xb7, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x124292dc*=0xb7) returned 1 [0129.237] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836af5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8395fd70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0129.237] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b1ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b43f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x46039)) returned 1 [0129.237] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b6b00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b9210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x7c33)) returned 1 [0129.237] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.237] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.237] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0129.238] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12536002 | out: pbBuffer=0x12536002) returned 1 [0129.238] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1253609d | out: pbBuffer=0x1253609d) returned 1 [0129.239] SetEvent (hEvent=0xb8) returned 1 [0129.239] ReadFile (in: hFile=0x198, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x7c33, lpOverlapped=0x0) returned 1 [0129.240] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.240] SetEvent (hEvent=0xb8) returned 1 [0129.240] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.240] GetFileType (hFile=0x198) returned 0x1 [0129.240] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.240] WriteFile (in: hFile=0x198, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x7c33, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429608*=0x7c33, lpOverlapped=0x12429614) returned 1 [0129.241] GetFileType (hFile=0x198) returned 0x1 [0129.241] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x7c33, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.241] ReadFile (in: hFile=0x198, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0129.241] CloseHandle (hObject=0x198) returned 1 [0129.241] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.241] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.241] WriteFile (in: hFile=0x198, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0129.241] CloseHandle (hObject=0x198) returned 1 [0129.241] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d8000*, nNumberOfCharsToWrite=0xc0, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x124d8000*, lpNumberOfCharsWritten=0x124292dc*=0xc0) returned 1 [0129.242] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836c2e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836c5560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2adeb)) returned 1 [0129.242] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.243] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.243] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0129.243] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0129.243] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12536102 | out: pbBuffer=0x12536102) returned 1 [0129.244] SetEvent (hEvent=0xa0) returned 1 [0129.245] ReadFile (in: hFile=0x198, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x2adeb, lpOverlapped=0x0) returned 1 [0129.247] GetFileType (hFile=0x198) returned 0x1 [0129.247] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.247] WriteFile (in: hFile=0x198, lpBuffer=0x12538000*, nNumberOfBytesToWrite=0x2adeb, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x12538000*, lpNumberOfBytesWritten=0x12429608*=0x2adeb, lpOverlapped=0x12429614) returned 1 [0129.248] GetFileType (hFile=0x198) returned 0x1 [0129.248] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x2adeb, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.248] ReadFile (in: hFile=0x198, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0129.248] CloseHandle (hObject=0x198) returned 1 [0129.248] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.248] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.249] WriteFile (in: hFile=0x198, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0129.249] CloseHandle (hObject=0x198) returned 1 [0129.249] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xb8, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x124292dc*=0xb8) returned 1 [0129.249] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836ca380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836cf1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x794cf)) returned 1 [0129.250] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.250] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.250] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0129.251] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0129.251] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12536002 | out: pbBuffer=0x12536002) returned 1 [0129.251] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12536072 | out: pbBuffer=0x12536072) returned 1 [0129.252] SetEvent (hEvent=0xb8) returned 1 [0129.252] ReadFile (in: hFile=0x198, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x794cf, lpOverlapped=0x0) returned 1 [0129.263] GetFileType (hFile=0x198) returned 0x1 [0129.263] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.263] WriteFile (in: hFile=0x198, lpBuffer=0x125b6000*, nNumberOfBytesToWrite=0x794cf, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x125b6000*, lpNumberOfBytesWritten=0x12429608*=0x794cf, lpOverlapped=0x12429614) returned 1 [0129.264] GetFileType (hFile=0x198) returned 0x1 [0129.265] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x794cf, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.265] ReadFile (in: hFile=0x198, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0129.265] CloseHandle (hObject=0x198) returned 1 [0129.265] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.265] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.265] WriteFile (in: hFile=0x198, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0129.266] CloseHandle (hObject=0x198) returned 1 [0129.266] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xba, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x124292dc*=0xba) returned 1 [0129.267] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836d3fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836d66d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x941)) returned 1 [0129.267] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.267] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.267] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0129.269] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0129.269] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12536102 | out: pbBuffer=0x12536102) returned 1 [0129.269] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1253617d | out: pbBuffer=0x1253617d) returned 1 [0129.269] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12536190 | out: pbBuffer=0x12536190) returned 1 [0129.270] SetEvent (hEvent=0xa0) returned 1 [0129.270] ReadFile (in: hFile=0x198, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x941, lpOverlapped=0x0) returned 1 [0129.270] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.271] SetEvent (hEvent=0xa0) returned 1 [0129.271] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.271] GetFileType (hFile=0x198) returned 0x1 [0129.271] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.271] WriteFile (in: hFile=0x198, lpBuffer=0x12466000*, nNumberOfBytesToWrite=0x941, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x12466000*, lpNumberOfBytesWritten=0x12429608*=0x941, lpOverlapped=0x12429614) returned 1 [0129.271] GetFileType (hFile=0x198) returned 0x1 [0129.271] SetFilePointerEx (in: hFile=0x198, liDistanceToMove=0x941, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0129.271] ReadFile (in: hFile=0x198, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0129.271] CloseHandle (hObject=0x198) returned 1 [0129.272] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.272] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0129.272] WriteFile (in: hFile=0x198, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0129.272] CloseHandle (hObject=0x198) returned 1 [0129.272] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1244a000*, nNumberOfCharsToWrite=0xb8, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x1244a000*, lpNumberOfCharsWritten=0x124292dc*=0xb8) returned 1 [0129.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.273] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.273] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.273] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.273] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0129.274] CloseHandle (hObject=0x198) returned 1 [0129.274] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.274] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.274] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.275] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429728 | out: lpMode=0x12429728) returned 0 [0129.275] WriteFile (in: hFile=0x198, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242972c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242972c*=0x1033, lpOverlapped=0x0) returned 1 [0129.276] CloseHandle (hObject=0x198) returned 1 [0129.276] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.276] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.276] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.276] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales\\*", lpFindFileData=0x1242939c | out: lpFindFileData=0x1242939c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfea19040, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfea19040, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.277] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfea19040, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfea19040, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.277] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfea19040, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfea19040, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfea1de60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.277] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0129.277] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0129.277] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0129.277] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0129.277] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0129.277] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0129.277] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0129.278] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0129.279] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.279] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.279] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.279] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.279] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.279] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.280] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.280] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.280] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.281] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.281] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.281] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.281] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.281] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.281] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.282] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.282] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.282] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.282] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.283] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.283] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.283] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.284] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.284] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.284] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.285] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.285] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.285] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.285] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.285] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.285] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.286] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.286] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.287] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.287] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.287] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.287] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.288] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.288] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.288] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.288] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.289] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.289] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.289] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.290] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.290] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.290] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.291] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.291] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.291] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.291] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.291] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.291] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.292] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.292] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.292] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.293] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.293] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.293] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.294] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.294] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.294] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.294] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.295] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.296] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.296] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.296] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.296] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.296] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.296] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ja\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.297] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.297] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/kn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.297] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/kn\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.298] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.298] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.298] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ko\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.299] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.299] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.299] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/lt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.299] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.299] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.299] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/lv\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.302] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.302] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.302] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ml\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.302] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.302] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/mr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.303] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/mr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.303] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.304] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ms\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.304] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/nb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.304] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/nb\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.321] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.321] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.321] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/nl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.321] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.322] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.322] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/pl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.322] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.323] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/pt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.323] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/pt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.323] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.323] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.323] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/pt_BR\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.324] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.324] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.324] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/pt_PT\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.324] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.325] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.325] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ro\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.326] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.326] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.326] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ru\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.326] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.326] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.326] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sk\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.327] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.327] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.327] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.328] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.328] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.328] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.329] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.329] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.329] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sv\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.329] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.329] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.329] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sw\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.330] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.330] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.330] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ta\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.330] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.331] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/te" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.331] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/te\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.331] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.332] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.332] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/th\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.332] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.332] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.332] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/tr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.340] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.341] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.341] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/uk\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.341] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.341] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.341] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/vi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.342] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.342] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/zh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.342] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/zh\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.342] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.342] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.343] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/zh_TW\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.343] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.343] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.343] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.343] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.343] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293b8 | out: lpFindFileData=0x124293b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.343] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.343] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.343] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x124295bc | out: lpMode=0x124295bc) returned 0 [0129.344] CloseHandle (hObject=0x198) returned 1 [0129.344] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.344] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.344] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.344] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.344] WriteFile (in: hFile=0x198, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.345] CloseHandle (hObject=0x198) returned 1 [0129.346] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.346] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.346] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.346] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeab2d30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeab2d30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.346] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeab2d30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeab2d30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.346] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeab2d30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeab2d30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeab7b50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.346] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.346] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.346] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.347] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.347] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.347] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.347] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.347] ReadFile (in: hFile=0x198, lpBuffer=0x12536000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536000*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.349] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827)) returned 1 [0129.349] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.349] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.349] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.349] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.350] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.350] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/am/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0129.350] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.350] CloseHandle (hObject=0x168) returned 1 [0129.350] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.350] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.350] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0129.351] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.351] WriteFile (in: hFile=0x168, lpBuffer=0x1245c600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1245c600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.352] CloseHandle (hObject=0x168) returned 1 [0129.352] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.352] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.352] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.353] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeac3ea0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeac3ea0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.353] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeac3ea0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeac3ea0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.353] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeac3ea0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeac3ea0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeac65b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.353] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.353] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.353] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.353] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.353] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.353] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0129.353] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.354] ReadFile (in: hFile=0x168, lpBuffer=0x12536200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536200*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.356] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf)) returned 1 [0129.356] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.356] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.356] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.356] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.356] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.356] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0129.356] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.356] CloseHandle (hObject=0x13c) returned 1 [0129.356] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.357] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.357] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0129.357] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.357] WriteFile (in: hFile=0x13c, lpBuffer=0x1245ec00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1245ec00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.358] CloseHandle (hObject=0x13c) returned 1 [0129.359] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.359] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.359] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.359] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfead2900, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfead2900, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfead2900, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfead2900, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfead2900, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfead2900, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfead7720, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.359] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.359] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.360] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.360] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0129.360] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.360] ReadFile (in: hFile=0x13c, lpBuffer=0x12536300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536300*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.362] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63)) returned 1 [0129.362] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.362] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.362] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.362] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.363] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.363] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0129.363] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.363] CloseHandle (hObject=0x178) returned 1 [0129.363] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.363] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.363] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0129.364] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.364] WriteFile (in: hFile=0x178, lpBuffer=0x12787300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12787300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.365] CloseHandle (hObject=0x178) returned 1 [0129.365] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.365] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.365] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.365] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeae3a70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeae3a70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.366] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeae3a70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeae3a70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.366] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeae3a70, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeae3a70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeae6180, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.366] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.366] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.366] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.366] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.366] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.366] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0129.366] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.367] ReadFile (in: hFile=0x178, lpBuffer=0x12536400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536400*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.368] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb)) returned 1 [0129.369] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.369] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.369] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.369] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.369] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/bn/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0129.370] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.370] CloseHandle (hObject=0x11c) returned 1 [0129.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.370] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0129.371] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.371] WriteFile (in: hFile=0x11c, lpBuffer=0x12789900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12789900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.372] CloseHandle (hObject=0x11c) returned 1 [0129.372] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.372] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.372] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.373] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeaf4be0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeaf4be0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.373] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeaf4be0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeaf4be0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.373] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeaf4be0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeaf4be0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeaf72f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.373] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.373] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.373] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.373] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.373] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.373] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0129.373] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.374] ReadFile (in: hFile=0x11c, lpBuffer=0x12536500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536500*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.375] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d)) returned 1 [0129.376] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.376] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.376] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.376] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.376] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.376] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0129.376] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.377] CloseHandle (hObject=0x170) returned 1 [0129.377] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.377] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.377] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0129.377] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.377] WriteFile (in: hFile=0x170, lpBuffer=0x127ba000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127ba000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.378] CloseHandle (hObject=0x170) returned 1 [0129.379] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.379] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.379] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.379] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb03640, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb03640, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.379] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb03640, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb03640, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.379] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeb03640, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeb03640, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb08460, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.379] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.379] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.379] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.380] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.380] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.380] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0129.380] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.380] ReadFile (in: hFile=0x170, lpBuffer=0x12536600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536600*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.382] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029)) returned 1 [0129.383] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.383] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.383] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.383] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.383] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.383] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0129.383] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.383] CloseHandle (hObject=0x174) returned 1 [0129.383] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.384] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.384] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0129.384] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.384] WriteFile (in: hFile=0x174, lpBuffer=0x127bc600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127bc600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.387] CloseHandle (hObject=0x174) returned 1 [0129.387] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.387] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.388] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.388] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb147b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb147b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.388] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb147b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb147b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.388] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeb147b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeb147b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb1bce0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.388] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.388] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.388] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.388] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.388] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.388] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0129.389] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.389] ReadFile (in: hFile=0x174, lpBuffer=0x12536700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536700*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.390] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79)) returned 1 [0129.391] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.391] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.391] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.391] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.391] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.391] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0129.391] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.392] CloseHandle (hObject=0xf4) returned 1 [0129.392] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.392] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.392] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0129.392] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.393] WriteFile (in: hFile=0xf4, lpBuffer=0x127bec00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127bec00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.394] CloseHandle (hObject=0xf4) returned 1 [0129.394] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.394] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.395] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.395] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb28030, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb28030, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.395] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb28030, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb28030, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.395] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeb28030, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeb28030, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb2ce50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.395] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.395] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.395] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.395] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.395] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.395] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0129.396] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.396] ReadFile (in: hFile=0xf4, lpBuffer=0x12536800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536800*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.397] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f)) returned 1 [0129.398] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.398] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.398] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.398] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.398] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.398] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.398] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.398] CloseHandle (hObject=0xdc) returned 1 [0129.399] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.399] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.399] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.399] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.399] WriteFile (in: hFile=0xdc, lpBuffer=0x124a1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124a1300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.400] CloseHandle (hObject=0xdc) returned 1 [0129.401] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.401] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.402] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.402] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb36a90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb36a90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.402] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb36a90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb36a90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.402] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeb36a90, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeb36a90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb391a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.402] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.402] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.402] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.402] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.402] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.402] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.403] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.403] ReadFile (in: hFile=0xdc, lpBuffer=0x12536900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536900*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.404] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe)) returned 1 [0129.405] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.405] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.405] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.405] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.405] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.405] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0129.405] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.406] CloseHandle (hObject=0x110) returned 1 [0129.406] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.406] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.406] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0129.406] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.406] WriteFile (in: hFile=0x110, lpBuffer=0x124a3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124a3900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.408] CloseHandle (hObject=0x110) returned 1 [0129.408] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.408] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.409] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.409] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb454f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb454f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.409] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb454f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb454f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.409] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeb454f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeb454f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb4a310, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.409] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.409] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.409] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.409] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.409] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.409] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0129.410] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.410] ReadFile (in: hFile=0x110, lpBuffer=0x12536a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536a00*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.411] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a)) returned 1 [0129.412] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.412] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.412] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.412] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.412] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.412] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.412] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.412] CloseHandle (hObject=0x124) returned 1 [0129.413] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.413] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.413] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.413] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.413] WriteFile (in: hFile=0x124, lpBuffer=0x1279a000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1279a000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.414] CloseHandle (hObject=0x124) returned 1 [0129.415] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.415] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.415] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.416] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb56660, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb56660, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.416] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb56660, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb56660, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.416] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeb56660, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeb56660, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb5b480, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.416] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.416] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.416] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.416] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.416] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.416] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.416] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.417] ReadFile (in: hFile=0x124, lpBuffer=0x12536b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536b00*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.418] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b)) returned 1 [0129.419] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.419] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.419] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.419] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.419] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.419] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0129.419] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.419] CloseHandle (hObject=0xc0) returned 1 [0129.419] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.420] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.420] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0129.420] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.420] WriteFile (in: hFile=0xc0, lpBuffer=0x1279c600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1279c600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.421] CloseHandle (hObject=0xc0) returned 1 [0129.422] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.422] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.423] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.423] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb677d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb677d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.423] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb677d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb677d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.423] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeb677d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeb677d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb6c5f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.423] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.423] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.423] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.423] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.423] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.423] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0129.424] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.424] ReadFile (in: hFile=0xc0, lpBuffer=0x12536c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536c00*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.425] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85)) returned 1 [0129.426] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.426] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.426] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.426] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.426] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.426] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0129.427] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.427] CloseHandle (hObject=0x148) returned 1 [0129.427] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.427] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.427] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0129.428] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.428] WriteFile (in: hFile=0x148, lpBuffer=0x1279ec00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1279ec00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.429] CloseHandle (hObject=0x148) returned 1 [0129.429] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.429] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.430] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.430] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb78940, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb78940, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.430] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb78940, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb78940, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.430] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeb78940, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeb78940, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb7d760, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.430] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.430] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.430] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.431] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.431] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.431] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0129.431] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.431] ReadFile (in: hFile=0x148, lpBuffer=0x12536d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536d00*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.433] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5)) returned 1 [0129.433] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.433] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.433] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.433] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.433] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.434] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fa/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0129.434] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.434] CloseHandle (hObject=0x14c) returned 1 [0129.434] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.434] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.434] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0129.435] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.435] WriteFile (in: hFile=0x14c, lpBuffer=0x127e3300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127e3300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.436] CloseHandle (hObject=0x14c) returned 1 [0129.436] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.436] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.437] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.437] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb8c1c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb8c1c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.437] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb8c1c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb8c1c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.437] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeb8c1c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeb8c1c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb90fe0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.437] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.437] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.437] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.437] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.438] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.438] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0129.438] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.438] ReadFile (in: hFile=0x14c, lpBuffer=0x12536e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536e00*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.440] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c)) returned 1 [0129.440] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.440] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.440] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.440] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.441] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.441] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0129.441] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.441] CloseHandle (hObject=0x140) returned 1 [0129.441] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.441] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.441] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0129.442] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.442] WriteFile (in: hFile=0x140, lpBuffer=0x127e5900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127e5900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.443] CloseHandle (hObject=0x140) returned 1 [0129.443] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.444] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.444] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.444] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb9d330, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb9d330, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.444] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeb9d330, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeb9d330, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.444] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeb9d330, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeb9d330, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeba2150, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.444] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.444] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.444] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.445] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.445] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.445] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0129.445] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.445] ReadFile (in: hFile=0x140, lpBuffer=0x12536f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12536f00*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.447] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082)) returned 1 [0129.447] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.447] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.448] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.448] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.448] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.448] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0129.448] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.448] CloseHandle (hObject=0xd8) returned 1 [0129.448] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.448] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.448] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0129.449] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.449] WriteFile (in: hFile=0xd8, lpBuffer=0x12732000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12732000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.450] CloseHandle (hObject=0xd8) returned 1 [0129.451] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.451] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.451] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.451] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfebae4a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebae4a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.451] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfebae4a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebae4a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.452] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfebae4a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfebae4a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebb32c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.452] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.452] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.452] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.452] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.452] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.452] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0129.452] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.452] ReadFile (in: hFile=0xd8, lpBuffer=0x12537000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12537000*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.454] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f)) returned 1 [0129.454] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.454] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.455] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.455] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.455] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.455] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0129.455] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.455] CloseHandle (hObject=0xcc) returned 1 [0129.455] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.455] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.455] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0129.456] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.456] WriteFile (in: hFile=0xcc, lpBuffer=0x12734600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12734600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.457] CloseHandle (hObject=0xcc) returned 1 [0129.458] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.458] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.458] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.458] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfebbf610, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebbf610, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.458] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfebbf610, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebbf610, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.459] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfebbf610, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfebbf610, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebc4430, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.459] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.459] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.459] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.459] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.459] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.459] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0129.459] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.459] ReadFile (in: hFile=0xcc, lpBuffer=0x12537100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12537100*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.461] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079)) returned 1 [0129.461] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.462] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.462] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.462] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/gu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0129.462] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.462] CloseHandle (hObject=0xe0) returned 1 [0129.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.462] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0129.463] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.463] WriteFile (in: hFile=0xe0, lpBuffer=0x12736c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12736c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.464] CloseHandle (hObject=0xe0) returned 1 [0129.464] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.464] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.465] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.465] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfebd0780, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebd0780, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.465] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfebd0780, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebd0780, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.465] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfebd0780, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfebd0780, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebd0780, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.465] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.465] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.465] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.466] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.466] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.466] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0129.466] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.466] ReadFile (in: hFile=0xe0, lpBuffer=0x12537200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12537200*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.468] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7)) returned 1 [0129.468] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.468] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.468] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.468] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.468] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.469] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0129.469] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.469] CloseHandle (hObject=0xec) returned 1 [0129.469] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.469] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.469] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0129.470] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.470] WriteFile (in: hFile=0xec, lpBuffer=0x12597300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12597300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.471] CloseHandle (hObject=0xec) returned 1 [0129.471] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.471] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.472] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.472] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfebdcad0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebdcad0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.472] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfebdcad0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebdcad0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.472] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfebdcad0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfebdcad0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebe18f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.472] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.472] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.472] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.473] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.473] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.473] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0129.473] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.473] ReadFile (in: hFile=0xec, lpBuffer=0x12537300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12537300*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.475] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2)) returned 1 [0129.475] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.475] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.475] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.475] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.475] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.476] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0129.476] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.476] CloseHandle (hObject=0x154) returned 1 [0129.476] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.476] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.476] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0129.477] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.477] WriteFile (in: hFile=0x154, lpBuffer=0x12599900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12599900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.478] CloseHandle (hObject=0x154) returned 1 [0129.478] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.478] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.479] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.479] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfebedc40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebedc40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.479] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfebedc40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebedc40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.479] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfebedc40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfebedc40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebf0350, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.479] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.479] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.479] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.479] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.479] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.480] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0129.480] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.480] ReadFile (in: hFile=0x154, lpBuffer=0x12537400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12537400*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.482] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1 [0129.482] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.482] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.483] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.483] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.483] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.483] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0129.483] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.483] CloseHandle (hObject=0xd0) returned 1 [0129.483] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.483] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.483] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0129.484] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.484] WriteFile (in: hFile=0xd0, lpBuffer=0x12566000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12566000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.485] CloseHandle (hObject=0xd0) returned 1 [0129.486] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.486] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.486] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.486] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfebfedb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebfedb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.486] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfebfedb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfebfedb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.486] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfebfedb0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfebfedb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec03bd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.487] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.487] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.487] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.487] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.487] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.487] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0129.487] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.487] ReadFile (in: hFile=0xd0, lpBuffer=0x12537500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12537500*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.489] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d)) returned 1 [0129.489] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.490] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.490] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.490] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.490] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.490] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0129.490] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.490] CloseHandle (hObject=0x144) returned 1 [0129.490] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.490] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.491] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0129.491] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.491] WriteFile (in: hFile=0x144, lpBuffer=0x12568600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12568600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.492] CloseHandle (hObject=0x144) returned 1 [0129.493] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.493] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.493] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.493] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfec0ff20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec0ff20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfec0ff20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec0ff20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.494] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfec0ff20, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfec0ff20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec14d40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.494] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.494] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.494] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.494] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.494] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.494] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0129.494] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.494] ReadFile (in: hFile=0x144, lpBuffer=0x12537600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12537600*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.496] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c)) returned 1 [0129.496] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.496] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.497] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.497] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.497] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.497] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0129.497] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.497] CloseHandle (hObject=0x16c) returned 1 [0129.497] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.497] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.497] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0129.498] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.498] WriteFile (in: hFile=0x16c, lpBuffer=0x1256ac00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1256ac00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.499] CloseHandle (hObject=0x16c) returned 1 [0129.499] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.500] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.500] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.500] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfec21090, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec21090, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.500] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfec21090, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec21090, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.500] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfec21090, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfec21090, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec25eb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.500] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.500] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.500] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.501] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.501] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.501] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0129.501] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0129.501] ReadFile (in: hFile=0x16c, lpBuffer=0x12537700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12537700*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0129.503] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074)) returned 1 [0129.503] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.504] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.504] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.504] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.504] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.504] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/iw/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0129.504] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0129.504] CloseHandle (hObject=0xc8) returned 1 [0129.504] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.504] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.504] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0129.505] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0129.505] WriteFile (in: hFile=0xc8, lpBuffer=0x12577300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12577300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0129.506] CloseHandle (hObject=0xc8) returned 1 [0129.507] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.507] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.508] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfec32200, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec32200, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.508] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfec32200, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfec32200, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec37020, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.508] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.508] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.508] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.513] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/kn\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.513] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfec40c60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec40c60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.513] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfec40c60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfec40c60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec45a80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.513] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834c7150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c9860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x55a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.513] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.513] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.518] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.519] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfec4f6c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec4f6c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.519] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfec4cfb0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfec4cfb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec51dd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.519] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ce680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d0d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x403a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.519] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.519] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.528] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.529] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfec5ba10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec5ba10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.529] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfec5ba10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfec5ba10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec5e120, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.529] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834d5bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d82c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x416b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.529] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.529] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.534] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.534] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfec6f290, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec6f290, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.534] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfec6f290, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfec6f290, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec740b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.534] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834dd0e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834df7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x41bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.534] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.534] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.539] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ml\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.540] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfec7dcf0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec7dcf0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.540] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfec7dcf0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfec7dcf0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec80400, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.540] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ebb40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x583f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.540] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.540] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.544] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/mr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.545] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfec8a040, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec8a040, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.545] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfec8a040, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfec8a040, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec8c750, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.545] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834f3070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5224, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.545] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.545] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.550] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfec96390, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec96390, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfec96390, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfec96390, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfec9b1b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ff3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.551] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.555] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/nb\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.556] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeca4df0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeca4df0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.556] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeca4df0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeca4df0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeca7500, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.556] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835068f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.556] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.556] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.561] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.561] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfecb1140, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfecb1140, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.562] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfecb1140, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfecb1140, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfecb5f60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.562] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8357bbf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f45, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.562] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.562] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.566] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.567] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfecbfba0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfecbfba0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.567] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfecbfba0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfecbfba0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfecc22b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.567] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83583120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.567] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.567] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.571] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/pt\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.572] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeccbef0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeccbef0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.572] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeccbef0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeccbef0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfecd0d10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.572] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8359b7c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359ded0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.572] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.572] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.576] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/pt_BR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfecd8240, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfecd8240, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfecd8240, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfecd8240, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfecdd060, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a05e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.577] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.582] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/pt_PT\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.583] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfece6ca0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfece6ca0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.583] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfece6ca0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfece6ca0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfece93b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.583] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a5400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.583] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.583] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.587] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ro\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.588] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfecf2ff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfecf2ff0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.588] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfecf2ff0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfecf2ff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfecf5700, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.588] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b1750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b3e60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40db, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.588] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.588] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.592] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ru\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.593] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfecff340, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfecff340, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.593] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfecff340, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfecff340, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed01a50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.593] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b8c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835bb390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x490e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.593] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.593] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.599] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.600] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfed0b690, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed0b690, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.600] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfed0b690, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfed0b690, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed104b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.600] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c28c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.600] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.600] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.606] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfed1a0f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed1a0f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfed1a0f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfed1a0f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed1ef10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c9df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.607] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.612] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.612] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfed28b50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed28b50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.612] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfed28b50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfed28b50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed2d970, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.612] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835d1320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x49c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.612] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.613] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.617] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.618] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfed375b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed375b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.618] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfed375b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfed375b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed39cc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.618] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.618] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.618] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.622] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/sw\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.623] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfed43900, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed43900, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.623] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfed43900, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfed43900, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed46010, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.623] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dfd80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.623] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.623] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.627] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/ta\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.628] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfed4fc50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed4fc50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.628] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfed4fc50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfed4fc50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed52360, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.628] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835e72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e99c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x563d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.628] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.628] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.632] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/te\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.633] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfed5bfa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed5bfa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.633] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfed5bfa0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfed5bfa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.633] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f0ef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5593, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.633] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.633] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.638] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/th\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.638] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfed682f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed682f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.638] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfed682f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfed682f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed6d110, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.638] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f8420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835fab30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.638] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.639] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.643] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/tr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.644] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfed76d50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed76d50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.644] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfed76d50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfed76d50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed79460, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.644] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835ff950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83602060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.644] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.644] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.648] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/uk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.649] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfed830a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed830a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.649] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfed830a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfed830a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed857b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.649] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8360e3b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83610ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.649] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.649] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.653] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/vi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.654] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfed8f3f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed8f3f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.654] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfed8f3f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfed8f3f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed91b00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.654] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83617ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x426b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.654] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.654] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.658] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/zh\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.659] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfed9b740, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed9b740, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.659] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfed9b740, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfed9b740, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfed9de50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.659] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8361f520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d11, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.659] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.659] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.664] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_locales/zh_TW\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.664] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeda2c70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeda2c70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.664] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeda2c70, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeda2c70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeda7a90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.664] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8362b870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0129.664] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.664] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.670] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/_metadata\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfedb3de0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfedb3de0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfedaefc0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfedaefc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfedb64f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x839fe880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7299, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0129.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836e0310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0129.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.671] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.679] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfedc7660, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfedc7660, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfedc7660, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfedc7660, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfedcc480, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.css", cAlternateFileName="")) returned 1 [0129.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.js", cAlternateFileName="")) returned 1 [0129.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app_redirect.js", cAlternateFileName="CAST_A~1.JS")) returned 1 [0129.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef, dwReserved0=0x0, dwReserved1=0x0, cFileName="chromecast_logo_grey.png", cAlternateFileName="CHROME~1.PNG")) returned 1 [0129.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="devices.html", cAlternateFileName="DEVICE~1.HTM")) returned 1 [0129.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0129.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="offers.html", cAlternateFileName="OFFERS~1.HTM")) returned 1 [0129.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 1 [0129.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.680] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.694] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240fb00 | out: pbBuffer=0x1240fb00) returned 1 [0129.695] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12411a34 | out: pbBuffer=0x12411a34) returned 1 [0129.695] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12563f02 | out: pbBuffer=0x12563f02) returned 1 [0129.696] SetEvent (hEvent=0xb8) returned 1 [0129.696] ReadFile (in: hFile=0x1b8, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242957c*=0x221da, lpOverlapped=0x0) returned 1 [0129.699] GetFileType (hFile=0x1b8) returned 0x1 [0129.699] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.699] WriteFile (in: hFile=0x1b8, lpBuffer=0x12672000*, nNumberOfBytesToWrite=0x221da, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x12672000*, lpNumberOfBytesWritten=0x12429560*=0x221da, lpOverlapped=0x1242956c) returned 1 [0129.700] GetFileType (hFile=0x1b8) returned 0x1 [0129.700] SetFilePointerEx (in: hFile=0x1b8, liDistanceToMove=0x221da, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.700] ReadFile (in: hFile=0x1b8, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0129.700] CloseHandle (hObject=0x1b8) returned 1 [0129.700] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0129.700] GetConsoleMode (in: hConsoleHandle=0x1b8, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.700] WriteFile (in: hFile=0x1b8, lpBuffer=0x126bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x126bc240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0129.701] CloseHandle (hObject=0x1b8) returned 1 [0129.701] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0xbb, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x12429234*=0xbb) returned 1 [0129.708] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), fInfoLevelId=0x0, lpFileInformation=0x12429470 | out: lpFileInformation=0x12429470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1 [0129.708] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.709] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.709] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0129.710] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0129.710] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12562002 | out: pbBuffer=0x12562002) returned 1 [0129.711] SetEvent (hEvent=0xa0) returned 1 [0129.711] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1249757c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1249757c*=0xf2, lpOverlapped=0x0) returned 1 [0129.711] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.712] SetEvent (hEvent=0xa0) returned 1 [0129.712] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.712] GetFileType (hFile=0xdc) returned 0x1 [0129.712] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.712] WriteFile (in: hFile=0xdc, lpBuffer=0x12562100*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x12562100*, lpNumberOfBytesWritten=0x12429560*=0xf2, lpOverlapped=0x1242956c) returned 1 [0129.712] GetFileType (hFile=0xdc) returned 0x1 [0129.712] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.712] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0129.712] CloseHandle (hObject=0xdc) returned 1 [0129.713] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.713] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.713] WriteFile (in: hFile=0xdc, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0129.713] CloseHandle (hObject=0xdc) returned 1 [0129.713] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0xc4, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x12429234*=0xc4) returned 1 [0129.714] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), fInfoLevelId=0x0, lpFileInformation=0x12429470 | out: lpFileInformation=0x12429470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef)) returned 1 [0129.714] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.715] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.715] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0129.716] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2094 | out: pbBuffer=0x124e2094) returned 1 [0129.716] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12562302 | out: pbBuffer=0x12562302) returned 1 [0129.716] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12562386 | out: pbBuffer=0x12562386) returned 1 [0129.717] SetEvent (hEvent=0x6c) returned 1 [0129.717] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1249757c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1249757c*=0x1bef, lpOverlapped=0x0) returned 1 [0129.717] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.717] SetEvent (hEvent=0x6c) returned 1 [0129.717] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.718] GetFileType (hFile=0xdc) returned 0x1 [0129.718] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.718] WriteFile (in: hFile=0xdc, lpBuffer=0x12466000*, nNumberOfBytesToWrite=0x1bef, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x12466000*, lpNumberOfBytesWritten=0x12429560*=0x1bef, lpOverlapped=0x1242956c) returned 1 [0129.718] GetFileType (hFile=0xdc) returned 0x1 [0129.718] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x1bef, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.718] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0129.718] CloseHandle (hObject=0xdc) returned 1 [0129.718] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.718] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.719] WriteFile (in: hFile=0xdc, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0129.719] CloseHandle (hObject=0xdc) returned 1 [0129.719] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1244a000*, nNumberOfCharsToWrite=0xc8, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x1244a000*, lpNumberOfCharsWritten=0x12429234*=0xc8) returned 1 [0129.720] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), fInfoLevelId=0x0, lpFileInformation=0x12429470 | out: lpFileInformation=0x12429470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1 [0129.720] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.720] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.720] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0129.721] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12562002 | out: pbBuffer=0x12562002) returned 1 [0129.721] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12562041 | out: pbBuffer=0x12562041) returned 1 [0129.722] SetEvent (hEvent=0xa0) returned 1 [0129.722] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1249757c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1249757c*=0x3b, lpOverlapped=0x0) returned 1 [0129.723] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.723] SetEvent (hEvent=0xa0) returned 1 [0129.723] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.723] GetFileType (hFile=0xdc) returned 0x1 [0129.723] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.723] WriteFile (in: hFile=0xdc, lpBuffer=0x1240c140*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x1240c140*, lpNumberOfBytesWritten=0x12429560*=0x3b, lpOverlapped=0x1242956c) returned 1 [0129.723] GetFileType (hFile=0xdc) returned 0x1 [0129.723] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x3b, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.723] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0129.724] CloseHandle (hObject=0xdc) returned 1 [0129.724] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.724] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.724] WriteFile (in: hFile=0xdc, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0129.724] CloseHandle (hObject=0xdc) returned 1 [0129.724] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xbc, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x12429234*=0xbc) returned 1 [0129.725] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), fInfoLevelId=0x0, lpFileInformation=0x12429470 | out: lpFileInformation=0x12429470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828)) returned 1 [0129.725] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.725] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.725] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0129.726] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2094 | out: pbBuffer=0x124e2094) returned 1 [0129.726] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12562102 | out: pbBuffer=0x12562102) returned 1 [0129.726] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12562105 | out: pbBuffer=0x12562105) returned 1 [0129.726] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12562147 | out: pbBuffer=0x12562147) returned 1 [0129.726] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x125621b3 | out: pbBuffer=0x125621b3) returned 1 [0129.727] SetEvent (hEvent=0x6c) returned 1 [0129.727] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1249757c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1249757c*=0x828, lpOverlapped=0x0) returned 1 [0129.728] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.728] SetEvent (hEvent=0x6c) returned 1 [0129.728] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0129.728] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0129.728] GetFileType (hFile=0xdc) returned 0x1 [0129.728] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.728] WriteFile (in: hFile=0xdc, lpBuffer=0x1244a000*, nNumberOfBytesToWrite=0x828, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x1244a000*, lpNumberOfBytesWritten=0x12429560*=0x828, lpOverlapped=0x1242956c) returned 1 [0129.729] GetFileType (hFile=0xdc) returned 0x1 [0129.729] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x828, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.729] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0129.729] CloseHandle (hObject=0xdc) returned 1 [0129.729] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.729] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.729] WriteFile (in: hFile=0xdc, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0129.729] CloseHandle (hObject=0xdc) returned 1 [0129.730] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xba, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x12429234*=0xba) returned 1 [0129.730] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), fInfoLevelId=0x0, lpFileInformation=0x12429470 | out: lpFileInformation=0x12429470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1 [0129.730] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.730] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.731] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0129.731] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0129.731] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12562002 | out: pbBuffer=0x12562002) returned 1 [0129.731] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12562035 | out: pbBuffer=0x12562035) returned 1 [0129.733] SetEvent (hEvent=0xa0) returned 1 [0129.733] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1249757c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1249757c*=0x3b, lpOverlapped=0x0) returned 1 [0129.733] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.733] SetEvent (hEvent=0xa0) returned 1 [0129.733] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.733] GetFileType (hFile=0xdc) returned 0x1 [0129.733] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.734] WriteFile (in: hFile=0xdc, lpBuffer=0x1240c140*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x1240c140*, lpNumberOfBytesWritten=0x12429560*=0x3b, lpOverlapped=0x1242956c) returned 1 [0129.734] GetFileType (hFile=0xdc) returned 0x1 [0129.734] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x3b, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.734] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0129.734] CloseHandle (hObject=0xdc) returned 1 [0129.734] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.734] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.734] WriteFile (in: hFile=0xdc, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0129.735] CloseHandle (hObject=0xdc) returned 1 [0129.735] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xbb, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x12429234*=0xbb) returned 1 [0129.735] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), fInfoLevelId=0x0, lpFileInformation=0x12429470 | out: lpFileInformation=0x12429470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1 [0129.736] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.736] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.736] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0129.737] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12562102 | out: pbBuffer=0x12562102) returned 1 [0129.738] SetEvent (hEvent=0x6c) returned 1 [0129.738] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1249757c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1249757c*=0x3b, lpOverlapped=0x0) returned 1 [0129.738] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.738] SetEvent (hEvent=0x6c) returned 1 [0129.738] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.739] GetFileType (hFile=0xdc) returned 0x1 [0129.739] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.739] WriteFile (in: hFile=0xdc, lpBuffer=0x1240c140*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x1240c140*, lpNumberOfBytesWritten=0x12429560*=0x3b, lpOverlapped=0x1242956c) returned 1 [0129.739] GetFileType (hFile=0xdc) returned 0x1 [0129.739] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x3b, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.739] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0129.739] CloseHandle (hObject=0xdc) returned 1 [0129.740] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.740] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.740] WriteFile (in: hFile=0xdc, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0129.740] CloseHandle (hObject=0xdc) returned 1 [0129.740] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xba, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x12429234*=0xba) returned 1 [0129.742] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.742] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.742] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.742] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293b8 | out: lpFindFileData=0x124293b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.743] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.743] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cast_setup/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.743] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124295bc | out: lpMode=0x124295bc) returned 0 [0129.743] CloseHandle (hObject=0xdc) returned 1 [0129.743] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.743] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.743] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.745] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429728 | out: lpMode=0x12429728) returned 0 [0129.745] WriteFile (in: hFile=0xdc, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242972c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242972c*=0x1033, lpOverlapped=0x0) returned 1 [0129.746] CloseHandle (hObject=0xdc) returned 1 [0129.747] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.747] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.747] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.747] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details\\*", lpFindFileData=0x1242939c | out: lpFindFileData=0x1242939c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfee68880, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfee68880, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.747] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfee68880, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfee68880, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.747] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfee66170, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfee66170, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfee6d6a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.747] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.html", cAlternateFileName="VIEW~1.HTM")) returned 1 [0129.747] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 1 [0129.748] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.748] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.748] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.748] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.748] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.748] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429688 | out: lpMode=0x12429688) returned 0 [0129.748] ReadFile (in: hFile=0xdc, lpBuffer=0x12562000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429698, lpOverlapped=0x0 | out: lpBuffer=0x12562000*, lpNumberOfBytesRead=0x12429698*=0x100, lpOverlapped=0x0) returned 1 [0129.750] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0129.751] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429688 | out: lpMode=0x12429688) returned 0 [0129.751] ReadFile (in: hFile=0x110, lpBuffer=0x12562200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429698, lpOverlapped=0x0 | out: lpBuffer=0x12562200*, lpNumberOfBytesRead=0x12429698*=0x100, lpOverlapped=0x0) returned 1 [0129.752] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), fInfoLevelId=0x0, lpFileInformation=0x12429470 | out: lpFileInformation=0x12429470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c)) returned 1 [0129.752] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.752] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.752] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442280 | out: pbBuffer=0x12442280) returned 1 [0129.753] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2104 | out: pbBuffer=0x124e2104) returned 1 [0129.753] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12562302 | out: pbBuffer=0x12562302) returned 1 [0129.753] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1256237d | out: pbBuffer=0x1256237d) returned 1 [0129.755] SetEvent (hEvent=0xa0) returned 1 [0129.755] ReadFile (in: hFile=0x124, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242957c*=0x174c, lpOverlapped=0x0) returned 1 [0129.755] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0129.755] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0129.755] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.755] SetEvent (hEvent=0x6c) returned 1 [0129.756] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.756] GetFileType (hFile=0x124) returned 0x1 [0129.756] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.756] WriteFile (in: hFile=0x124, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x174c, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429560*=0x174c, lpOverlapped=0x1242956c) returned 1 [0129.756] GetFileType (hFile=0x124) returned 0x1 [0129.756] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x174c, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.756] ReadFile (in: hFile=0x124, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0129.756] CloseHandle (hObject=0x124) returned 1 [0129.757] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.757] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.757] WriteFile (in: hFile=0x124, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0129.757] CloseHandle (hObject=0x124) returned 1 [0129.757] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1244a000*, nNumberOfCharsToWrite=0xc2, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x1244a000*, lpNumberOfCharsWritten=0x12429234*=0xc2) returned 1 [0129.758] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), fInfoLevelId=0x0, lpFileInformation=0x12429470 | out: lpFileInformation=0x12429470*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945)) returned 1 [0129.758] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.758] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.758] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0129.759] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12562002 | out: pbBuffer=0x12562002) returned 1 [0129.759] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12562068 | out: pbBuffer=0x12562068) returned 1 [0129.759] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12562072 | out: pbBuffer=0x12562072) returned 1 [0129.760] SetEvent (hEvent=0x6c) returned 1 [0129.760] ReadFile (in: hFile=0x124, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1249757c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1249757c*=0x945, lpOverlapped=0x0) returned 1 [0129.761] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.761] SetEvent (hEvent=0x6c) returned 1 [0129.761] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0129.761] GetFileType (hFile=0x124) returned 0x1 [0129.761] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.761] WriteFile (in: hFile=0x124, lpBuffer=0x12466000*, nNumberOfBytesToWrite=0x945, lpNumberOfBytesWritten=0x12429560, lpOverlapped=0x1242956c | out: lpBuffer=0x12466000*, lpNumberOfBytesWritten=0x12429560*=0x945, lpOverlapped=0x1242956c) returned 1 [0129.761] GetFileType (hFile=0x124) returned 0x1 [0129.761] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x945, lpNewFilePointer=0x0, dwMoveMethod=0x12429544 | out: lpNewFilePointer=0x0) returned 1 [0129.761] ReadFile (in: hFile=0x124, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242957c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242957c*=0x0, lpOverlapped=0x0) returned 1 [0129.761] CloseHandle (hObject=0x124) returned 1 [0129.762] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.762] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x1242956c | out: lpMode=0x1242956c) returned 0 [0129.762] WriteFile (in: hFile=0x124, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429570, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429570*=0x108, lpOverlapped=0x0) returned 1 [0129.762] CloseHandle (hObject=0x124) returned 1 [0129.762] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0xc0, lpNumberOfCharsWritten=0x12429234, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x12429234*=0xc0) returned 1 [0129.763] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.763] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.763] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.763] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293b8 | out: lpFindFileData=0x124293b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.763] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.763] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/5817.313.0.5_0/cloud_route_details/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.764] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124295bc | out: lpMode=0x124295bc) returned 0 [0129.764] CloseHandle (hObject=0x124) returned 1 [0129.764] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.764] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.764] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.764] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.764] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.764] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/pkedcjkdefgpdelpbcmbmeomcjbeemfm/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.764] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0129.765] CloseHandle (hObject=0x124) returned 1 [0129.765] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Favicons-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.765] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Favicons-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.765] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Favicons-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.765] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Favicons-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.765] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Favicons-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.765] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Favicons-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.765] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.765] CloseHandle (hObject=0x124) returned 1 [0129.765] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/History-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.766] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/History-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.766] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/History-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.766] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/History-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.766] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/History-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history-journal\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.766] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/History-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.766] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.766] CloseHandle (hObject=0x124) returned 1 [0129.766] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.766] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.767] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.767] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0129.767] WriteFile (in: hFile=0x124, lpBuffer=0x124d1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x124d1300*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0129.768] CloseHandle (hObject=0x124) returned 1 [0129.768] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.768] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.769] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.769] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfee9e3e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfee9e3e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.769] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfee9e3e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfee9e3e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.769] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfee9e3e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfee9e3e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeea3200, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.769] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A058.tmp", cAlternateFileName="")) returned 1 [0129.769] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A059.tmp", cAlternateFileName="")) returned 1 [0129.769] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.769] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.769] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.769] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.769] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/A058.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a058.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.770] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0129.770] ReadFile (in: hFile=0x124, lpBuffer=0x12562d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12562d00*, lpNumberOfBytesRead=0x12429890*=0x0, lpOverlapped=0x0) returned 1 [0129.770] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/A059.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a059.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.770] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0129.770] ReadFile (in: hFile=0xdc, lpBuffer=0x12562e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12562e00*, lpNumberOfBytesRead=0x12429890*=0x0, lpOverlapped=0x0) returned 1 [0129.770] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.770] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.770] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.771] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.771] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.771] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0129.771] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0129.771] CloseHandle (hObject=0x110) returned 1 [0129.771] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/A058.tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a058.tmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.771] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/A058.tmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.771] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/A058.tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a058.tmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.771] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/A058.tmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.771] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/A058.tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a058.tmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.771] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/A058.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a058.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0129.771] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0129.772] CloseHandle (hObject=0x110) returned 1 [0129.772] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/A059.tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a059.tmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.772] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/A059.tmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.772] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/A059.tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a059.tmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.772] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/A059.tmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.772] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/A059.tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a059.tmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.772] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIcons/A059.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a059.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0129.772] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0129.772] CloseHandle (hObject=0x110) returned 1 [0129.772] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.772] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.773] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0129.773] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0129.773] WriteFile (in: hFile=0x110, lpBuffer=0x12774000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12774000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0129.774] CloseHandle (hObject=0x110) returned 1 [0129.774] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.774] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.774] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.775] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeeace40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeeace40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.775] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeeace40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeeace40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.775] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B03.tmp", cAlternateFileName="")) returned 1 [0129.775] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B04.tmp", cAlternateFileName="")) returned 1 [0129.775] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeeace40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeeace40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeeb1c60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.775] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.775] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.775] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/2B03.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b03.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0129.776] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0129.776] ReadFile (in: hFile=0x110, lpBuffer=0x12563300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12563300*, lpNumberOfBytesRead=0x12429890*=0x0, lpOverlapped=0x0) returned 1 [0129.776] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/2B04.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b04.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0129.776] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0129.776] ReadFile (in: hFile=0xc0, lpBuffer=0x12563400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12563400*, lpNumberOfBytesRead=0x12429890*=0x0, lpOverlapped=0x0) returned 1 [0129.776] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.776] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.777] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/2B03.tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b03.tmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.777] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/2B03.tmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.777] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/2B03.tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b03.tmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.777] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/2B03.tmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.777] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/2B03.tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b03.tmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.777] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/2B03.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b03.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0129.777] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0129.777] CloseHandle (hObject=0x148) returned 1 [0129.777] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/2B04.tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b04.tmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.777] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/2B04.tmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.777] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/2B04.tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b04.tmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.777] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/2B04.tmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.778] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/2B04.tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b04.tmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.778] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/2B04.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b04.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0129.778] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0129.778] CloseHandle (hObject=0x148) returned 1 [0129.778] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.778] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.778] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.778] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.778] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.778] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/JumpListIconsOld/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0129.778] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0129.778] CloseHandle (hObject=0x148) returned 1 [0129.779] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.779] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.779] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0129.779] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0129.779] WriteFile (in: hFile=0x148, lpBuffer=0x12778c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12778c00*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0129.780] CloseHandle (hObject=0x148) returned 1 [0129.780] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.781] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.787] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.788] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeebb8a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeebb8a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.788] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeebb8a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeebb8a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.788] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeebb8a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeebb8a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeec06c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.788] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0129.788] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.788] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.788] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.788] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.788] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.788] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.791] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.792] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.792] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.792] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.792] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.792] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.792] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0129.792] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0129.793] CloseHandle (hObject=0x148) returned 1 [0129.793] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.793] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.793] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0129.794] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0129.794] WriteFile (in: hFile=0x148, lpBuffer=0x12453300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x12453300*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0129.795] CloseHandle (hObject=0x148) returned 1 [0129.795] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.795] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.796] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.796] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeedb470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeedb470, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.796] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeedb470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeedb470, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.796] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86513570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0129.796] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeedb470, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeedb470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeee0290, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.796] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0129.796] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0129.796] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97256fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0129.796] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0129.796] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.796] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.796] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0129.797] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124297d8 | out: lpMode=0x124297d8) returned 0 [0129.797] ReadFile (in: hFile=0x148, lpBuffer=0x12563800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124297e8, lpOverlapped=0x0 | out: lpBuffer=0x12563800*, lpNumberOfBytesRead=0x124297e8*=0x0, lpOverlapped=0x0) returned 1 [0129.797] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.797] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.797] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0129.797] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297d8 | out: lpMode=0x124297d8) returned 0 [0129.797] ReadFile (in: hFile=0x120, lpBuffer=0x12563900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124297e8, lpOverlapped=0x0 | out: lpBuffer=0x12563900*, lpNumberOfBytesRead=0x124297e8*=0x10, lpOverlapped=0x0) returned 1 [0129.798] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0129.799] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124297d8 | out: lpMode=0x124297d8) returned 0 [0129.799] ReadFile (in: hFile=0x15c, lpBuffer=0x12563a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124297e8, lpOverlapped=0x0 | out: lpBuffer=0x12563a00*, lpNumberOfBytesRead=0x124297e8*=0x0, lpOverlapped=0x0) returned 1 [0129.799] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0129.799] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x124297d8 | out: lpMode=0x124297d8) returned 0 [0129.799] ReadFile (in: hFile=0x19c, lpBuffer=0x12563b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124297e8, lpOverlapped=0x0 | out: lpBuffer=0x12563b00*, lpNumberOfBytesRead=0x124297e8*=0xc4, lpOverlapped=0x0) returned 1 [0129.800] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0129.800] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x124297d8 | out: lpMode=0x124297d8) returned 0 [0129.800] ReadFile (in: hFile=0x128, lpBuffer=0x12563c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124297e8, lpOverlapped=0x0 | out: lpBuffer=0x12563c00*, lpNumberOfBytesRead=0x124297e8*=0x29, lpOverlapped=0x0) returned 1 [0129.801] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), fInfoLevelId=0x0, lpFileInformation=0x124295c0 | out: lpFileInformation=0x124295c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0129.802] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), fInfoLevelId=0x0, lpFileInformation=0x124295c0 | out: lpFileInformation=0x124295c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97256fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1 [0129.802] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x124295c0 | out: lpFileInformation=0x124295c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0129.802] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/000003.log\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.802] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/000003.log\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.802] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/000003.log\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.802] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/000003.log\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.802] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/000003.log\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.802] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0129.802] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0129.802] CloseHandle (hObject=0x12c) returned 1 [0129.802] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.802] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.803] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.803] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.803] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.803] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0129.803] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0129.803] CloseHandle (hObject=0x12c) returned 1 [0129.803] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.803] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/LOCK\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.803] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.803] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/LOCK\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.803] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.804] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Extension Settings/ghbmnnjooekpmoecnnnilnnbdlolhkhi/LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0129.804] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0129.804] CloseHandle (hObject=0x12c) returned 1 [0129.804] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.805] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.805] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0129.805] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0129.805] WriteFile (in: hFile=0x12c, lpBuffer=0x12652000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12652000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0129.806] CloseHandle (hObject=0x12c) returned 1 [0129.807] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.807] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.807] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.807] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeef6220, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeef6220, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfeef6220, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeef6220, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfeef6220, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfeef6220, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeefb040, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9048b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", cAlternateFileName="CHROME~1.LOC")) returned 1 [0129.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x904b1a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", cAlternateFileName="CHROME~2.LOC")) returned 1 [0129.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.807] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.807] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.808] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.808] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0129.808] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0129.808] ReadFile (in: hFile=0x12c, lpBuffer=0x12658000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12658000*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0129.810] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0129.810] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0129.810] ReadFile (in: hFile=0x198, lpBuffer=0x12658100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12658100*, lpNumberOfBytesRead=0x12429890*=0x0, lpOverlapped=0x0) returned 1 [0129.811] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9048b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0129.811] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.811] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.811] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.811] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.811] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.811] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0129.811] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0129.811] CloseHandle (hObject=0x168) returned 1 [0129.811] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.812] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.812] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.812] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Local Storage/chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0129.812] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0129.812] CloseHandle (hObject=0x168) returned 1 [0129.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Login Data-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.812] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Login Data-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Login Data-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.812] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Login Data-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.813] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Login Data-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.813] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Login Data-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0129.813] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.813] CloseHandle (hObject=0x168) returned 1 [0129.813] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Network Action Predictor-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.813] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Network Action Predictor-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.813] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Network Action Predictor-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.813] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Network Action Predictor-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.813] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Network Action Predictor-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.814] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Network Action Predictor-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0129.814] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.814] CloseHandle (hObject=0x168) returned 1 [0129.814] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Origin Bound Certs-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.814] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Origin Bound Certs-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.814] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Origin Bound Certs-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.814] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Origin Bound Certs-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.814] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Origin Bound Certs-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.814] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Origin Bound Certs-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0129.815] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.815] CloseHandle (hObject=0x168) returned 1 [0129.815] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/QuotaManager-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.815] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/QuotaManager-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.815] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/QuotaManager-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.815] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/QuotaManager-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.815] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/QuotaManager-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.816] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/QuotaManager-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0129.816] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.816] CloseHandle (hObject=0x168) returned 1 [0129.816] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Shortcuts-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.816] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Shortcuts-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.816] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Shortcuts-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.816] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Shortcuts-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.816] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Shortcuts-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.817] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Shortcuts-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0129.817] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.817] CloseHandle (hObject=0x168) returned 1 [0129.817] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.817] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.817] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0129.818] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0129.818] WriteFile (in: hFile=0x168, lpBuffer=0x12785900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12785900*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0129.819] CloseHandle (hObject=0x168) returned 1 [0129.819] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.819] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.820] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.820] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef15df0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef15df0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.820] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef15df0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef15df0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.820] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfef15df0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfef15df0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef18500, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.820] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1 [0129.820] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.820] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.820] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.820] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.820] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.820] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.822] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.823] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.823] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.823] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.823] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.823] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.823] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0129.823] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0129.823] CloseHandle (hObject=0x168) returned 1 [0129.823] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.824] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.824] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0129.825] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0129.825] WriteFile (in: hFile=0x168, lpBuffer=0x127b2000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x127b2000*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0129.826] CloseHandle (hObject=0x168) returned 1 [0129.826] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.826] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.826] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.827] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef26f60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef26f60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.827] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef26f60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef26f60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.827] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8448d2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0129.827] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfef26f60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfef26f60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef2bd80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.827] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0129.827] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0129.827] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x93935fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0129.827] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0129.827] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.827] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.827] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0129.827] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x124297d8 | out: lpMode=0x124297d8) returned 0 [0129.828] ReadFile (in: hFile=0x168, lpBuffer=0x12658f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124297e8, lpOverlapped=0x0 | out: lpBuffer=0x12658f00*, lpNumberOfBytesRead=0x124297e8*=0x0, lpOverlapped=0x0) returned 1 [0129.828] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.828] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.828] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0129.828] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124297d8 | out: lpMode=0x124297d8) returned 0 [0129.828] ReadFile (in: hFile=0x154, lpBuffer=0x12659000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124297e8, lpOverlapped=0x0 | out: lpBuffer=0x12659000*, lpNumberOfBytesRead=0x124297e8*=0x10, lpOverlapped=0x0) returned 1 [0129.829] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0129.829] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x124297d8 | out: lpMode=0x124297d8) returned 0 [0129.830] ReadFile (in: hFile=0xd0, lpBuffer=0x12659100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124297e8, lpOverlapped=0x0 | out: lpBuffer=0x12659100*, lpNumberOfBytesRead=0x124297e8*=0x0, lpOverlapped=0x0) returned 1 [0129.830] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0129.830] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x124297d8 | out: lpMode=0x124297d8) returned 0 [0129.830] ReadFile (in: hFile=0x144, lpBuffer=0x12659200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124297e8, lpOverlapped=0x0 | out: lpBuffer=0x12659200*, lpNumberOfBytesRead=0x124297e8*=0xc3, lpOverlapped=0x0) returned 1 [0129.831] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0129.831] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x124297d8 | out: lpMode=0x124297d8) returned 0 [0129.831] ReadFile (in: hFile=0x16c, lpBuffer=0x12659300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124297e8, lpOverlapped=0x0 | out: lpBuffer=0x12659300*, lpNumberOfBytesRead=0x124297e8*=0x29, lpOverlapped=0x0) returned 1 [0129.832] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), fInfoLevelId=0x0, lpFileInformation=0x124295c0 | out: lpFileInformation=0x124295c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0129.832] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), fInfoLevelId=0x0, lpFileInformation=0x124295c0 | out: lpFileInformation=0x124295c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x93935fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc3)) returned 1 [0129.832] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x124295c0 | out: lpFileInformation=0x124295c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0129.833] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/000003.log\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.833] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/000003.log\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.833] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/000003.log\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.833] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/000003.log\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.833] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/000003.log\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.833] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0129.833] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0129.833] CloseHandle (hObject=0xc8) returned 1 [0129.833] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.833] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.834] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.834] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.834] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.834] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0129.834] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0129.834] CloseHandle (hObject=0xc8) returned 1 [0129.834] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.834] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/LOCK\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.834] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.834] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/LOCK\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.834] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.835] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Sync Extension Settings/pkedcjkdefgpdelpbcmbmeomcjbeemfm/LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0129.835] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0129.835] CloseHandle (hObject=0xc8) returned 1 [0129.835] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Top Sites-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.835] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Top Sites-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.835] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Top Sites-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.835] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Top Sites-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.835] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Top Sites-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.835] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Top Sites-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0129.835] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.836] CloseHandle (hObject=0xc8) returned 1 [0129.836] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.836] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.836] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0129.836] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0129.837] WriteFile (in: hFile=0xc8, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0129.838] CloseHandle (hObject=0xc8) returned 1 [0129.838] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.838] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.838] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.838] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef44420, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef44420, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef44420, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef44420, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfef44420, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfef44420, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef46b30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 1 [0129.838] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.839] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.839] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.839] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.839] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.839] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.839] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.839] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.839] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.839] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.839] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.840] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0129.840] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0129.840] CloseHandle (hObject=0xc8) returned 1 [0129.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.840] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0129.842] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0129.842] WriteFile (in: hFile=0xc8, lpBuffer=0x127d0600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x127d0600*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0129.843] CloseHandle (hObject=0xc8) returned 1 [0129.843] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.843] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.844] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.844] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef50770, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef50770, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.844] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef50770, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef50770, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfef4e060, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfef4e060, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef55590, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.844] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.844] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.844] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.844] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0129.845] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x124297d8 | out: lpMode=0x124297d8) returned 0 [0129.845] ReadFile (in: hFile=0xc8, lpBuffer=0x127de000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124297e8, lpOverlapped=0x0 | out: lpBuffer=0x127de000*, lpNumberOfBytesRead=0x124297e8*=0x100, lpOverlapped=0x0) returned 1 [0129.847] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Google Docs.ico.md5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0129.847] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x124297d8 | out: lpMode=0x124297d8) returned 0 [0129.848] ReadFile (in: hFile=0x118, lpBuffer=0x127de100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124297e8, lpOverlapped=0x0 | out: lpBuffer=0x127de100*, lpNumberOfBytesRead=0x124297e8*=0x10, lpOverlapped=0x0) returned 1 [0129.849] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), fInfoLevelId=0x0, lpFileInformation=0x124295c0 | out: lpFileInformation=0x124295c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28df6)) returned 1 [0129.849] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Google Docs.ico.md5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), fInfoLevelId=0x0, lpFileInformation=0x124295c0 | out: lpFileInformation=0x124295c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0129.849] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.849] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.849] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.850] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.850] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.850] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0129.850] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0129.850] CloseHandle (hObject=0x17c) returned 1 [0129.850] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Data-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.850] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Data-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.850] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Data-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.850] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Data-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.851] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Data-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.851] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Web Data-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0129.851] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.851] CloseHandle (hObject=0x17c) returned 1 [0129.851] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.852] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.852] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0129.852] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0129.853] WriteFile (in: hFile=0x17c, lpBuffer=0x124a6000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x124a6000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0129.854] CloseHandle (hObject=0x17c) returned 1 [0129.854] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.854] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.854] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.854] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef68e10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef68e10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.854] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef68e10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef68e10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.854] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80916060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0129.854] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfef68e10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfef68e10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef6dc30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.854] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x804795c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0129.854] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0129.854] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9ab9e110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0129.854] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0129.855] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.855] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.855] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0129.855] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0129.855] ReadFile (in: hFile=0x17c, lpBuffer=0x127de700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127de700*, lpNumberOfBytesRead=0x12429890*=0x0, lpOverlapped=0x0) returned 1 [0129.855] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.855] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.855] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0129.856] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0129.856] ReadFile (in: hFile=0x180, lpBuffer=0x127de800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127de800*, lpNumberOfBytesRead=0x12429890*=0x10, lpOverlapped=0x0) returned 1 [0129.857] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0129.857] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0129.857] ReadFile (in: hFile=0xbc, lpBuffer=0x127de900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127de900*, lpNumberOfBytesRead=0x12429890*=0x0, lpOverlapped=0x0) returned 1 [0129.857] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0129.857] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0129.858] ReadFile (in: hFile=0xe8, lpBuffer=0x127dea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127dea00*, lpNumberOfBytesRead=0x12429890*=0xa7, lpOverlapped=0x0) returned 1 [0129.858] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0129.859] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0129.859] ReadFile (in: hFile=0x114, lpBuffer=0x127dec00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x127dec00*, lpNumberOfBytesRead=0x12429890*=0x29, lpOverlapped=0x0) returned 1 [0129.860] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x804795c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0129.860] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9ab9e110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa7)) returned 1 [0129.860] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0129.860] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/000003.log\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.860] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/000003.log\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.860] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/000003.log\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.860] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/000003.log\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.860] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/000003.log\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.860] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.860] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0129.861] CloseHandle (hObject=0x10c) returned 1 [0129.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.861] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.861] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.861] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.861] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0129.861] CloseHandle (hObject=0x10c) returned 1 [0129.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.861] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/LOCK\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.862] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.862] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/LOCK\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.862] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/LOCK\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.862] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/data_reduction_proxy_leveldb/LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.862] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0129.862] CloseHandle (hObject=0x10c) returned 1 [0129.862] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/previews_opt_out.db-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.862] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/previews_opt_out.db-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.862] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/previews_opt_out.db-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.862] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/previews_opt_out.db-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.863] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/previews_opt_out.db-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.863] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/previews_opt_out.db-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.863] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.863] CloseHandle (hObject=0x10c) returned 1 [0129.863] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.863] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.863] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.864] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0129.864] WriteFile (in: hFile=0x10c, lpBuffer=0x12794000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12794000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0129.865] CloseHandle (hObject=0x10c) returned 1 [0129.865] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.865] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.866] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.866] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef83bc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef83bc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.866] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef83bc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef83bc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.866] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfef83bc0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfef83bc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef889e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.866] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.866] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.866] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.866] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.866] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.866] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.866] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.867] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.867] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.867] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/EVWhitelist/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.867] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.867] CloseHandle (hObject=0x10c) returned 1 [0129.867] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.867] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.867] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.868] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0129.868] WriteFile (in: hFile=0x10c, lpBuffer=0x12796600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12796600*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0129.869] CloseHandle (hObject=0x10c) returned 1 [0129.869] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.869] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.869] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.870] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef8d800, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef8d800, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.870] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef8d800, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef8d800, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.870] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfef8d800, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfef8d800, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef92620, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.870] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.870] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.870] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.870] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.870] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.870] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.870] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.870] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.871] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.871] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/FileTypePolicies/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.871] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.871] CloseHandle (hObject=0x10c) returned 1 [0129.871] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/First Run\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\first run\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.871] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/First Run\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.871] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/First Run\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\first run\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.871] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/First Run\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.871] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/First Run\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\first run\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.872] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/First Run" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\first run"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.872] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0129.872] CloseHandle (hObject=0x10c) returned 1 [0129.872] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.872] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.872] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.873] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0129.873] WriteFile (in: hFile=0x10c, lpBuffer=0x127a0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x127a0000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0129.874] CloseHandle (hObject=0x10c) returned 1 [0129.874] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.874] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.875] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.875] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef99b50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef99b50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.875] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfef99b50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef99b50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.875] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfef99b50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfef99b50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfef9c260, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.875] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.875] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.875] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.875] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.875] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.875] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.875] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.876] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.876] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.876] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/OriginTrials/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.876] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.876] CloseHandle (hObject=0x10c) returned 1 [0129.876] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.876] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.876] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.877] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0129.877] WriteFile (in: hFile=0x10c, lpBuffer=0x127a2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x127a2600*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0129.878] CloseHandle (hObject=0x10c) returned 1 [0129.878] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.878] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.879] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.879] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfefa3790, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefa3790, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.879] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfefa3790, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefa3790, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.879] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfefa3790, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfefa3790, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefa85b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.879] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.879] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.879] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.879] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.879] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.879] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.879] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.880] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.880] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.880] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/PepperFlash/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.880] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.880] CloseHandle (hObject=0x10c) returned 1 [0129.880] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.880] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.880] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.881] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0129.881] WriteFile (in: hFile=0x10c, lpBuffer=0x127a4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x127a4c00*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0129.882] CloseHandle (hObject=0x10c) returned 1 [0129.882] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.882] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.882] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.883] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfefad3d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefad3d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.883] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfefad3d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefad3d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.883] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfefad3d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfefad3d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefb21f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.883] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.883] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.883] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.883] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.883] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.883] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.883] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.883] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.884] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.884] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SSLErrorAssistant/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.884] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.884] CloseHandle (hObject=0x10c) returned 1 [0129.884] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Channel IDs-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.884] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Channel IDs-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.884] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Channel IDs-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.884] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Channel IDs-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.884] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Channel IDs-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.884] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Channel IDs-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.885] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0129.885] CloseHandle (hObject=0x10c) returned 1 [0129.885] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Cookies-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.885] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Cookies-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.885] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Cookies-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.885] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Cookies-journal\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.885] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Cookies-journal\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.885] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Safe Browsing Cookies-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.886] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0129.886] CloseHandle (hObject=0x10c) returned 1 [0129.886] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.886] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.886] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.887] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0129.887] WriteFile (in: hFile=0x10c, lpBuffer=0x127e7900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x127e7900*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0129.888] CloseHandle (hObject=0x10c) returned 1 [0129.888] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.888] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.888] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.888] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfefbbe30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefbbe30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.889] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfefbbe30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefbbe30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.889] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfefbbe30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfefbbe30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefbe540, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.889] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.889] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.889] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.889] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.889] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.889] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.889] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.889] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.889] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.889] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/SwReporter/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.890] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.890] CloseHandle (hObject=0x10c) returned 1 [0129.890] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.890] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.890] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.891] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0129.891] WriteFile (in: hFile=0x10c, lpBuffer=0x127f6000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x127f6000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0129.892] CloseHandle (hObject=0x10c) returned 1 [0129.892] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.892] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.892] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.892] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfefc5a70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefc5a70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.892] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfefc5a70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefc5a70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.892] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfefc5a70, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfefc5a70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefc8180, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.893] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.893] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.893] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.893] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.893] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.893] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.893] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.893] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.893] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.893] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/WidevineCdm/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.893] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.894] CloseHandle (hObject=0x10c) returned 1 [0129.894] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.894] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.894] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.894] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0129.894] WriteFile (in: hFile=0x10c, lpBuffer=0x127f8600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x127f8600*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0129.895] CloseHandle (hObject=0x10c) returned 1 [0129.896] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.896] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.896] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.896] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfefccfa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefccfa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.896] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfefccfa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefccfa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfefccfa0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfefccfa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefd1dc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.897] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.897] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.897] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.897] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.897] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.897] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.897] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.897] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.897] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/pnacl/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.897] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.898] CloseHandle (hObject=0x10c) returned 1 [0129.898] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.898] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.898] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.898] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0129.898] WriteFile (in: hFile=0x10c, lpBuffer=0x127fac00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x127fac00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0129.899] CloseHandle (hObject=0x10c) returned 1 [0129.900] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.900] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.900] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.900] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfefd6be0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefd6be0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.900] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfefd6be0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefd6be0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.900] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfefd6be0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfefd6be0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefdba00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.900] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.900] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.900] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.900] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.901] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.901] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.901] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.901] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.901] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.901] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/CrashReports/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.901] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0129.901] CloseHandle (hObject=0x10c) returned 1 [0129.902] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/History\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\history\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.902] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/History\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.902] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/History\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\history\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.904] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0129.904] WriteFile (in: hFile=0x10c, lpBuffer=0x12739300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12739300*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0129.905] CloseHandle (hObject=0x10c) returned 1 [0129.906] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/History\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\history\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.906] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/History\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.906] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\history"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.906] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/History\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.906] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.906] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.906] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.907] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0129.907] WriteFile (in: hFile=0x10c, lpBuffer=0x1273a600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x1273a600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0129.908] CloseHandle (hObject=0x10c) returned 1 [0129.908] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.908] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.908] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.908] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfefecb70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefecb70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfefecb70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfefecb70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfefecb70, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfefecb70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfeff1990, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0129.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.909] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.909] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.910] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.910] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Credentials" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\credentials"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.910] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Credentials\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.910] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.910] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Event Viewer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\event viewer"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.910] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Event Viewer\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.911] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.911] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/FORMS" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.911] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/FORMS\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.912] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.912] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.912] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.914] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.936] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Credentials\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.937] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff02ea20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff02ea20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.937] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff02ea20, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff02ea20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff033840, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.937] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.937] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.939] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Event Viewer\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xff035f50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff035f50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff035f50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff035f50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff038660, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.939] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.941] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/FORMS\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0xff03ad70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff03ad70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff03ad70, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff03ad70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff03d480, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0129.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.942] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.946] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e580 | out: pbBuffer=0x1249e580) returned 1 [0129.946] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12749202 | out: pbBuffer=0x12749202) returned 1 [0129.946] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12749291 | out: pbBuffer=0x12749291) returned 1 [0129.946] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127492b2 | out: pbBuffer=0x127492b2) returned 1 [0129.948] SetEvent (hEvent=0xa0) returned 1 [0129.948] ReadFile (in: hFile=0x160, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x3c0dc, lpOverlapped=0x0) returned 1 [0129.952] GetFileType (hFile=0x160) returned 0x1 [0129.952] SetFilePointerEx (in: hFile=0x160, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0129.952] WriteFile (in: hFile=0x160, lpBuffer=0x125b6000*, nNumberOfBytesToWrite=0x3c0dc, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x125b6000*, lpNumberOfBytesWritten=0x12429950*=0x3c0dc, lpOverlapped=0x1242995c) returned 1 [0129.953] GetFileType (hFile=0x160) returned 0x1 [0129.953] SetFilePointerEx (in: hFile=0x160, liDistanceToMove=0x3c0dc, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0129.953] ReadFile (in: hFile=0x160, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0129.953] CloseHandle (hObject=0x160) returned 1 [0129.953] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/FORMS/FRMCACHE.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0129.954] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0129.954] WriteFile (in: hFile=0x160, lpBuffer=0x125b2240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x125b2240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0129.954] CloseHandle (hObject=0x160) returned 1 [0129.954] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c000*, nNumberOfCharsToWrite=0x66, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfCharsWritten=0x12429624*=0x66) returned 1 [0129.957] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/FORMS/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.957] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/FORMS/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.957] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/FORMS/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.958] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/FORMS/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.958] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/FORMS/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.958] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/FORMS/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.958] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0129.958] CloseHandle (hObject=0x124) returned 1 [0129.958] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.959] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.959] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.959] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0129.960] WriteFile (in: hFile=0x124, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0129.961] CloseHandle (hObject=0x124) returned 1 [0129.961] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.961] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.961] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.961] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff06bab0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff06bab0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.961] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff06bab0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff06bab0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.961] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff06bab0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff06bab0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff06e1c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.961] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0129.961] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0129.961] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0129.961] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.961] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.962] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.962] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.962] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/FeedsStore.feedsdb-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0129.963] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0129.963] ReadFile (in: hFile=0x124, lpBuffer=0x12748300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12748300*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0129.964] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.965] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.966] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.967] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.967] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.967] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.967] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/FeedsStore.feedsdb-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0129.967] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.967] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.968] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.968] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.968] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.968] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.968] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0129.968] CloseHandle (hObject=0xdc) returned 1 [0129.968] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.969] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.969] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.969] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0129.969] WriteFile (in: hFile=0xdc, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0129.971] CloseHandle (hObject=0xdc) returned 1 [0129.971] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.971] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.971] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.971] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff081a40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff081a40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.971] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff081a40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff081a40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.971] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff081a40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff081a40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff086860, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.971] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0129.971] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0129.971] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0129.971] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.971] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.972] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.972] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.972] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/MSNBC News~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0129.972] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0129.972] ReadFile (in: hFile=0xdc, lpBuffer=0x12748600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12748600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0129.974] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/Microsoft at Home~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0129.974] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0129.975] ReadFile (in: hFile=0x110, lpBuffer=0x12748700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12748700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0129.976] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/Microsoft at Work~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0129.977] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0129.977] ReadFile (in: hFile=0xc0, lpBuffer=0x12748800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12748800*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0129.979] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/MSNBC News~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0129.979] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/Microsoft at Home~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0129.979] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/Microsoft at Work~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0129.980] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.980] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.980] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.980] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.980] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.980] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.980] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0129.980] CloseHandle (hObject=0x10c) returned 1 [0129.980] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.980] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.980] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.981] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0129.981] WriteFile (in: hFile=0x10c, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0129.982] CloseHandle (hObject=0x10c) returned 1 [0129.982] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.982] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.983] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.983] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff09ef00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff09ef00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.983] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff09ef00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff09ef00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.983] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff09ef00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff09ef00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff0a3d20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.983] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0129.983] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.983] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.983] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.983] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.983] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.983] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.983] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.984] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.984] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.984] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.984] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.984] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.984] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.984] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0129.984] CloseHandle (hObject=0x10c) returned 1 [0129.984] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.984] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.985] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.987] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0129.987] WriteFile (in: hFile=0x10c, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0129.988] CloseHandle (hObject=0x10c) returned 1 [0129.988] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.988] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.989] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.989] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff0ab250, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff0ab250, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.989] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff0ab250, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff0ab250, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.989] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff0a6430, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff0a6430, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff0b0070, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0129.989] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites~.feed-ms", cAlternateFileName="SUGGES~1.FEE")) returned 1 [0129.989] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0129.989] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.989] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0129.989] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.989] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.989] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/Suggested Sites~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0129.990] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0129.990] ReadFile (in: hFile=0x10c, lpBuffer=0x12748900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12748900*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0129.992] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0129.993] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0129.993] ReadFile (in: hFile=0x148, lpBuffer=0x12748a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12748a00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0129.995] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/Suggested Sites~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0129.995] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0129.995] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.996] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.996] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.996] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.996] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0129.996] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0129.996] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0129.996] CloseHandle (hObject=0x120) returned 1 [0129.996] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.997] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0129.997] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0129.998] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0129.998] WriteFile (in: hFile=0x120, lpBuffer=0x12589300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12589300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0129.999] CloseHandle (hObject=0x120) returned 1 [0129.999] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0129.999] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0129.999] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0129.999] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff0c6000, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff0c6000, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0129.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff0c6000, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff0c6000, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0129.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0129.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff0c6000, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff0c6000, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff0c8710, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.000] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0130.000] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.000] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0130.000] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0130.000] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.000] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.000] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.000] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.000] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.000] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.000] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.001] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.001] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.001] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.001] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.001] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.001] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.001] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.001] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.002] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.002] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0130.003] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.003] ReadFile (in: hFile=0x120, lpBuffer=0x12748b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12748b00*, lpNumberOfBytesRead=0x12429a88*=0x43, lpOverlapped=0x0) returned 1 [0130.004] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0130.005] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.005] ReadFile (in: hFile=0x15c, lpBuffer=0x12748c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12748c00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.007] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0130.007] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0130.007] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.007] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.007] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e700 | out: pbBuffer=0x1249e700) returned 1 [0130.008] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12748d02 | out: pbBuffer=0x12748d02) returned 1 [0130.009] SetEvent (hEvent=0x6c) returned 1 [0130.010] ReadFile (in: hFile=0x19c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242996c*=0x8000, lpOverlapped=0x0) returned 1 [0130.010] GetFileType (hFile=0x19c) returned 0x1 [0130.010] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.010] WriteFile (in: hFile=0x19c, lpBuffer=0x12566000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x12566000*, lpNumberOfBytesWritten=0x12429950*=0x8000, lpOverlapped=0x1242995c) returned 1 [0130.010] GetFileType (hFile=0x19c) returned 0x1 [0130.011] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.011] ReadFile (in: hFile=0x19c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0130.011] CloseHandle (hObject=0x19c) returned 1 [0130.011] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.011] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.011] WriteFile (in: hFile=0x19c, lpBuffer=0x127fe480*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x127fe480*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0130.011] CloseHandle (hObject=0x19c) returned 1 [0130.012] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c8c0*, nNumberOfCharsToWrite=0x69, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x1248c8c0*, lpNumberOfCharsWritten=0x12429624*=0x69) returned 1 [0130.012] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.012] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.012] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.013] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0130.013] WriteFile (in: hFile=0x19c, lpBuffer=0x1258a600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1258a600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0130.014] CloseHandle (hObject=0x19c) returned 1 [0130.014] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.014] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.015] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.015] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff0ea9f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff0ea9f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.015] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff0ea9f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff0ea9f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.015] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff0ea9f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff0ea9f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff0ef810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.015] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.015] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0130.015] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.015] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.015] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.015] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.015] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.016] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.017] ReadFile (in: hFile=0x19c, lpBuffer=0x1244c000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1244c000*, lpNumberOfBytesRead=0x124299e0*=0x43, lpOverlapped=0x0) returned 1 [0130.018] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0130.018] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.018] ReadFile (in: hFile=0x124, lpBuffer=0x1244c100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1244c100*, lpNumberOfBytesRead=0x124299e0*=0x0, lpOverlapped=0x0) returned 1 [0130.018] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0130.018] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.018] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.018] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.018] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.019] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.019] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0130.019] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.019] CloseHandle (hObject=0xdc) returned 1 [0130.019] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.019] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.019] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.019] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.019] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.019] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0130.019] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.020] CloseHandle (hObject=0xdc) returned 1 [0130.020] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.020] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.020] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0130.020] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0130.020] WriteFile (in: hFile=0xdc, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0130.021] CloseHandle (hObject=0xdc) returned 1 [0130.021] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.022] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.022] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.022] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff0fbb60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff0fbb60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.022] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff0fbb60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff0fbb60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.022] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff0fbb60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff0fbb60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff100980, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.022] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.022] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0130.022] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.022] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.022] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.022] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.022] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0130.023] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.023] ReadFile (in: hFile=0xdc, lpBuffer=0x1244c200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1244c200*, lpNumberOfBytesRead=0x124299e0*=0x43, lpOverlapped=0x0) returned 1 [0130.024] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0130.024] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.024] ReadFile (in: hFile=0x110, lpBuffer=0x1244c300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1244c300*, lpNumberOfBytesRead=0x124299e0*=0x0, lpOverlapped=0x0) returned 1 [0130.024] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0130.024] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.025] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.025] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.025] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.025] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.025] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0130.025] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.025] CloseHandle (hObject=0xc0) returned 1 [0130.025] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.025] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.025] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.025] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.026] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.026] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0130.026] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.026] CloseHandle (hObject=0xc0) returned 1 [0130.026] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.026] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.026] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.026] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.026] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.026] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0130.026] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0130.026] CloseHandle (hObject=0xc0) returned 1 [0130.027] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.027] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.027] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0130.027] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0130.027] WriteFile (in: hFile=0xc0, lpBuffer=0x1258cc00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1258cc00*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0130.028] CloseHandle (hObject=0xc0) returned 1 [0130.028] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.028] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.029] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.029] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff10ccd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff10ccd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff10ccd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff10ccd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff10ccd0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff10ccd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff111af0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0130.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.029] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.029] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.030] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.030] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0130.030] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.030] ReadFile (in: hFile=0xc0, lpBuffer=0x1244c900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1244c900*, lpNumberOfBytesRead=0x124299e0*=0x43, lpOverlapped=0x0) returned 1 [0130.031] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0130.031] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.031] ReadFile (in: hFile=0x10c, lpBuffer=0x1244ca00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1244ca00*, lpNumberOfBytesRead=0x124299e0*=0x0, lpOverlapped=0x0) returned 1 [0130.031] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0130.031] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.032] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.032] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.032] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.032] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.032] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0130.032] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.032] CloseHandle (hObject=0x148) returned 1 [0130.032] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.032] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.032] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.032] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.033] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.033] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0130.033] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.033] CloseHandle (hObject=0x148) returned 1 [0130.033] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.033] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.033] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0130.035] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0130.035] WriteFile (in: hFile=0x148, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0130.040] CloseHandle (hObject=0x148) returned 1 [0130.040] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.041] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.041] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.041] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff120550, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff120550, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.041] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff120550, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff120550, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.041] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff11de40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff11de40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff12efb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.041] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.041] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0130.041] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1 [0130.041] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.041] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.041] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.041] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.041] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0130.042] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.042] ReadFile (in: hFile=0x148, lpBuffer=0x1244cb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1244cb00*, lpNumberOfBytesRead=0x124299e0*=0x43, lpOverlapped=0x0) returned 1 [0130.043] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0130.043] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.043] ReadFile (in: hFile=0x120, lpBuffer=0x1244cc00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1244cc00*, lpNumberOfBytesRead=0x124299e0*=0x0, lpOverlapped=0x0) returned 1 [0130.044] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/ieonline.microsoft[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\ieonline.microsoft[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0130.044] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.044] ReadFile (in: hFile=0x15c, lpBuffer=0x1244cd00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1244cd00*, lpNumberOfBytesRead=0x124299e0*=0x0, lpOverlapped=0x0) returned 1 [0130.044] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0130.044] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.044] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.044] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.044] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.044] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.044] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.045] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.045] CloseHandle (hObject=0x128) returned 1 [0130.045] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.045] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.045] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.045] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.045] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.045] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.045] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.045] CloseHandle (hObject=0x128) returned 1 [0130.046] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/ieonline.microsoft[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\ieonline.microsoft[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.046] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/ieonline.microsoft[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.046] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/ieonline.microsoft[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\ieonline.microsoft[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.046] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/ieonline.microsoft[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.046] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/ieonline.microsoft[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\ieonline.microsoft[1]\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.046] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/ieonline.microsoft[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\ieonline.microsoft[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.046] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.046] CloseHandle (hObject=0x128) returned 1 [0130.046] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.046] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.046] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.047] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0130.047] WriteFile (in: hFile=0x128, lpBuffer=0x12491300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12491300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0130.048] CloseHandle (hObject=0x128) returned 1 [0130.048] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.048] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.048] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.048] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xff13da10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff13da10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.048] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xff13da10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff13da10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.048] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff13da10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff13da10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff140120, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.049] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.049] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.049] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.049] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.049] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.049] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.049] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.049] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.049] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.049] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.049] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0130.050] CloseHandle (hObject=0x128) returned 1 [0130.050] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.050] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.050] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.050] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0130.050] WriteFile (in: hFile=0x128, lpBuffer=0x12493900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12493900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0130.051] CloseHandle (hObject=0x128) returned 1 [0130.051] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.051] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.052] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.052] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xff142830, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff142830, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.052] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xff142830, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff142830, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.052] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff142830, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff142830, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff147650, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.052] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.052] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.052] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.052] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.052] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.052] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.052] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.053] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.053] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.053] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.053] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0130.053] CloseHandle (hObject=0x128) returned 1 [0130.053] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.053] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.053] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.054] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0130.054] WriteFile (in: hFile=0x128, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0130.055] CloseHandle (hObject=0x128) returned 1 [0130.055] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.055] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.055] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.055] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xff14c470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff14c470, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.055] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xff14c470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff14c470, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.055] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff14c470, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff14c470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff14eb80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.055] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.055] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.056] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.056] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.056] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.056] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.056] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.056] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.056] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.056] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.056] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0130.056] CloseHandle (hObject=0x128) returned 1 [0130.056] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.057] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.057] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.057] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0130.057] WriteFile (in: hFile=0x128, lpBuffer=0x12454600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12454600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0130.058] CloseHandle (hObject=0x128) returned 1 [0130.058] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.058] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.058] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.059] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xff1539a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff1539a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.059] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xff1539a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff1539a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.059] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff1539a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff1539a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff1587c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.059] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.059] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.059] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.059] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.059] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.059] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.059] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.059] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.059] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.059] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.059] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0130.060] CloseHandle (hObject=0x128) returned 1 [0130.060] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.061] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.061] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.067] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0130.067] WriteFile (in: hFile=0x128, lpBuffer=0x12456c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12456c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0130.068] CloseHandle (hObject=0x128) returned 1 [0130.068] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.068] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.068] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.068] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff15d5e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff15d5e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.068] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff15d5e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff15d5e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.068] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff15d5e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff15d5e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff16e750, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.068] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0130.068] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d977900, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0130.068] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0130.068] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1 [0130.068] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95014270, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x95014270, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x95014270, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1 [0130.069] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0130.069] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.069] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.069] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.069] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.069] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.069] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.070] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.070] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.071] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.071] ReadFile (in: hFile=0x128, lpBuffer=0x12458900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12458900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.073] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.073] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.073] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.073] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0130.074] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.074] ReadFile (in: hFile=0x12c, lpBuffer=0x12458a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12458a00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.075] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0130.076] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.076] ReadFile (in: hFile=0x198, lpBuffer=0x12458b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12458b00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.078] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0130.080] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0130.080] ReadFile (in: hFile=0x168, lpBuffer=0x12458c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12458c00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0130.082] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95014270, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x95014270, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x95014270, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0130.082] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.082] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.082] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249eb00 | out: pbBuffer=0x1249eb00) returned 1 [0130.083] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2674 | out: pbBuffer=0x124e2674) returned 1 [0130.083] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12458d02 | out: pbBuffer=0x12458d02) returned 1 [0130.083] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12458d14 | out: pbBuffer=0x12458d14) returned 1 [0130.084] SetEvent (hEvent=0xb8) returned 1 [0130.084] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x4000, lpOverlapped=0x0) returned 1 [0130.085] GetFileType (hFile=0x154) returned 0x1 [0130.085] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.085] WriteFile (in: hFile=0x154, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x12429950*=0x4000, lpOverlapped=0x1242995c) returned 1 [0130.085] GetFileType (hFile=0x154) returned 0x1 [0130.085] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.085] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0130.085] CloseHandle (hObject=0x154) returned 1 [0130.085] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.086] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.086] WriteFile (in: hFile=0x154, lpBuffer=0x127b8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x127b8240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0130.086] CloseHandle (hObject=0x154) returned 1 [0130.086] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c3680*, nNumberOfCharsToWrite=0x72, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124c3680*, lpNumberOfCharsWritten=0x12429624*=0x72) returned 1 [0130.087] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9)) returned 1 [0130.087] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.087] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.088] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0130.089] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d8002 | out: pbBuffer=0x124d8002) returned 1 [0130.089] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d80d4 | out: pbBuffer=0x124d80d4) returned 1 [0130.090] CloseHandle (hObject=0xc0) returned 1 [0130.090] CloseHandle (hObject=0x110) returned 1 [0130.090] CloseHandle (hObject=0xdc) returned 1 [0130.090] CloseHandle (hObject=0x124) returned 1 [0130.090] CloseHandle (hObject=0x19c) returned 1 [0130.090] CloseHandle (hObject=0x15c) returned 1 [0130.091] CloseHandle (hObject=0x120) returned 1 [0130.091] CloseHandle (hObject=0x148) returned 1 [0130.091] CloseHandle (hObject=0x10c) returned 1 [0130.103] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0130.178] SetEvent (hEvent=0x6c) returned 1 [0130.178] SetEvent (hEvent=0xa0) returned 1 [0130.178] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0130.373] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0130.394] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0130.401] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0130.452] SetEvent (hEvent=0xa0) returned 1 [0130.454] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0130.476] SetEvent (hEvent=0x6c) returned 1 [0130.476] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0130.477] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0130.477] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0130.477] SetEvent (hEvent=0x6c) returned 1 [0130.477] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0130.478] SetEvent (hEvent=0x6c) returned 1 [0130.478] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0130.490] GetFileType (hFile=0x128) returned 0x1 [0130.490] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.490] WriteFile (in: hFile=0x128, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x200000, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429950*=0x200000, lpOverlapped=0x1242995c) returned 1 [0130.498] GetFileType (hFile=0x128) returned 0x1 [0130.498] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x200000, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.498] ReadFile (in: hFile=0x128, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0130.498] CloseHandle (hObject=0x128) returned 1 [0130.498] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/edb.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.498] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.499] WriteFile (in: hFile=0x128, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0130.516] CloseHandle (hObject=0x128) returned 1 [0130.516] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x12429624*=0x68) returned 1 [0130.517] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0130.517] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.517] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.518] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0130.518] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0130.518] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466002 | out: pbBuffer=0x12466002) returned 1 [0130.520] SetEvent (hEvent=0xa0) returned 1 [0130.520] ReadFile (in: hFile=0x128, lpBuffer=0x1340a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1340a000*, lpNumberOfBytesRead=0x1242996c*=0x200000, lpOverlapped=0x0) returned 1 [0130.556] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0130.556] SetEvent (hEvent=0xa0) returned 1 [0130.556] SetEvent (hEvent=0x6c) returned 1 [0130.568] GetFileType (hFile=0x128) returned 0x1 [0130.569] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.569] WriteFile (in: hFile=0x128, lpBuffer=0x1320a000*, nNumberOfBytesToWrite=0x200000, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x1320a000*, lpNumberOfBytesWritten=0x12429950*=0x200000, lpOverlapped=0x1242995c) returned 1 [0130.583] GetFileType (hFile=0x128) returned 0x1 [0130.583] SetFilePointerEx (in: hFile=0x128, liDistanceToMove=0x200000, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.583] ReadFile (in: hFile=0x128, lpBuffer=0x1340a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1340a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0130.583] CloseHandle (hObject=0x128) returned 1 [0130.583] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.583] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.583] WriteFile (in: hFile=0x128, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0130.602] CloseHandle (hObject=0x128) returned 1 [0130.603] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x6d, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x12429624*=0x6d) returned 1 [0130.604] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/edbres00001.jrs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0130.604] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/edbres00002.jrs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0130.604] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0130.604] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.604] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.604] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.604] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.604] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.604] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.604] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0130.605] CloseHandle (hObject=0x128) returned 1 [0130.605] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.605] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.605] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.605] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0130.605] WriteFile (in: hFile=0x128, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0130.607] CloseHandle (hObject=0x128) returned 1 [0130.607] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.607] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.607] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.607] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff66dc10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff66dc10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff66dc10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff66dc10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff66dc10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff66dc10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff672a30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="old", cAlternateFileName="")) returned 1 [0130.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.607] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.607] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.607] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.608] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.608] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.610] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.611] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.611] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.611] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.611] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.611] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.612] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.612] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.612] CloseHandle (hObject=0x128) returned 1 [0130.612] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.613] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.613] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.613] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0130.613] WriteFile (in: hFile=0x128, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0130.614] CloseHandle (hObject=0x128) returned 1 [0130.615] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.615] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.615] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.615] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff681490, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff681490, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.615] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff681490, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff681490, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.615] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff681490, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff681490, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff6862b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.615] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0130.615] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2ab7545, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x206000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1 [0130.615] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1 [0130.615] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.615] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.615] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.615] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.616] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/WindowsMail.MSMessageStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.msmessagestore"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.616] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0130.616] ReadFile (in: hFile=0x128, lpBuffer=0x12466400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12466400*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0130.619] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.620] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0130.620] ReadFile (in: hFile=0x154, lpBuffer=0x12466500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12466500*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0130.622] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0130.622] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0130.622] ReadFile (in: hFile=0x18c, lpBuffer=0x12466600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12466600*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0130.625] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/WindowsMail.MSMessageStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.msmessagestore"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2ab7545, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x206000)) returned 1 [0130.625] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0130.625] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.625] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0130.626] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e280 | out: pbBuffer=0x1249e280) returned 1 [0130.627] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466702 | out: pbBuffer=0x12466702) returned 1 [0130.627] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12466790 | out: pbBuffer=0x12466790) returned 1 [0130.627] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124667d6 | out: pbBuffer=0x124667d6) returned 1 [0130.628] SetEvent (hEvent=0x6c) returned 1 [0130.628] ReadFile (in: hFile=0x19c, lpBuffer=0x12a0a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x12a0a000*, lpNumberOfBytesRead=0x1242981c*=0x4000, lpOverlapped=0x0) returned 1 [0130.628] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0130.629] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0130.629] SetEvent (hEvent=0xa0) returned 1 [0130.629] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0130.629] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0130.630] GetFileType (hFile=0x19c) returned 0x1 [0130.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0130.630] WriteFile (in: hFile=0x19c, lpBuffer=0x1244a000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1244a000*, lpNumberOfBytesWritten=0x12429800*=0x4000, lpOverlapped=0x1242980c) returned 1 [0130.630] GetFileType (hFile=0x19c) returned 0x1 [0130.630] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0130.630] ReadFile (in: hFile=0x19c, lpBuffer=0x12a0a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x12a0a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0130.630] CloseHandle (hObject=0x19c) returned 1 [0130.630] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/WindowsMail.pat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\windowsmail.pat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.630] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0130.631] WriteFile (in: hFile=0x19c, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0130.631] CloseHandle (hObject=0x19c) returned 1 [0130.631] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12466000*, nNumberOfCharsToWrite=0x7b, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x12466000*, lpNumberOfCharsWritten=0x124294d4*=0x7b) returned 1 [0130.632] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0130.632] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.632] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0130.632] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0130.633] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466102 | out: pbBuffer=0x12466102) returned 1 [0130.633] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12466130 | out: pbBuffer=0x12466130) returned 1 [0130.634] SetEvent (hEvent=0xa0) returned 1 [0130.634] ReadFile (in: hFile=0x19c, lpBuffer=0x1320a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1320a000*, lpNumberOfBytesRead=0x1242981c*=0x200000, lpOverlapped=0x0) returned 1 [0130.668] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0130.668] SetEvent (hEvent=0xa0) returned 1 [0130.668] SetEvent (hEvent=0x6c) returned 1 [0130.669] SwitchToThread () returned 1 [0130.669] SetEvent (hEvent=0xa0) returned 1 [0130.669] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0130.689] SetEvent (hEvent=0xa0) returned 1 [0130.689] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0130.690] SetEvent (hEvent=0xa0) returned 1 [0130.690] SwitchToThread () returned 1 [0130.690] SetEvent (hEvent=0x6c) returned 1 [0130.690] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0130.968] SetEvent (hEvent=0x6c) returned 1 [0130.968] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0130.976] SetEvent (hEvent=0x6c) returned 1 [0130.976] SetEvent (hEvent=0xb8) returned 1 [0130.976] CloseHandle (hObject=0x17c) returned 1 [0130.976] CloseHandle (hObject=0x118) returned 1 [0130.976] CloseHandle (hObject=0xc8) returned 1 [0130.976] CloseHandle (hObject=0x16c) returned 1 [0130.976] CloseHandle (hObject=0x144) returned 1 [0130.977] SwitchToThread () returned 1 [0131.006] SwitchToThread () returned 1 [0131.011] SetEvent (hEvent=0x6c) returned 1 [0131.011] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.019] SetEvent (hEvent=0x6c) returned 1 [0131.019] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.034] SetEvent (hEvent=0x6c) returned 1 [0131.034] SwitchToThread () returned 1 [0131.036] SetEvent (hEvent=0xb8) returned 1 [0131.036] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.084] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.088] SetEvent (hEvent=0x6c) returned 1 [0131.088] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.088] SetEvent (hEvent=0x6c) returned 1 [0131.088] SwitchToThread () returned 1 [0131.089] SetEvent (hEvent=0xb8) returned 1 [0131.089] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.095] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.098] SetEvent (hEvent=0x6c) returned 1 [0131.098] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.099] SetEvent (hEvent=0x6c) returned 1 [0131.099] SwitchToThread () returned 1 [0131.100] SetEvent (hEvent=0xb8) returned 1 [0131.100] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.106] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.109] SetEvent (hEvent=0x6c) returned 1 [0131.109] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.109] SetEvent (hEvent=0x6c) returned 1 [0131.109] SwitchToThread () returned 1 [0131.110] SetEvent (hEvent=0xb8) returned 1 [0131.110] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.116] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.119] SetEvent (hEvent=0x6c) returned 1 [0131.119] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.119] SetEvent (hEvent=0x6c) returned 1 [0131.119] SwitchToThread () returned 1 [0131.120] SetEvent (hEvent=0xb8) returned 1 [0131.120] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.126] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.129] SetEvent (hEvent=0x6c) returned 1 [0131.129] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.130] SetEvent (hEvent=0x6c) returned 1 [0131.130] SwitchToThread () returned 1 [0131.131] SetEvent (hEvent=0xb8) returned 1 [0131.131] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.137] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.139] SetEvent (hEvent=0x6c) returned 1 [0131.139] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.140] SetEvent (hEvent=0x6c) returned 1 [0131.140] SwitchToThread () returned 1 [0131.141] SetEvent (hEvent=0xb8) returned 1 [0131.141] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.146] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.149] SetEvent (hEvent=0x6c) returned 1 [0131.149] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.150] SetEvent (hEvent=0x6c) returned 1 [0131.150] SwitchToThread () returned 1 [0131.151] SetEvent (hEvent=0xb8) returned 1 [0131.151] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.156] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.159] SetEvent (hEvent=0x6c) returned 1 [0131.159] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.160] SetEvent (hEvent=0x6c) returned 1 [0131.160] SwitchToThread () returned 1 [0131.161] SetEvent (hEvent=0xb8) returned 1 [0131.161] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.166] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.169] SetEvent (hEvent=0x6c) returned 1 [0131.169] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.169] SetEvent (hEvent=0x6c) returned 1 [0131.169] SwitchToThread () returned 1 [0131.170] SetEvent (hEvent=0xb8) returned 1 [0131.170] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.188] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.467] SetEvent (hEvent=0xb8) returned 1 [0131.467] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.469] SetEvent (hEvent=0xb8) returned 1 [0131.469] SetEvent (hEvent=0xa0) returned 1 [0131.469] CloseHandle (hObject=0x128) returned 1 [0131.469] SwitchToThread () returned 1 [0131.472] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.542] SetEvent (hEvent=0xa0) returned 1 [0131.542] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0131.547] SetEvent (hEvent=0xa0) returned 1 [0131.547] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0131.550] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.705] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.707] SetEvent (hEvent=0xa0) returned 1 [0131.707] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.707] SetEvent (hEvent=0xa0) returned 1 [0131.707] SetEvent (hEvent=0x6c) returned 1 [0131.707] SwitchToThread () returned 1 [0131.708] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.712] SetEvent (hEvent=0xa0) returned 1 [0131.712] SetEvent (hEvent=0x6c) returned 1 [0131.712] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.714] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.718] SetEvent (hEvent=0xa0) returned 1 [0131.718] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.718] SetEvent (hEvent=0xa0) returned 1 [0131.718] SetEvent (hEvent=0x6c) returned 1 [0131.718] SwitchToThread () returned 1 [0131.719] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.723] SetEvent (hEvent=0xa0) returned 1 [0131.723] SetEvent (hEvent=0x6c) returned 1 [0131.723] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.724] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.728] SetEvent (hEvent=0xa0) returned 1 [0131.728] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.729] SetEvent (hEvent=0xa0) returned 1 [0131.729] SetEvent (hEvent=0x6c) returned 1 [0131.729] SwitchToThread () returned 1 [0131.730] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.734] SetEvent (hEvent=0xa0) returned 1 [0131.734] SetEvent (hEvent=0x6c) returned 1 [0131.734] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.736] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.740] SetEvent (hEvent=0xa0) returned 1 [0131.740] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.740] SetEvent (hEvent=0xa0) returned 1 [0131.740] SetEvent (hEvent=0x6c) returned 1 [0131.740] SwitchToThread () returned 1 [0131.741] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.745] SetEvent (hEvent=0xa0) returned 1 [0131.745] SetEvent (hEvent=0x6c) returned 1 [0131.745] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.747] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.751] SetEvent (hEvent=0xa0) returned 1 [0131.751] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.751] SetEvent (hEvent=0xa0) returned 1 [0131.751] SetEvent (hEvent=0x6c) returned 1 [0131.751] SwitchToThread () returned 1 [0131.757] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.761] SetEvent (hEvent=0xa0) returned 1 [0131.761] SetEvent (hEvent=0x6c) returned 1 [0131.761] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.764] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.855] SetEvent (hEvent=0xa0) returned 1 [0131.855] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.868] SetEvent (hEvent=0xa0) returned 1 [0131.868] SetEvent (hEvent=0x6c) returned 1 [0131.868] SwitchToThread () returned 1 [0131.878] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.904] SetEvent (hEvent=0xa0) returned 1 [0131.904] SetEvent (hEvent=0x6c) returned 1 [0131.904] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.919] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.965] SetEvent (hEvent=0xa0) returned 1 [0131.965] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0131.977] SetEvent (hEvent=0xa0) returned 1 [0131.977] SetEvent (hEvent=0x6c) returned 1 [0131.977] SwitchToThread () returned 1 [0131.981] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.014] SetEvent (hEvent=0xa0) returned 1 [0132.015] SetEvent (hEvent=0x6c) returned 1 [0132.015] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.018] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.023] SetEvent (hEvent=0xa0) returned 1 [0132.023] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.023] SetEvent (hEvent=0xa0) returned 1 [0132.023] SetEvent (hEvent=0x6c) returned 1 [0132.023] SwitchToThread () returned 1 [0132.025] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.030] SetEvent (hEvent=0xa0) returned 1 [0132.030] SetEvent (hEvent=0x6c) returned 1 [0132.030] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.031] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.036] SetEvent (hEvent=0xa0) returned 1 [0132.036] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.036] SetEvent (hEvent=0xa0) returned 1 [0132.036] SetEvent (hEvent=0x6c) returned 1 [0132.036] SwitchToThread () returned 1 [0132.038] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.042] SetEvent (hEvent=0xa0) returned 1 [0132.042] SetEvent (hEvent=0x6c) returned 1 [0132.042] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.044] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.048] SetEvent (hEvent=0xa0) returned 1 [0132.049] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.049] SetEvent (hEvent=0xa0) returned 1 [0132.049] SetEvent (hEvent=0x6c) returned 1 [0132.049] SwitchToThread () returned 1 [0132.050] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.054] SetEvent (hEvent=0xa0) returned 1 [0132.054] SetEvent (hEvent=0x6c) returned 1 [0132.055] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.057] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.061] SetEvent (hEvent=0xa0) returned 1 [0132.061] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.061] SetEvent (hEvent=0xa0) returned 1 [0132.061] SetEvent (hEvent=0x6c) returned 1 [0132.062] SwitchToThread () returned 1 [0132.063] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.067] SetEvent (hEvent=0xa0) returned 1 [0132.067] SetEvent (hEvent=0x6c) returned 1 [0132.067] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.069] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.073] SetEvent (hEvent=0xa0) returned 1 [0132.073] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.074] SetEvent (hEvent=0xa0) returned 1 [0132.074] SetEvent (hEvent=0x6c) returned 1 [0132.074] SwitchToThread () returned 1 [0132.075] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.079] SetEvent (hEvent=0xa0) returned 1 [0132.079] SetEvent (hEvent=0x6c) returned 1 [0132.079] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.081] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.086] SetEvent (hEvent=0xa0) returned 1 [0132.086] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.086] SetEvent (hEvent=0xa0) returned 1 [0132.086] SetEvent (hEvent=0x6c) returned 1 [0132.086] SwitchToThread () returned 1 [0132.087] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.095] SetEvent (hEvent=0xa0) returned 1 [0132.095] SetEvent (hEvent=0x6c) returned 1 [0132.095] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.114] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.119] SetEvent (hEvent=0xa0) returned 1 [0132.119] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.119] SetEvent (hEvent=0xa0) returned 1 [0132.119] SetEvent (hEvent=0x6c) returned 1 [0132.119] SwitchToThread () returned 1 [0132.121] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.140] SetEvent (hEvent=0x6c) returned 1 [0132.140] SetEvent (hEvent=0xb8) returned 1 [0132.140] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0132.141] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.141] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0132.142] SetEvent (hEvent=0x6c) returned 1 [0132.142] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0132.143] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.160] SetEvent (hEvent=0x6c) returned 1 [0132.160] SetEvent (hEvent=0xb8) returned 1 [0132.160] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.166] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.182] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.183] SetEvent (hEvent=0xb8) returned 1 [0132.183] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.186] SetEvent (hEvent=0xb8) returned 1 [0132.186] SetEvent (hEvent=0x6c) returned 1 [0132.186] CloseHandle (hObject=0x178) returned 1 [0132.186] CloseHandle (hObject=0x154) returned 1 [0132.186] SwitchToThread () returned 1 [0132.187] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.248] SetEvent (hEvent=0x6c) returned 1 [0132.248] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0132.249] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.249] SetEvent (hEvent=0x6c) returned 1 [0132.249] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0132.250] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.250] CloseHandle (hObject=0x124) returned 1 [0132.250] CloseHandle (hObject=0x178) returned 1 [0132.250] CloseHandle (hObject=0x154) returned 1 [0132.250] CloseHandle (hObject=0xdc) returned 1 [0132.250] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.677] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.737] SetEvent (hEvent=0xb8) returned 1 [0132.737] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.737] SetEvent (hEvent=0xb8) returned 1 [0132.738] SetEvent (hEvent=0x6c) returned 1 [0132.738] CloseHandle (hObject=0x178) returned 1 [0132.739] CloseHandle (hObject=0x154) returned 1 [0132.755] CloseHandle (hObject=0xdc) returned 1 [0132.755] CloseHandle (hObject=0x120) returned 1 [0132.755] CloseHandle (hObject=0x27c) returned 1 [0132.756] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0132.758] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0132.759] SetEvent (hEvent=0xb8) returned 1 [0132.759] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0132.760] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.760] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.871] SetEvent (hEvent=0xb8) returned 1 [0132.871] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0132.948] SetEvent (hEvent=0xb8) returned 1 [0132.948] SetEvent (hEvent=0x6c) returned 1 [0132.948] CloseHandle (hObject=0x120) returned 1 [0132.948] CloseHandle (hObject=0x27c) returned 1 [0133.088] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0133.089] SetEvent (hEvent=0xa0) returned 1 [0133.089] CloseHandle (hObject=0x124) returned 1 [0133.089] SetEvent (hEvent=0xb8) returned 1 [0133.090] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0133.237] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.164] SetEvent (hEvent=0xa0) returned 1 [0134.164] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.165] SetEvent (hEvent=0xa0) returned 1 [0134.165] SwitchToThread () returned 1 [0134.226] SetEvent (hEvent=0xb8) returned 1 [0134.226] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.638] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.852] SetEvent (hEvent=0xb8) returned 1 [0134.852] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0134.853] SetEvent (hEvent=0xb8) returned 1 [0134.853] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0134.856] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.856] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0134.857] SetEvent (hEvent=0xb8) returned 1 [0134.857] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x469c, lpOverlapped=0x0) returned 1 [0134.857] GetFileType (hFile=0x190) returned 0x1 [0134.857] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.857] WriteFile (in: hFile=0x190, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x469c, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429aa0*=0x469c, lpOverlapped=0x12429aac) returned 1 [0134.858] GetFileType (hFile=0x190) returned 0x1 [0134.858] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x469c, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.858] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.858] CloseHandle (hObject=0x190) returned 1 [0134.858] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/5dK F4favnbdLGxZ.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5dk f4favnbdlgxz.rtf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.858] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.858] WriteFile (in: hFile=0x190, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.858] CloseHandle (hObject=0x190) returned 1 [0134.859] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1249a000*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1249a000*, lpNumberOfCharsWritten=0x12429774*=0x60) returned 1 [0134.859] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/5eNMeUMrObI.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5enmeumrobi.wav"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad19fcc0, ftCreationTime.dwHighDateTime=0x1d4c53f, ftLastAccessTime.dwLowDateTime=0xcdfcead0, ftLastAccessTime.dwHighDateTime=0x1d4cb00, ftLastWriteTime.dwLowDateTime=0xcdfcead0, ftLastWriteTime.dwHighDateTime=0x1d4cb00, nFileSizeHigh=0x0, nFileSizeLow=0x234f)) returned 1 [0134.859] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/5eNMeUMrObI.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5enmeumrobi.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.859] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.860] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.861] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410084 | out: pbBuffer=0x12410084) returned 1 [0134.861] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a202 | out: pbBuffer=0x1244a202) returned 1 [0134.861] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a23a | out: pbBuffer=0x1244a23a) returned 1 [0134.861] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.863] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.864] SetEvent (hEvent=0xb8) returned 1 [0134.864] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.864] SetEvent (hEvent=0xb8) returned 1 [0134.864] SetEvent (hEvent=0xa8) returned 1 [0134.864] SwitchToThread () returned 1 [0134.866] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.869] SetEvent (hEvent=0xb8) returned 1 [0134.869] SetEvent (hEvent=0xa8) returned 1 [0134.870] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.871] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.875] SetEvent (hEvent=0xb8) returned 1 [0134.875] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.875] SetEvent (hEvent=0xb8) returned 1 [0134.875] SetEvent (hEvent=0xa8) returned 1 [0134.875] SwitchToThread () returned 1 [0134.877] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.881] SetEvent (hEvent=0xb8) returned 1 [0134.881] SetEvent (hEvent=0xa8) returned 1 [0134.881] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.883] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.887] SetEvent (hEvent=0xb8) returned 1 [0134.887] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.887] SetEvent (hEvent=0xb8) returned 1 [0134.887] SetEvent (hEvent=0xa8) returned 1 [0134.887] SwitchToThread () returned 1 [0134.889] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.892] SetEvent (hEvent=0xb8) returned 1 [0134.892] SetEvent (hEvent=0xa8) returned 1 [0134.892] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.894] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.898] SetEvent (hEvent=0xb8) returned 1 [0134.898] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.898] SetEvent (hEvent=0xb8) returned 1 [0134.898] SetEvent (hEvent=0xa8) returned 1 [0134.898] SwitchToThread () returned 1 [0134.899] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.903] SetEvent (hEvent=0xb8) returned 1 [0134.903] SetEvent (hEvent=0xa8) returned 1 [0134.903] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.904] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.908] SetEvent (hEvent=0xb8) returned 1 [0134.908] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.908] SetEvent (hEvent=0xb8) returned 1 [0134.908] SetEvent (hEvent=0xa8) returned 1 [0134.908] SwitchToThread () returned 1 [0134.910] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.913] SetEvent (hEvent=0xb8) returned 1 [0134.913] SetEvent (hEvent=0xa8) returned 1 [0134.913] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.915] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.918] SetEvent (hEvent=0xb8) returned 1 [0134.918] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.918] SetEvent (hEvent=0xb8) returned 1 [0134.918] SetEvent (hEvent=0xa8) returned 1 [0134.918] SwitchToThread () returned 1 [0134.920] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.923] SetEvent (hEvent=0xb8) returned 1 [0134.923] SetEvent (hEvent=0xa8) returned 1 [0134.923] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.925] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.929] SetEvent (hEvent=0xb8) returned 1 [0134.929] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.929] SetEvent (hEvent=0xb8) returned 1 [0134.929] SetEvent (hEvent=0xa8) returned 1 [0134.929] SwitchToThread () returned 1 [0134.931] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.935] SetEvent (hEvent=0xb8) returned 1 [0134.935] SetEvent (hEvent=0xa8) returned 1 [0134.935] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.936] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.940] SetEvent (hEvent=0xb8) returned 1 [0134.940] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.940] SetEvent (hEvent=0xb8) returned 1 [0134.940] SetEvent (hEvent=0xa8) returned 1 [0134.941] SwitchToThread () returned 1 [0134.942] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.946] SetEvent (hEvent=0xb8) returned 1 [0134.946] SetEvent (hEvent=0xa8) returned 1 [0134.946] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.948] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.951] SetEvent (hEvent=0xb8) returned 1 [0134.951] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.952] SetEvent (hEvent=0xb8) returned 1 [0134.952] SetEvent (hEvent=0xa8) returned 1 [0134.952] SwitchToThread () returned 1 [0134.953] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.956] SetEvent (hEvent=0xb8) returned 1 [0134.956] SetEvent (hEvent=0xa8) returned 1 [0134.956] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.958] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.962] SetEvent (hEvent=0xb8) returned 1 [0134.962] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.963] SetEvent (hEvent=0xb8) returned 1 [0134.963] SetEvent (hEvent=0xa8) returned 1 [0134.963] SwitchToThread () returned 1 [0134.965] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.968] SetEvent (hEvent=0xb8) returned 1 [0134.968] SetEvent (hEvent=0xa8) returned 1 [0134.968] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.970] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.973] SetEvent (hEvent=0xb8) returned 1 [0134.973] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.973] SetEvent (hEvent=0xb8) returned 1 [0134.973] SetEvent (hEvent=0xa8) returned 1 [0134.974] SwitchToThread () returned 1 [0134.975] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.978] SetEvent (hEvent=0xb8) returned 1 [0134.978] SetEvent (hEvent=0xa8) returned 1 [0134.978] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.980] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.983] SetEvent (hEvent=0xb8) returned 1 [0134.983] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.983] SetEvent (hEvent=0xb8) returned 1 [0134.983] SetEvent (hEvent=0xa8) returned 1 [0134.983] SwitchToThread () returned 1 [0134.984] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.988] SetEvent (hEvent=0xb8) returned 1 [0134.988] SetEvent (hEvent=0xa8) returned 1 [0134.988] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.990] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.994] SetEvent (hEvent=0xb8) returned 1 [0134.994] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.994] SetEvent (hEvent=0xb8) returned 1 [0134.994] SetEvent (hEvent=0xa8) returned 1 [0134.994] SwitchToThread () returned 1 [0134.995] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0134.999] SetEvent (hEvent=0xb8) returned 1 [0134.999] SetEvent (hEvent=0xa8) returned 1 [0134.999] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.001] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.004] SetEvent (hEvent=0xb8) returned 1 [0135.004] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.005] SetEvent (hEvent=0xb8) returned 1 [0135.005] SetEvent (hEvent=0xa8) returned 1 [0135.005] SwitchToThread () returned 1 [0135.006] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.009] SetEvent (hEvent=0xb8) returned 1 [0135.009] SetEvent (hEvent=0xa8) returned 1 [0135.009] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.011] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.015] SetEvent (hEvent=0xb8) returned 1 [0135.015] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.015] SetEvent (hEvent=0xb8) returned 1 [0135.015] SetEvent (hEvent=0xa8) returned 1 [0135.015] SwitchToThread () returned 1 [0135.016] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.221] SetEvent (hEvent=0xa8) returned 1 [0135.221] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0135.229] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.229] SetEvent (hEvent=0xa8) returned 1 [0135.230] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0135.283] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.283] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0135.283] SetEvent (hEvent=0xac) returned 1 [0135.283] SetEvent (hEvent=0xa8) returned 1 [0135.306] GetFileType (hFile=0x120) returned 0x1 [0135.306] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.306] WriteFile (in: hFile=0x120, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x3fe4ab, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429800*=0x3fe4ab, lpOverlapped=0x1242980c) returned 1 [0135.348] GetFileType (hFile=0x120) returned 0x1 [0135.348] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x3fe4ab, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.348] ReadFile (in: hFile=0x120, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0135.348] CloseHandle (hObject=0x120) returned 1 [0135.348] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/14/Built-In Building Blocks.dotx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.349] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.349] WriteFile (in: hFile=0x120, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0135.349] CloseHandle (hObject=0x120) returned 1 [0135.349] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d8000*, nNumberOfCharsToWrite=0x94, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x124d8000*, lpNumberOfCharsWritten=0x124294d4*=0x94) returned 1 [0135.350] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/14/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.350] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/14/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.351] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/14/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.351] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/14/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.351] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/14/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.351] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/14/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.351] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.351] CloseHandle (hObject=0x120) returned 1 [0135.351] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.351] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.352] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.352] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.352] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.352] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.352] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.352] CloseHandle (hObject=0x120) returned 1 [0135.352] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.352] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.352] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.353] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.353] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.353] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.353] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.353] CloseHandle (hObject=0x120) returned 1 [0135.353] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.353] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.353] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.354] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.354] WriteFile (in: hFile=0x120, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.355] CloseHandle (hObject=0x120) returned 1 [0135.355] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.355] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.355] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.355] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x223a280, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x223a280, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x223a280, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x223a280, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x223a280, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x223a280, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x223a280, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0135.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.356] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.356] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.356] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.356] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.356] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.356] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.356] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.356] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.357] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.357] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.357] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.357] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.357] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.357] CloseHandle (hObject=0x120) returned 1 [0135.357] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.357] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.357] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.358] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.358] WriteFile (in: hFile=0x120, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.359] CloseHandle (hObject=0x120) returned 1 [0135.359] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.359] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.359] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.359] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0x223a280, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x223a280, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0x223a280, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x223a280, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.360] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x223a280, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x223a280, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x223a280, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.360] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.360] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.360] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.360] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.360] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.360] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.360] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.360] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.360] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.360] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel/XLSTART/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.360] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.360] CloseHandle (hObject=0x120) returned 1 [0135.361] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.361] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.361] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.361] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.361] WriteFile (in: hFile=0x120, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.362] CloseHandle (hObject=0x120) returned 1 [0135.362] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.362] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.362] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.363] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x223a280, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x223a280, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.363] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x223a280, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x223a280, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.363] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x223a280, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x223a280, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x223a280, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.363] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.363] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.363] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.363] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.363] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.363] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.363] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.363] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.363] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.363] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.363] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.364] CloseHandle (hObject=0x120) returned 1 [0135.364] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.364] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.364] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.364] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.365] WriteFile (in: hFile=0x120, lpBuffer=0x1257f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1257f300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.365] CloseHandle (hObject=0x120) returned 1 [0135.366] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.366] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.366] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.366] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x22603e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22603e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.366] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x22603e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22603e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.366] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x22603e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x22603e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22603e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.366] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.366] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.366] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.366] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.366] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.366] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.366] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.367] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.367] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.367] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.367] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.367] CloseHandle (hObject=0x120) returned 1 [0135.367] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.367] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.367] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.367] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.368] WriteFile (in: hFile=0x120, lpBuffer=0x12581900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12581900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.369] CloseHandle (hObject=0x120) returned 1 [0135.369] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.369] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.369] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.369] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x22603e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22603e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.369] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x22603e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22603e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.369] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x22603e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x22603e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22603e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.369] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.369] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.369] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.369] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.369] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.370] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.370] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.370] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.370] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.370] CloseHandle (hObject=0x120) returned 1 [0135.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.370] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.371] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.371] WriteFile (in: hFile=0x120, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.372] CloseHandle (hObject=0x120) returned 1 [0135.372] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.372] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.372] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.372] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x22603e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22603e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.372] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x22603e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22603e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.372] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x22603e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x22603e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22603e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.372] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.372] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.373] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.373] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.373] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.373] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.373] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.373] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.373] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.373] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.373] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.373] CloseHandle (hObject=0x120) returned 1 [0135.373] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.373] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.374] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.383] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.383] WriteFile (in: hFile=0x120, lpBuffer=0x12774600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12774600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.384] CloseHandle (hObject=0x120) returned 1 [0135.384] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt")) returned 0x20 [0135.385] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0135.385] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.385] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x228b360, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x228b360, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.385] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x228b360, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x228b360, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.385] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x22603e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x22603e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2290180, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.385] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0135.385] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1 [0135.385] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.385] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.385] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.385] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.385] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.385] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.386] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.386] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.386] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.386] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.386] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.386] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.386] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.386] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.386] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.387] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.387] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.387] CloseHandle (hObject=0x120) returned 1 [0135.387] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.387] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.387] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.388] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.388] WriteFile (in: hFile=0x120, lpBuffer=0x12776c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12776c00*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.389] CloseHandle (hObject=0x120) returned 1 [0135.389] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt")) returned 0x20 [0135.389] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0135.389] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.389] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x22976b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22976b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.390] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x22976b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22976b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.390] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x22976b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x22976b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x229c4d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.390] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4eb35ad0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.390] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a683760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0135.390] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb0f970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4eb0f970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4eb0f970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Launch Internet Explorer Browser.lnk", cAlternateFileName="LAUNCH~1.LNK")) returned 1 [0135.390] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1 [0135.390] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0135.390] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0135.390] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.390] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.390] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.390] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.390] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.391] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.391] ReadFile (in: hFile=0x120, lpBuffer=0x12778200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12778200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0135.393] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0135.393] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.394] ReadFile (in: hFile=0x27c, lpBuffer=0x12778400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12778400*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0135.397] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0135.398] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.398] ReadFile (in: hFile=0x108, lpBuffer=0x12778500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12778500*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0135.399] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.399] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.399] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.399] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0135.400] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.400] ReadFile (in: hFile=0xdc, lpBuffer=0x12778600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12778600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0135.401] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0135.401] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.402] ReadFile (in: hFile=0x124, lpBuffer=0x12778700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12778700*, lpNumberOfBytesRead=0x124299e0*=0xdd, lpOverlapped=0x0) returned 1 [0135.402] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a683760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x8e9)) returned 1 [0135.402] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb0f970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4eb0f970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4eb0f970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5a7)) returned 1 [0135.402] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0135.403] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0135.403] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4eb35ad0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0135.403] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.403] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.403] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.403] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.403] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.403] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.403] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.403] CloseHandle (hObject=0x138) returned 1 [0135.403] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.404] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.404] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.408] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.409] WriteFile (in: hFile=0x138, lpBuffer=0x12767300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12767300*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.410] CloseHandle (hObject=0x138) returned 1 [0135.410] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt")) returned 0x20 [0135.410] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0135.410] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.411] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x22c0ec0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22c0ec0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.411] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x22c0ec0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22c0ec0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.411] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x22bc0a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x22bc0a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22cab00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.411] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0135.411] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0135.411] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.411] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.411] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.411] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.411] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.411] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.412] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.412] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.412] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.412] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.412] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.412] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.412] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.412] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.413] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.413] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.413] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.413] CloseHandle (hObject=0x138) returned 1 [0135.413] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.413] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.413] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.414] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0135.414] WriteFile (in: hFile=0x138, lpBuffer=0x12769900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12769900*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0135.415] CloseHandle (hObject=0x138) returned 1 [0135.416] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt")) returned 0x20 [0135.416] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0135.416] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.416] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x22d4740, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22d4740, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.416] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x22d4740, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22d4740, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.416] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x22d4740, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x22d4740, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22d9560, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.416] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.417] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.417] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.417] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.417] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.417] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.417] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.417] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.417] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.417] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.417] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0135.417] CloseHandle (hObject=0x138) returned 1 [0135.418] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.418] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.418] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.419] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0135.419] WriteFile (in: hFile=0x138, lpBuffer=0x1265a000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x1265a000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0135.420] CloseHandle (hObject=0x138) returned 1 [0135.421] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt")) returned 0x20 [0135.421] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0135.421] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.421] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x22de380, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22de380, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x22de380, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22de380, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x22de380, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x22de380, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x22e58b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc4b320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e02c640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e02c640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0135.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc251c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc251c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (2).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1 [0135.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0135.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0de7e00, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0135.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer (2).lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0135.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0135.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player (2).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0135.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0135.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.422] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.422] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.422] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.422] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.422] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0135.423] ReadFile (in: hFile=0x138, lpBuffer=0x12778c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12778c00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0135.423] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.424] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0135.424] ReadFile (in: hFile=0x190, lpBuffer=0x12778d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12778d00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0135.424] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0135.425] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0135.425] ReadFile (in: hFile=0xfc, lpBuffer=0x12778e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12778e00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0135.427] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0135.427] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0135.427] ReadFile (in: hFile=0x104, lpBuffer=0x12779000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12779000*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0135.428] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0135.428] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0135.428] ReadFile (in: hFile=0xf0, lpBuffer=0x12779100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12779100*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0135.429] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0135.430] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0135.430] ReadFile (in: hFile=0xe4, lpBuffer=0x12779300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12779300*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0135.431] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0135.432] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0135.432] ReadFile (in: hFile=0x154, lpBuffer=0x12779400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12779400*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0135.433] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0135.433] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0135.433] ReadFile (in: hFile=0x178, lpBuffer=0x12779500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12779500*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0135.435] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.435] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0135.435] ReadFile (in: hFile=0x18c, lpBuffer=0x12779600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12779600*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0135.436] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e02c640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e02c640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd)) returned 1 [0135.436] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc251c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc251c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5ad)) returned 1 [0135.436] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9)) returned 1 [0135.436] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0de7e00, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491)) returned 1 [0135.437] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc)) returned 1 [0135.437] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc)) returned 1 [0135.437] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b)) returned 1 [0135.437] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b)) returned 1 [0135.437] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc4b320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c)) returned 1 [0135.437] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.437] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.437] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.437] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.437] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.437] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0135.437] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0135.438] CloseHandle (hObject=0x148) returned 1 [0135.438] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.438] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.438] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0135.438] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.439] WriteFile (in: hFile=0x148, lpBuffer=0x1265c600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1265c600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.440] CloseHandle (hObject=0x148) returned 1 [0135.440] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\@_read_to_recover_files_@.txt")) returned 0x20 [0135.440] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0135.440] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.440] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x23117d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23117d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.440] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x23117d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23117d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.440] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x23117d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x23117d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2313ee0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.440] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0135.440] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.440] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.440] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.440] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.440] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.440] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.441] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.441] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.441] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.441] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.441] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.441] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.441] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0135.441] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.441] CloseHandle (hObject=0x148) returned 1 [0135.442] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.442] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.442] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0135.443] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.444] WriteFile (in: hFile=0x148, lpBuffer=0x1265ec00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x1265ec00*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.445] CloseHandle (hObject=0x148) returned 1 [0135.445] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.445] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.445] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.445] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x231db20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x231db20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.445] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x231db20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x231db20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.445] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="65UX3YG0", cAlternateFileName="")) returned 1 [0135.445] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2318d00, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2318d00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2320230, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.445] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AY721QDR", cAlternateFileName="")) returned 1 [0135.446] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DZBKZBIC", cAlternateFileName="")) returned 1 [0135.446] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0135.446] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 1 [0135.446] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.446] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.446] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.446] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.446] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.446] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.446] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.446] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.446] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.446] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.447] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.447] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.447] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.447] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.447] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.447] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.447] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0135.448] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.448] ReadFile (in: hFile=0x148, lpBuffer=0x12779a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12779a00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.450] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0135.450] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.450] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.450] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240f4a0 | out: pbBuffer=0x1240f4a0) returned 1 [0135.452] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410880 | out: pbBuffer=0x12410880) returned 1 [0135.452] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12779b02 | out: pbBuffer=0x12779b02) returned 1 [0135.453] SetEvent (hEvent=0xb8) returned 1 [0135.453] ReadFile (in: hFile=0x15c, lpBuffer=0x1380a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1380a000*, lpNumberOfBytesRead=0x1242981c*=0x8000, lpOverlapped=0x0) returned 1 [0135.454] GetFileType (hFile=0x15c) returned 0x1 [0135.454] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.454] WriteFile (in: hFile=0x15c, lpBuffer=0x127d6000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x127d6000*, lpNumberOfBytesWritten=0x12429800*=0x8000, lpOverlapped=0x1242980c) returned 1 [0135.454] GetFileType (hFile=0x15c) returned 0x1 [0135.454] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.454] ReadFile (in: hFile=0x15c, lpBuffer=0x1380a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1380a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0135.454] CloseHandle (hObject=0x15c) returned 1 [0135.454] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.454] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.455] WriteFile (in: hFile=0x15c, lpBuffer=0x12458fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x12458fc0*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0135.455] CloseHandle (hObject=0x15c) returned 1 [0135.455] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12779d00*, nNumberOfCharsToWrite=0x7e, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x12779d00*, lpNumberOfCharsWritten=0x124294d4*=0x7e) returned 1 [0135.456] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.456] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.456] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.456] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0135.458] WriteFile (in: hFile=0x15c, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0135.459] CloseHandle (hObject=0x15c) returned 1 [0135.459] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.459] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.459] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.459] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x233d6f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x233d6f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.459] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x233d6f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x233d6f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.459] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x233d6f0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x233d6f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2342510, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.459] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.459] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.459] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.459] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.459] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.460] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.460] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.460] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.460] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.460] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/65UX3YG0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.460] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0135.460] CloseHandle (hObject=0x15c) returned 1 [0135.460] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.460] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.461] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.461] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.461] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.461] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.461] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.461] CloseHandle (hObject=0x15c) returned 1 [0135.461] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.461] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.461] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.462] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0135.462] WriteFile (in: hFile=0x15c, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0135.463] CloseHandle (hObject=0x15c) returned 1 [0135.463] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.463] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.463] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.463] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2349a40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2349a40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.463] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2349a40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2349a40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.463] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2349a40, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2349a40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2349a40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.463] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.463] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.463] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.463] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.464] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.464] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.464] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.464] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.464] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.464] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/AY721QDR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.464] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0135.464] CloseHandle (hObject=0x15c) returned 1 [0135.464] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.464] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.465] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.470] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0135.470] WriteFile (in: hFile=0x15c, lpBuffer=0x12454600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12454600*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0135.471] CloseHandle (hObject=0x15c) returned 1 [0135.471] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.472] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.472] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.472] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x234c150, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x234c150, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.472] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x234c150, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x234c150, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.472] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x234c150, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x234c150, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x235d2c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.472] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.472] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.472] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.472] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.472] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.472] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.472] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.472] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.473] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.473] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/DZBKZBIC/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.473] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0135.473] CloseHandle (hObject=0x15c) returned 1 [0135.473] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.473] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.473] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.473] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0135.474] WriteFile (in: hFile=0x15c, lpBuffer=0x12456c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12456c00*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0135.475] CloseHandle (hObject=0x15c) returned 1 [0135.475] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.475] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.475] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.475] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x23620e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23620e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.475] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x23620e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23620e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.475] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x23620e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x23620e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2366f00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.475] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.475] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.476] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.476] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.476] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.476] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.476] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.476] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.476] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.476] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer/UserData/Low/VRLZOZ0E/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.476] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0135.476] CloseHandle (hObject=0x15c) returned 1 [0135.476] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.477] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.477] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.477] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.477] WriteFile (in: hFile=0x15c, lpBuffer=0x124d1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d1300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.478] CloseHandle (hObject=0x15c) returned 1 [0135.478] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.478] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.479] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.479] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2369610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2369610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.479] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2369610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2369610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.479] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2369610, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2369610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x236e430, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.479] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.479] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.479] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.479] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.479] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.479] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.479] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.479] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.479] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.479] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.480] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.480] CloseHandle (hObject=0x15c) returned 1 [0135.480] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.480] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.480] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.480] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.481] WriteFile (in: hFile=0x15c, lpBuffer=0x124d3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d3900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.482] CloseHandle (hObject=0x15c) returned 1 [0135.482] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.482] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.482] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.482] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x2373250, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2373250, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.482] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x2373250, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2373250, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.482] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0135.482] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2373250, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2373250, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2375960, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.482] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.482] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.482] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.482] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.484] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.484] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.484] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.484] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.485] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.485] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.485] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.485] WriteFile (in: hFile=0x15c, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.486] CloseHandle (hObject=0x15c) returned 1 [0135.486] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.486] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.487] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.487] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x237ce90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x237ce90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.487] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x237ce90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x237ce90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.487] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0135.487] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x237ce90, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x237ce90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2381cb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.487] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.487] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.487] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.487] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.488] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.488] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.488] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.488] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.488] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.489] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.489] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.489] WriteFile (in: hFile=0x15c, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.490] CloseHandle (hObject=0x15c) returned 1 [0135.490] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.490] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.490] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.491] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x2386ad0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2386ad0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.491] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x2386ad0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2386ad0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.491] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2386ad0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2386ad0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x238b8f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.491] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 1 [0135.491] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.491] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.491] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.491] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.491] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033/Global.MPT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\global.mpt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.491] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.492] ReadFile (in: hFile=0x15c, lpBuffer=0x12494100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12494100*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.494] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033/Global.MPT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\global.mpt"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600)) returned 1 [0135.495] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.495] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.495] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.495] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.496] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.496] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/1033/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.496] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.496] CloseHandle (hObject=0x120) returned 1 [0135.496] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.496] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.496] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.496] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.496] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.496] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/14/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.496] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.497] CloseHandle (hObject=0x120) returned 1 [0135.497] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.497] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.497] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.507] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.507] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.507] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.507] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.508] CloseHandle (hObject=0x120) returned 1 [0135.508] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.508] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.508] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.508] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.508] WriteFile (in: hFile=0x120, lpBuffer=0x12776c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12776c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.509] CloseHandle (hObject=0x120) returned 1 [0135.509] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.509] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.510] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.510] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x23b7810, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23b7810, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.510] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x23b7810, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23b7810, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.510] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x23b7810, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x23b7810, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23b9f20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.510] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0135.510] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.510] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.510] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.510] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.510] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.510] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.510] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.511] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.511] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.511] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.511] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.511] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.511] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.511] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.511] CloseHandle (hObject=0x120) returned 1 [0135.511] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.511] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.511] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.512] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.512] WriteFile (in: hFile=0x120, lpBuffer=0x12765300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12765300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.513] CloseHandle (hObject=0x120) returned 1 [0135.513] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.513] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.513] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.513] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x23bed40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23bed40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.514] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x23bed40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23bed40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.514] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x23bed40, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x23bed40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23c3b60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.514] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1 [0135.514] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.514] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.514] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.514] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.514] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.514] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.514] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.515] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.515] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.515] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.515] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.515] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.515] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.515] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.515] CloseHandle (hObject=0x120) returned 1 [0135.515] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.515] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.515] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.516] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.516] WriteFile (in: hFile=0x120, lpBuffer=0x12767900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12767900*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.517] CloseHandle (hObject=0x120) returned 1 [0135.517] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.517] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.517] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.517] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x23c8980, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23c8980, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.517] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x23c8980, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23c8980, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.518] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x23c8980, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x23c8980, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23cd7a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.518] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1 [0135.518] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.518] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.518] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.518] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.518] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.518] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.518] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.518] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.518] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.518] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.518] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.519] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.519] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.519] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.519] CloseHandle (hObject=0x120) returned 1 [0135.519] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.519] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.519] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.519] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0135.520] WriteFile (in: hFile=0x120, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0135.521] CloseHandle (hObject=0x120) returned 1 [0135.521] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.521] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.521] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.521] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x23d25c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23d25c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.521] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x23d25c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23d25c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.521] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x23d25c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x23d25c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23d4cd0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.521] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1 [0135.521] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.521] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.521] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.521] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.522] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/rasphone.pbk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.522] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0135.522] ReadFile (in: hFile=0x120, lpBuffer=0x12495100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12495100*, lpNumberOfBytesRead=0x12429890*=0x0, lpOverlapped=0x0) returned 1 [0135.522] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.522] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.522] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.522] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.523] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.523] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0135.523] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0135.523] CloseHandle (hObject=0x27c) returned 1 [0135.523] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/rasphone.pbk\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.523] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/rasphone.pbk\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.523] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/rasphone.pbk\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.523] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/rasphone.pbk\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.523] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/rasphone.pbk\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.523] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network/Connections/Pbk/_hiddenPbk/rasphone.pbk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0135.523] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0135.524] CloseHandle (hObject=0x27c) returned 1 [0135.524] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.524] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.524] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0135.524] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.524] WriteFile (in: hFile=0x27c, lpBuffer=0x127d1900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x127d1900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.525] CloseHandle (hObject=0x27c) returned 1 [0135.525] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.525] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.526] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.526] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x23dc200, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23dc200, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.526] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x23dc200, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23dc200, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.526] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x23dc200, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x23dc200, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23e1020, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.526] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6ce7b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f6ce7b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f6ce7b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0135.526] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0135.526] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.526] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.526] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.526] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.526] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/MSO1033.acl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0135.529] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0135.530] ReadFile (in: hFile=0x27c, lpBuffer=0x12495400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12495400*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0135.532] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.532] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.533] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.533] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/MSO1033.acl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6ce7b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f6ce7b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f6ce7b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x9382)) returned 1 [0135.533] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.533] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.533] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.533] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.533] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.533] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0135.533] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.534] CloseHandle (hObject=0x108) returned 1 [0135.534] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.534] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.534] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0135.536] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.536] WriteFile (in: hFile=0x108, lpBuffer=0x12580000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12580000*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.537] CloseHandle (hObject=0x108) returned 1 [0135.537] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.537] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.537] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.538] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x23f48a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23f48a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.538] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x23f48a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23f48a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.538] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x23f2190, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x23f2190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x23f96c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.538] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90b3d80, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.LNK", cAlternateFileName="")) returned 1 [0135.538] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x34, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0135.538] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1 [0135.538] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.538] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.538] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.538] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.538] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0135.538] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.539] ReadFile (in: hFile=0x108, lpBuffer=0x12495a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12495a00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0135.540] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0135.541] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.541] ReadFile (in: hFile=0xdc, lpBuffer=0x12495b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12495b00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0135.542] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0135.543] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.543] ReadFile (in: hFile=0x124, lpBuffer=0x12495c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12495c00*, lpNumberOfBytesRead=0x124299e0*=0x34, lpOverlapped=0x0) returned 1 [0135.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Global.LNK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90b3d80, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x59a)) returned 1 [0135.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/Templates.LNK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472)) returned 1 [0135.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x34)) returned 1 [0135.544] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.544] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0135.544] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240f080 | out: pbBuffer=0x1240f080) returned 1 [0135.545] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410930 | out: pbBuffer=0x12410930) returned 1 [0135.545] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12495d02 | out: pbBuffer=0x12495d02) returned 1 [0135.545] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12495dac | out: pbBuffer=0x12495dac) returned 1 [0135.546] SetEvent (hEvent=0xa0) returned 1 [0135.546] ReadFile (in: hFile=0x138, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x34, lpOverlapped=0x0) returned 1 [0135.547] GetFileType (hFile=0x138) returned 0x1 [0135.547] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0135.547] WriteFile (in: hFile=0x138, lpBuffer=0x124da280*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124da280*, lpNumberOfBytesWritten=0x124298a8*=0x34, lpOverlapped=0x124298b4) returned 1 [0135.547] GetFileType (hFile=0x138) returned 0x1 [0135.547] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x34, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0135.547] ReadFile (in: hFile=0x138, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0135.547] CloseHandle (hObject=0x138) returned 1 [0135.547] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.547] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0135.547] WriteFile (in: hFile=0x138, lpBuffer=0x12800d80*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x12800d80*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0135.548] CloseHandle (hObject=0x138) returned 1 [0135.548] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b7260*, nNumberOfCharsToWrite=0x6d, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124b7260*, lpNumberOfCharsWritten=0x1242957c*=0x6d) returned 1 [0135.548] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.548] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.548] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.548] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.548] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.548] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office/Recent/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.549] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.549] CloseHandle (hObject=0x138) returned 1 [0135.549] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.549] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.549] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.549] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.550] WriteFile (in: hFile=0x138, lpBuffer=0x12580000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12580000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.551] CloseHandle (hObject=0x138) returned 1 [0135.551] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.551] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.552] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.552] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2416b80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2416b80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.552] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2416b80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2416b80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2416b80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2416b80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x241b9a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de69980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5de69980, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5e0c9040, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.552] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.552] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.552] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.552] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.553] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0135.553] ReadFile (in: hFile=0x138, lpBuffer=0x12466100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466100*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0135.555] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0135.555] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0135.556] ReadFile (in: hFile=0x108, lpBuffer=0x12466200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466200*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0135.557] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.srs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de69980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5de69980, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5e0c9040, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0135.557] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1 [0135.557] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.557] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.557] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.558] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.558] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.558] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0135.558] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.558] CloseHandle (hObject=0xdc) returned 1 [0135.558] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.558] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.558] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0135.558] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.559] WriteFile (in: hFile=0xdc, lpBuffer=0x12583900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12583900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.560] CloseHandle (hObject=0xdc) returned 1 [0135.560] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.560] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.560] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.560] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x242cb10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x242cb10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.560] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x242cb10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x242cb10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.560] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x242cb10, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x242cb10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x242f220, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.560] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.560] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.560] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.561] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.561] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.561] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.561] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0135.561] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.561] CloseHandle (hObject=0xdc) returned 1 [0135.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.561] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.562] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0135.562] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.562] WriteFile (in: hFile=0xdc, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.563] CloseHandle (hObject=0xdc) returned 1 [0135.563] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.563] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.564] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.564] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2434040, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2434040, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.564] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2434040, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2434040, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.564] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2434040, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2434040, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2438e60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.564] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.564] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.564] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.564] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.564] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.564] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.564] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.564] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.565] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.565] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0135.565] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.565] CloseHandle (hObject=0xdc) returned 1 [0135.565] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.565] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.565] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0135.566] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.566] WriteFile (in: hFile=0xdc, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.567] CloseHandle (hObject=0xdc) returned 1 [0135.567] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.567] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.567] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.567] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x243dc80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x243dc80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.567] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x243dc80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x243dc80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.568] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x243dc80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x243dc80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2442aa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.568] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0135.568] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0135.568] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe12f0ce0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xe12f0ce0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~2")) returned 1 [0135.568] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0135.568] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.568] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.568] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.568] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.568] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/CREDHIST" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\credhist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0135.568] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0135.568] ReadFile (in: hFile=0xdc, lpBuffer=0x12467300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12467300*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0135.569] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.569] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.571] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.572] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.572] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xe12f0ce0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xe12f0ce0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.572] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.572] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/SYNCHIST" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\synchist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0135.573] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0135.573] ReadFile (in: hFile=0x124, lpBuffer=0x12467400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12467400*, lpNumberOfBytesRead=0x12429a88*=0x4c, lpOverlapped=0x0) returned 1 [0135.574] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/CREDHIST" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\credhist"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x138)) returned 1 [0135.574] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/SYNCHIST" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\synchist"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c)) returned 1 [0135.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.574] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.574] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.574] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.574] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.574] CloseHandle (hObject=0x120) returned 1 [0135.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.575] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.575] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.576] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.576] WriteFile (in: hFile=0x120, lpBuffer=0x124d1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d1300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.577] CloseHandle (hObject=0x120) returned 1 [0135.577] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.577] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.577] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.577] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2456320, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2456320, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2456320, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2456320, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2456320, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2456320, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2458a30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1 [0135.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0135.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.577] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.578] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.578] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.578] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/Preferred" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.578] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.578] ReadFile (in: hFile=0x120, lpBuffer=0x12467a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12467a00*, lpNumberOfBytesRead=0x124299e0*=0x18, lpOverlapped=0x0) returned 1 [0135.579] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0135.579] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.579] ReadFile (in: hFile=0x27c, lpBuffer=0x12467b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12467b00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0135.580] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/Preferred" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0135.580] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0135.581] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.581] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.581] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.581] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.581] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.581] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.581] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.581] CloseHandle (hObject=0x15c) returned 1 [0135.581] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.581] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.581] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.582] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.582] WriteFile (in: hFile=0x15c, lpBuffer=0x124d3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d3900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.583] CloseHandle (hObject=0x15c) returned 1 [0135.583] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.583] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.584] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.584] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2464d80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2464d80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2464d80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2464d80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf923e050, ftCreationTime.dwHighDateTime=0x1d3aab9, ftLastAccessTime.dwLowDateTime=0xf923e050, ftLastAccessTime.dwHighDateTime=0x1d3aab9, ftLastWriteTime.dwLowDateTime=0xf923e050, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="02540a10-7eb7-4b20-a8c7-470f8986389c", cAlternateFileName="02540A~1")) returned 1 [0135.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdc5ea830, ftCreationTime.dwHighDateTime=0x1d41fce, ftLastAccessTime.dwLowDateTime=0xdc5ea830, ftLastAccessTime.dwHighDateTime=0x1d41fce, ftLastWriteTime.dwLowDateTime=0xdc5ea830, ftLastWriteTime.dwHighDateTime=0x1d41fce, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="0e15476d-d8fe-46ca-8099-ebdcf80f637c", cAlternateFileName="0E1547~1")) returned 1 [0135.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf6409280, ftCreationTime.dwHighDateTime=0x1d4ae2c, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="102a7bc8-3f85-4bb4-840a-38257d2965d2", cAlternateFileName="102A7B~1")) returned 1 [0135.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542b0350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542b0350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x542b0350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="2be989a0-16a1-424b-9211-51aa3bb43e5d", cAlternateFileName="2BE989~1")) returned 1 [0135.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2464d80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2464d80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2469ba0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe12f0ce0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xe12f0ce0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xe12f33f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="b90adeaf-1ece-40d2-b704-9cf3f188eb34", cAlternateFileName="B90ADE~1")) returned 1 [0135.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x17ffec90, ftCreationTime.dwHighDateTime=0x1d3373c, ftLastAccessTime.dwLowDateTime=0x17ffec90, ftLastAccessTime.dwHighDateTime=0x1d3373c, ftLastWriteTime.dwLowDateTime=0x18024df0, ftLastWriteTime.dwHighDateTime=0x1d3373c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fbbe72db-afd8-443b-88dd-64b20388700d", cAlternateFileName="FBBE72~1")) returned 1 [0135.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe1348b20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0135.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.584] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.584] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/02540a10-7eb7-4b20-a8c7-470f8986389c" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.585] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.585] ReadFile (in: hFile=0x15c, lpBuffer=0x12467c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12467c00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0135.586] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/0e15476d-d8fe-46ca-8099-ebdcf80f637c" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.586] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.587] ReadFile (in: hFile=0x190, lpBuffer=0x12467d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12467d00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0135.588] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/102a7bc8-3f85-4bb4-840a-38257d2965d2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0135.588] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.588] ReadFile (in: hFile=0xfc, lpBuffer=0x12467e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12467e00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0135.589] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/2be989a0-16a1-424b-9211-51aa3bb43e5d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0135.589] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.589] ReadFile (in: hFile=0x104, lpBuffer=0x12467f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12467f00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0135.590] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.590] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.590] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/Preferred" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\preferred"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0135.590] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.590] ReadFile (in: hFile=0xf0, lpBuffer=0x1276e100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1276e100*, lpNumberOfBytesRead=0x124299e0*=0x18, lpOverlapped=0x0) returned 1 [0135.591] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/b90adeaf-1ece-40d2-b704-9cf3f188eb34" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\b90adeaf-1ece-40d2-b704-9cf3f188eb34"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0135.591] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.591] ReadFile (in: hFile=0xe4, lpBuffer=0x1276e200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1276e200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0135.592] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/fbbe72db-afd8-443b-88dd-64b20388700d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0135.592] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.592] ReadFile (in: hFile=0x154, lpBuffer=0x1276e300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1276e300*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0135.593] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/02540a10-7eb7-4b20-a8c7-470f8986389c" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf923e050, ftCreationTime.dwHighDateTime=0x1d3aab9, ftLastAccessTime.dwLowDateTime=0xf923e050, ftLastAccessTime.dwHighDateTime=0x1d3aab9, ftLastWriteTime.dwLowDateTime=0xf923e050, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0135.593] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/0e15476d-d8fe-46ca-8099-ebdcf80f637c" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdc5ea830, ftCreationTime.dwHighDateTime=0x1d41fce, ftLastAccessTime.dwLowDateTime=0xdc5ea830, ftLastAccessTime.dwHighDateTime=0x1d41fce, ftLastWriteTime.dwLowDateTime=0xdc5ea830, ftLastWriteTime.dwHighDateTime=0x1d41fce, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0135.593] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/102a7bc8-3f85-4bb4-840a-38257d2965d2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf6409280, ftCreationTime.dwHighDateTime=0x1d4ae2c, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0135.593] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/2be989a0-16a1-424b-9211-51aa3bb43e5d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542b0350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542b0350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x542b0350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0135.594] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/Preferred" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe1348b20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0135.594] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/b90adeaf-1ece-40d2-b704-9cf3f188eb34" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\b90adeaf-1ece-40d2-b704-9cf3f188eb34"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe12f0ce0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xe12f0ce0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xe12f33f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0135.594] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/fbbe72db-afd8-443b-88dd-64b20388700d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x17ffec90, ftCreationTime.dwHighDateTime=0x1d3373c, ftLastAccessTime.dwLowDateTime=0x17ffec90, ftLastAccessTime.dwHighDateTime=0x1d3373c, ftLastWriteTime.dwLowDateTime=0x18024df0, ftLastWriteTime.dwHighDateTime=0x1d3373c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0135.594] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.594] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.594] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.594] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.594] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.594] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect/S-1-5-21-3388679973-3930757225-3770151564-1000/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0135.594] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.594] CloseHandle (hObject=0x178) returned 1 [0135.594] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.595] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.595] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0135.595] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.595] WriteFile (in: hFile=0x178, lpBuffer=0x1258c000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1258c000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.596] CloseHandle (hObject=0x178) returned 1 [0135.596] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.596] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.597] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.597] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x247fb30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x247fb30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.597] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x247fb30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x247fb30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.597] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x247fb30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x247fb30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2484950, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.597] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.597] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.597] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.597] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.597] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.597] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.597] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.597] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.597] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.598] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0135.598] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.598] CloseHandle (hObject=0x178) returned 1 [0135.598] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.598] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.598] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0135.599] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.599] WriteFile (in: hFile=0x178, lpBuffer=0x1258e600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1258e600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.600] CloseHandle (hObject=0x178) returned 1 [0135.600] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.600] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.600] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.600] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2489770, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2489770, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.600] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2489770, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2489770, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.600] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2489770, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2489770, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x248be80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.600] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 1 [0135.600] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.600] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.600] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.601] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.601] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks/ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0135.601] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0135.602] ReadFile (in: hFile=0x178, lpBuffer=0x1276ea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1276ea00*, lpNumberOfBytesRead=0x12429a88*=0xa8, lpOverlapped=0x0) returned 1 [0135.604] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks/ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0135.604] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.604] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.604] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.604] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.604] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.604] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.604] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.604] CloseHandle (hObject=0x18c) returned 1 [0135.604] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.605] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.605] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.605] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.605] WriteFile (in: hFile=0x18c, lpBuffer=0x12590c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12590c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.606] CloseHandle (hObject=0x18c) returned 1 [0135.606] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.606] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.606] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.606] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x24981d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24981d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x24981d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24981d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x24981d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x24981d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x249cff0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.607] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.607] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.607] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.607] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.607] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.607] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.607] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.607] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.607] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.607] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.607] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.608] CloseHandle (hObject=0x18c) returned 1 [0135.608] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.608] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.608] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.608] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.609] WriteFile (in: hFile=0x18c, lpBuffer=0x12453300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12453300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.610] CloseHandle (hObject=0x18c) returned 1 [0135.610] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.610] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.610] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.610] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x24a1e10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24a1e10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.610] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x24a1e10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24a1e10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.610] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x24a1e10, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x24a1e10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24a4520, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.610] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0135.610] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.610] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.610] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.610] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.610] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.611] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.611] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.611] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.611] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.611] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.611] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.611] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.611] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.611] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.612] CloseHandle (hObject=0x18c) returned 1 [0135.612] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.612] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.612] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.612] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.612] WriteFile (in: hFile=0x18c, lpBuffer=0x12455900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12455900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.613] CloseHandle (hObject=0x18c) returned 1 [0135.614] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.614] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.614] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.614] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x24aba50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24aba50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.614] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x24aba50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24aba50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.614] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x24aba50, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x24aba50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24ae160, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.614] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0135.614] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1 [0135.614] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1 [0135.614] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.614] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.614] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.614] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.614] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.614] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.615] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.615] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.615] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.615] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.615] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.615] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.615] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.616] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.616] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.616] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.616] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.616] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.616] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.617] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.617] CloseHandle (hObject=0x18c) returned 1 [0135.617] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.617] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.618] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.618] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.618] WriteFile (in: hFile=0x18c, lpBuffer=0x12764000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12764000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.619] CloseHandle (hObject=0x18c) returned 1 [0135.619] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.619] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.620] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.620] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x24b7da0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24b7da0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.620] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x24b7da0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24b7da0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.620] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x24b7da0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x24b7da0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24bcbc0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.620] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.620] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.620] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.620] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.620] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.620] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.620] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.620] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.620] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.620] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.621] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.621] CloseHandle (hObject=0x18c) returned 1 [0135.621] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.621] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.621] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.621] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.622] WriteFile (in: hFile=0x18c, lpBuffer=0x12766600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12766600*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.623] CloseHandle (hObject=0x18c) returned 1 [0135.623] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.623] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.623] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.623] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x24c19e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24c19e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.623] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x24c19e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24c19e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.623] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x24c19e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x24c19e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24c40f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.623] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.623] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.624] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.624] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.624] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.624] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.624] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.624] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.624] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.624] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.624] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.624] CloseHandle (hObject=0x18c) returned 1 [0135.625] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.625] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.625] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.625] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.625] WriteFile (in: hFile=0x18c, lpBuffer=0x12768c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12768c00*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.627] CloseHandle (hObject=0x18c) returned 1 [0135.627] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.627] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.627] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.627] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x24cb620, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24cb620, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.627] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x24cb620, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24cb620, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.627] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x24cb620, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x24cb620, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24cdd30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.627] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.627] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.627] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.627] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.627] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.628] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.628] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.628] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.628] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.628] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.628] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.628] CloseHandle (hObject=0x18c) returned 1 [0135.628] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.628] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.628] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.629] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.629] WriteFile (in: hFile=0x18c, lpBuffer=0x12655300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12655300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.630] CloseHandle (hObject=0x18c) returned 1 [0135.630] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.630] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.630] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.630] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x24d2b50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24d2b50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.630] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x24d2b50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24d2b50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.631] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x24d2b50, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x24d2b50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24d7970, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.631] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0135.631] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.631] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.631] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.631] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.631] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates/Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.631] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0135.631] ReadFile (in: hFile=0x18c, lpBuffer=0x1276f800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1276f800*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0135.633] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates/Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b)) returned 1 [0135.633] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates/Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0135.634] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0135.634] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240f3a0 | out: pbBuffer=0x1240f3a0) returned 1 [0135.634] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1276f902 | out: pbBuffer=0x1276f902) returned 1 [0135.636] SetEvent (hEvent=0xa8) returned 1 [0135.636] ReadFile (in: hFile=0x148, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x509b, lpOverlapped=0x0) returned 1 [0135.636] GetFileType (hFile=0x148) returned 0x1 [0135.636] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0135.636] WriteFile (in: hFile=0x148, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x509b, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x12429950*=0x509b, lpOverlapped=0x1242995c) returned 1 [0135.637] GetFileType (hFile=0x148) returned 0x1 [0135.637] SetFilePointerEx (in: hFile=0x148, liDistanceToMove=0x509b, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0135.637] ReadFile (in: hFile=0x148, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0135.637] CloseHandle (hObject=0x148) returned 1 [0135.637] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates/Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0135.637] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0135.637] WriteFile (in: hFile=0x148, lpBuffer=0x12774fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x12774fc0*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0135.637] CloseHandle (hObject=0x148) returned 1 [0135.637] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b77a0*, nNumberOfCharsToWrite=0x6b, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124b77a0*, lpNumberOfCharsWritten=0x12429624*=0x6b) returned 1 [0135.638] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.638] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.638] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.638] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.638] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.638] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0135.638] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.639] CloseHandle (hObject=0x148) returned 1 [0135.639] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.639] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.639] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0135.639] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.641] WriteFile (in: hFile=0x148, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.642] CloseHandle (hObject=0x148) returned 1 [0135.642] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.642] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.642] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.642] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x24ed900, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24ed900, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.642] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x24ed900, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24ed900, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.642] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x24ed900, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x24ed900, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24f2720, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.642] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1 [0135.642] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.642] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.642] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.642] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.642] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof/CUSTOM.DIC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0135.643] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0135.644] ReadFile (in: hFile=0x148, lpBuffer=0x1276e100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1276e100*, lpNumberOfBytesRead=0x12429a88*=0x2, lpOverlapped=0x0) returned 1 [0135.644] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof/CUSTOM.DIC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2)) returned 1 [0135.645] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.645] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.645] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.645] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.645] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.645] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.645] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.645] CloseHandle (hObject=0x138) returned 1 [0135.645] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.645] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.645] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.646] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.646] WriteFile (in: hFile=0x138, lpBuffer=0x12657900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12657900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.647] CloseHandle (hObject=0x138) returned 1 [0135.647] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.647] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.647] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.647] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x24fc360, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24fc360, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x24fc360, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24fc360, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x24fc360, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x24fc360, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x24fea70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0135.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.647] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.648] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.648] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.648] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.648] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.648] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.648] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.648] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.648] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.648] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.648] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.648] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.649] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.649] CloseHandle (hObject=0x138) returned 1 [0135.649] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.649] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.649] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.649] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.650] WriteFile (in: hFile=0x138, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.651] CloseHandle (hObject=0x138) returned 1 [0135.651] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.651] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.651] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.651] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x2505fa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2505fa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.651] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x2505fa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2505fa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.651] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2505fa0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2505fa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x25086b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.651] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.651] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.651] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.651] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.651] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.651] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.652] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.652] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.652] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.652] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word/STARTUP/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.652] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.652] CloseHandle (hObject=0x138) returned 1 [0135.652] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.652] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.652] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.653] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0135.653] WriteFile (in: hFile=0x138, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0135.654] CloseHandle (hObject=0x138) returned 1 [0135.654] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.654] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.654] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.654] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x250d4d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x250d4d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.654] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x250d4d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x250d4d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.654] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x250d4d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x250d4d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x250fbe0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.654] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0135.655] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0135.655] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.655] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.655] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.655] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.655] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.655] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.656] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.656] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.656] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.657] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.657] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.657] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.657] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.657] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.657] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.657] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.657] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0135.657] CloseHandle (hObject=0x138) returned 1 [0135.657] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.657] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.658] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.658] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.658] WriteFile (in: hFile=0x138, lpBuffer=0x124d1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d1300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.659] CloseHandle (hObject=0x138) returned 1 [0135.659] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.659] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.660] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.660] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2517110, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2517110, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.660] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2517110, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2517110, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.660] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2517110, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2517110, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2519820, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.660] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.660] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.660] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.660] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.660] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.660] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.661] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.661] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.661] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.661] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Extensions/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.661] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.661] CloseHandle (hObject=0x138) returned 1 [0135.661] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.661] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.661] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.663] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.663] WriteFile (in: hFile=0x138, lpBuffer=0x124d3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d3900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.664] CloseHandle (hObject=0x138) returned 1 [0135.664] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.664] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.664] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.665] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2520d50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2520d50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.665] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2520d50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2520d50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.665] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x251e640, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x251e640, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2525b70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.665] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crash Reports", cAlternateFileName="CRASHR~1")) returned 1 [0135.665] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0135.665] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 1 [0135.665] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.665] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.665] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.665] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.665] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.665] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.666] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.666] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.666] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.667] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.667] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/profiles.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.667] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0135.667] ReadFile (in: hFile=0x138, lpBuffer=0x1276f700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1276f700*, lpNumberOfBytesRead=0x12429a88*=0x6f, lpOverlapped=0x0) returned 1 [0135.668] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/profiles.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0135.668] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.668] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.669] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.669] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.669] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.669] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0135.669] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.669] CloseHandle (hObject=0x108) returned 1 [0135.669] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.669] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.669] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0135.670] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.670] WriteFile (in: hFile=0x108, lpBuffer=0x12490000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12490000*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.671] CloseHandle (hObject=0x108) returned 1 [0135.671] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.671] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.671] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.671] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2531ec0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2531ec0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2531ec0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2531ec0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2531ec0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2531ec0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x25345d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallTime20131025151332", cAlternateFileName="INSTAL~1")) returned 1 [0135.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.671] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.672] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.672] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.672] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports/InstallTime20131025151332" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20131025151332"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0135.673] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0135.673] ReadFile (in: hFile=0x108, lpBuffer=0x12772200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12772200*, lpNumberOfBytesRead=0x124299e0*=0xa, lpOverlapped=0x0) returned 1 [0135.674] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports/InstallTime20131025151332" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20131025151332"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa)) returned 1 [0135.674] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.674] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.674] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.674] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.674] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.674] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Crash Reports/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0135.674] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.674] CloseHandle (hObject=0xdc) returned 1 [0135.674] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.674] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.675] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0135.675] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.675] WriteFile (in: hFile=0xdc, lpBuffer=0x12492600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12492600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.676] CloseHandle (hObject=0xdc) returned 1 [0135.676] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.676] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.677] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x253e210, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x253e210, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x253e210, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x253e210, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x253e210, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x253e210, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2543030, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1 [0135.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.677] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.677] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.677] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.679] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.680] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.680] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.680] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.680] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.680] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.680] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0135.680] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.681] CloseHandle (hObject=0xdc) returned 1 [0135.681] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.681] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.681] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0135.689] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.689] WriteFile (in: hFile=0xdc, lpBuffer=0x12494c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12494c00*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.690] CloseHandle (hObject=0xdc) returned 1 [0135.690] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.691] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.691] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.691] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x254f380, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x254f380, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x254f380, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x254f380, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x254f380, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x254f380, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2565310, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb76a6d10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb76a6d10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb76a6d10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="addons.json", cAlternateFileName="ADDONS~1.JSO")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarkbackups", cAlternateFileName="BOOKMA~1")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb47c9bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb47c9bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cert8.db", cAlternateFileName="")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="compatibility.ini", cAlternateFileName="COMPAT~1.INI")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e8ce50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5e8ce50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb639bd10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-prefs.sqlite", cAlternateFileName="CONTEN~1.SQL")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5ad4bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5ad4bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x83256a10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc374ed0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbc374ed0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbc555e20, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloads.sqlite", cAlternateFileName="DOWNLO~1.SQL")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4b81e50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4b81e50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b81e50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.ini", cAlternateFileName="EXTENS~1.INI")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb45b48b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb45b48b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b0fa30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x70000, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.sqlite", cAlternateFileName="EXTENS~1.SQL")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexedDB", cAlternateFileName="INDEXE~1")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4815eb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4815eb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="key3.db", cAlternateFileName="")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x850d63f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x850d63f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x850d63f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x501, dwReserved0=0x0, dwReserved1=0x0, cFileName="localstore.rdf", cAlternateFileName="LOCALS~1.RDF")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="marionette.log", cAlternateFileName="MARION~1.LOG")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb50b6e70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5175550, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb5175550, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="mimeTypes.rdf", cAlternateFileName="MIMETY~1.RDF")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="minidumps", cAlternateFileName="MINIDU~1")) returned 1 [0135.692] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parent.lock", cAlternateFileName="PARENT~1.LOC")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb43eb830, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb43eb830, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3b3f6e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="permissions.sqlite", cAlternateFileName="PERMIS~1.SQL")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4c1a3d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4c1a3d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x82b58970, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa00000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite", cAlternateFileName="PLACES~1.SQL")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81fbde30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81fbde30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81fbde30, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="pluginreg.dat", cAlternateFileName="PLUGIN~1.DAT")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c85c10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x853f60d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x12069be0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0xfde, dwReserved0=0x0, dwReserved1=0x0, cFileName="prefs.js", cAlternateFileName="")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6fa8c70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6fa8c70, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6fa8c70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4183, dwReserved0=0x0, dwReserved1=0x0, cFileName="search.json", cAlternateFileName="SEARCH~1.JSO")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb477d930, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb477d930, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb47c9bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="secmod.db", cAlternateFileName="")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc3787480, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3787480, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.bak", cAlternateFileName="SESSIO~1.BAK")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x84e029d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x84e029d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.js", cAlternateFileName="SESSIO~1.JS")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6f36850, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x50000, dwReserved0=0x0, dwReserved1=0x0, cFileName="signons.sqlite", cAlternateFileName="SIGNON~1.SQL")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="times.json", cAlternateFileName="TIMES~1.JSO")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps", cAlternateFileName="")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 1 [0135.693] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.693] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.693] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.693] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.693] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/addons.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\addons.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0135.694] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.694] ReadFile (in: hFile=0xdc, lpBuffer=0x12772300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12772300*, lpNumberOfBytesRead=0x12429938*=0x18, lpOverlapped=0x0) returned 1 [0135.695] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.695] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.697] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.697] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0135.698] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.698] ReadFile (in: hFile=0x124, lpBuffer=0x12772400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12772400*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.700] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/compatibility.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\compatibility.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0135.701] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.701] ReadFile (in: hFile=0x178, lpBuffer=0x12772500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12772500*, lpNumberOfBytesRead=0x12429938*=0xce, lpOverlapped=0x0) returned 1 [0135.702] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0135.702] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.702] ReadFile (in: hFile=0x120, lpBuffer=0x12772600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12772600*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.704] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0135.705] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.705] ReadFile (in: hFile=0x27c, lpBuffer=0x12772700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12772700*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.708] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0135.709] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.709] ReadFile (in: hFile=0x15c, lpBuffer=0x12772800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12772800*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.711] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/extensions.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.714] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.714] ReadFile (in: hFile=0x190, lpBuffer=0x12772900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12772900*, lpNumberOfBytesRead=0x12429938*=0x8d, lpOverlapped=0x0) returned 1 [0135.715] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0135.716] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.716] ReadFile (in: hFile=0xfc, lpBuffer=0x12772a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12772a00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.718] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.718] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.720] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.720] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0135.720] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.720] ReadFile (in: hFile=0x104, lpBuffer=0x12772b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12772b00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.725] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/localstore.rdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\localstore.rdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0135.725] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.726] ReadFile (in: hFile=0xf0, lpBuffer=0x12772c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12772c00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.727] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0135.727] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.728] ReadFile (in: hFile=0xe4, lpBuffer=0x12772d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12772d00*, lpNumberOfBytesRead=0x12429938*=0x39, lpOverlapped=0x0) returned 1 [0135.728] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/mimeTypes.rdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\mimetypes.rdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0135.729] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.729] ReadFile (in: hFile=0x154, lpBuffer=0x12772e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12772e00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.739] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.740] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.740] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.740] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/parent.lock" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\parent.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0135.741] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.742] ReadFile (in: hFile=0x18c, lpBuffer=0x12772f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12772f00*, lpNumberOfBytesRead=0x12429938*=0x0, lpOverlapped=0x0) returned 1 [0135.742] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0135.742] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.742] ReadFile (in: hFile=0x10c, lpBuffer=0x12773000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12773000*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.744] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0135.745] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.745] ReadFile (in: hFile=0xc0, lpBuffer=0x12773100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12773100*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.747] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/pluginreg.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\pluginreg.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0135.748] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.748] ReadFile (in: hFile=0x180, lpBuffer=0x12773200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12773200*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.750] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0135.751] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.751] ReadFile (in: hFile=0x19c, lpBuffer=0x12773300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12773300*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.753] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/search.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\search.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0135.754] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.754] ReadFile (in: hFile=0x110, lpBuffer=0x12773400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12773400*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.756] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0135.757] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.757] ReadFile (in: hFile=0x128, lpBuffer=0x12773500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12773500*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.759] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0135.759] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.759] ReadFile (in: hFile=0x12c, lpBuffer=0x12773600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12773600*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.761] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0135.761] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.762] ReadFile (in: hFile=0x198, lpBuffer=0x12773700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12773700*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.763] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0135.763] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.764] ReadFile (in: hFile=0x168, lpBuffer=0x12773800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12773800*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.766] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/times.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\times.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0135.767] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.767] ReadFile (in: hFile=0xd0, lpBuffer=0x12773900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12773900*, lpNumberOfBytesRead=0x12429938*=0x1d, lpOverlapped=0x0) returned 1 [0135.768] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.768] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.769] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.769] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0135.770] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.770] ReadFile (in: hFile=0x144, lpBuffer=0x12773a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12773a00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.772] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/addons.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\addons.json"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb76a6d10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb76a6d10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb76a6d10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0135.773] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb47c9bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb47c9bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0135.773] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.773] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.773] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240ed60 | out: pbBuffer=0x1240ed60) returned 1 [0135.774] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12773b02 | out: pbBuffer=0x12773b02) returned 1 [0135.774] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12773bb3 | out: pbBuffer=0x12773bb3) returned 1 [0135.776] SetEvent (hEvent=0xb8) returned 1 [0135.776] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x10000, lpOverlapped=0x0) returned 1 [0135.777] GetFileType (hFile=0x16c) returned 0x1 [0135.777] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.777] WriteFile (in: hFile=0x16c, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x12429800*=0x10000, lpOverlapped=0x1242980c) returned 1 [0135.777] GetFileType (hFile=0x16c) returned 0x1 [0135.777] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.777] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0135.777] CloseHandle (hObject=0x16c) returned 1 [0135.777] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.777] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.778] WriteFile (in: hFile=0x16c, lpBuffer=0x127c9200*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x127c9200*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0135.778] CloseHandle (hObject=0x16c) returned 1 [0135.778] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12773d00*, nNumberOfCharsToWrite=0x7e, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x12773d00*, lpNumberOfCharsWritten=0x124294d4*=0x7e) returned 1 [0135.779] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/compatibility.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\compatibility.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0135.779] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e8ce50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5e8ce50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb639bd10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x38000)) returned 1 [0135.779] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.779] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.781] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1 [0135.782] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410084 | out: pbBuffer=0x12410084) returned 1 [0135.782] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12772002 | out: pbBuffer=0x12772002) returned 1 [0135.782] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1277203d | out: pbBuffer=0x1277203d) returned 1 [0135.782] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127720a4 | out: pbBuffer=0x127720a4) returned 1 [0135.782] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127720ab | out: pbBuffer=0x127720ab) returned 1 [0135.783] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0135.784] SetEvent (hEvent=0xac) returned 1 [0135.784] SetEvent (hEvent=0xa0) returned 1 [0135.784] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x38000, lpOverlapped=0x0) returned 1 [0135.787] GetFileType (hFile=0x16c) returned 0x1 [0135.787] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.787] WriteFile (in: hFile=0x16c, lpBuffer=0x12528000*, nNumberOfBytesToWrite=0x38000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x12528000*, lpNumberOfBytesWritten=0x12429800*=0x38000, lpOverlapped=0x1242980c) returned 1 [0135.788] GetFileType (hFile=0x16c) returned 0x1 [0135.788] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x38000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.788] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0135.788] CloseHandle (hObject=0x16c) returned 1 [0135.788] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.788] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.789] WriteFile (in: hFile=0x16c, lpBuffer=0x127c8b40*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x127c8b40*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0135.789] CloseHandle (hObject=0x16c) returned 1 [0135.789] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc5a0*, nNumberOfCharsToWrite=0x8a, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x124bc5a0*, lpNumberOfCharsWritten=0x124294d4*=0x8a) returned 1 [0135.790] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5ad4bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5ad4bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x83256a10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0135.790] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.790] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.790] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1 [0135.791] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0135.791] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12772102 | out: pbBuffer=0x12772102) returned 1 [0135.792] SwitchToThread () returned 1 [0135.792] SetEvent (hEvent=0xa0) returned 1 [0135.792] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.805] SetEvent (hEvent=0xa8) returned 1 [0135.805] SetEvent (hEvent=0xb8) returned 1 [0135.805] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0135.806] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.806] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0135.807] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.807] SetEvent (hEvent=0xa8) returned 1 [0135.807] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0135.810] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.810] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0135.810] SetEvent (hEvent=0xac) returned 1 [0135.810] SetEvent (hEvent=0xa8) returned 1 [0135.810] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x18000, lpOverlapped=0x0) returned 1 [0135.811] GetFileType (hFile=0x16c) returned 0x1 [0135.811] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.811] WriteFile (in: hFile=0x16c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x18000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429800*=0x18000, lpOverlapped=0x1242980c) returned 1 [0135.812] GetFileType (hFile=0x16c) returned 0x1 [0135.812] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x18000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.812] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0135.812] CloseHandle (hObject=0x16c) returned 1 [0135.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.812] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.813] WriteFile (in: hFile=0x16c, lpBuffer=0x124c06c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x124c06c0*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0135.813] CloseHandle (hObject=0x16c) returned 1 [0135.813] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x86, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x124294d4*=0x86) returned 1 [0135.813] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/extensions.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4b81e50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4b81e50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b81e50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x8d)) returned 1 [0135.814] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb45b48b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb45b48b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b0fa30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x70000)) returned 1 [0135.814] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.814] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.814] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442240 | out: pbBuffer=0x12442240) returned 1 [0135.815] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e20f0 | out: pbBuffer=0x124e20f0) returned 1 [0135.815] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12772302 | out: pbBuffer=0x12772302) returned 1 [0135.815] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1277233f | out: pbBuffer=0x1277233f) returned 1 [0135.815] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12772358 | out: pbBuffer=0x12772358) returned 1 [0135.815] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.815] SetEvent (hEvent=0xa8) returned 1 [0135.815] SetEvent (hEvent=0xa0) returned 1 [0135.816] SwitchToThread () returned 1 [0135.817] SetEvent (hEvent=0xa8) returned 1 [0135.817] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.819] SetEvent (hEvent=0xa0) returned 1 [0135.819] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0135.820] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0135.827] SetEvent (hEvent=0xb8) returned 1 [0135.827] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0135.828] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.833] SetEvent (hEvent=0xb8) returned 1 [0135.833] SetEvent (hEvent=0xa0) returned 1 [0135.833] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.838] SetEvent (hEvent=0xa8) returned 1 [0135.838] SetEvent (hEvent=0xa0) returned 1 [0135.838] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0135.843] SetEvent (hEvent=0xb8) returned 1 [0135.843] SetEvent (hEvent=0xa0) returned 1 [0135.844] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0136.086] SetEvent (hEvent=0xa8) returned 1 [0136.086] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0136.130] SetEvent (hEvent=0xa8) returned 1 [0136.130] SwitchToThread () returned 1 [0136.137] SetEvent (hEvent=0xa8) returned 1 [0136.137] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0136.145] SetEvent (hEvent=0xa8) returned 1 [0136.145] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0136.151] SetEvent (hEvent=0xa8) returned 1 [0136.151] SwitchToThread () returned 1 [0136.253] SetEvent (hEvent=0xb8) returned 1 [0136.253] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.248] SetEvent (hEvent=0xb8) returned 1 [0137.248] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.263] SetEvent (hEvent=0xb8) returned 1 [0137.263] SwitchToThread () returned 1 [0137.265] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.275] SetEvent (hEvent=0xb8) returned 1 [0137.276] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0137.290] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.290] SetEvent (hEvent=0xb8) returned 1 [0137.290] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0137.299] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.299] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0137.307] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.307] SetEvent (hEvent=0xac) returned 1 [0137.307] SetEvent (hEvent=0xb8) returned 1 [0137.307] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0xfde, lpOverlapped=0x0) returned 1 [0137.308] GetFileType (hFile=0x16c) returned 0x1 [0137.308] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.308] WriteFile (in: hFile=0x16c, lpBuffer=0x124c0000*, nNumberOfBytesToWrite=0xfde, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x124c0000*, lpNumberOfBytesWritten=0x12429800*=0xfde, lpOverlapped=0x1242980c) returned 1 [0137.308] GetFileType (hFile=0x16c) returned 0x1 [0137.308] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0xfde, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.308] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0137.308] CloseHandle (hObject=0x16c) returned 1 [0137.308] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.309] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.322] WriteFile (in: hFile=0x16c, lpBuffer=0x124d0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x124d0240*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0137.322] CloseHandle (hObject=0x16c) returned 1 [0137.322] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12578000*, nNumberOfCharsToWrite=0x7e, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x12578000*, lpNumberOfCharsWritten=0x124294d4*=0x7e) returned 1 [0137.328] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/search.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\search.json"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6fa8c70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6fa8c70, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6fa8c70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4183)) returned 1 [0137.328] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb477d930, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb477d930, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb47c9bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0137.328] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.328] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.336] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0137.336] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0137.337] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d4002 | out: pbBuffer=0x124d4002) returned 1 [0137.337] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d40a2 | out: pbBuffer=0x124d40a2) returned 1 [0137.338] SwitchToThread () returned 1 [0137.339] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.359] SetEvent (hEvent=0xa8) returned 1 [0137.359] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.363] SetEvent (hEvent=0xa8) returned 1 [0137.363] SwitchToThread () returned 1 [0137.365] SetEvent (hEvent=0xb8) returned 1 [0137.365] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.368] SetEvent (hEvent=0xa8) returned 1 [0137.368] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0137.369] SetEvent (hEvent=0xa8) returned 1 [0137.369] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0137.371] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0137.371] SetEvent (hEvent=0xa8) returned 1 [0137.371] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0xbc5, lpOverlapped=0x0) returned 1 [0137.372] GetFileType (hFile=0x16c) returned 0x1 [0137.372] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.372] WriteFile (in: hFile=0x16c, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0xbc5, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429800*=0xbc5, lpOverlapped=0x1242980c) returned 1 [0137.372] GetFileType (hFile=0x16c) returned 0x1 [0137.372] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0xbc5, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.372] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0137.372] CloseHandle (hObject=0x16c) returned 1 [0137.372] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.373] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.373] WriteFile (in: hFile=0x16c, lpBuffer=0x12778240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x12778240*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0137.373] CloseHandle (hObject=0x16c) returned 1 [0137.373] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x85, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x124294d4*=0x85) returned 1 [0137.373] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6f36850, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x50000)) returned 1 [0137.374] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.374] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.374] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0137.375] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0137.375] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12576002 | out: pbBuffer=0x12576002) returned 1 [0137.375] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12576046 | out: pbBuffer=0x12576046) returned 1 [0137.375] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1257607d | out: pbBuffer=0x1257607d) returned 1 [0137.376] SwitchToThread () returned 1 [0137.376] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.378] SetEvent (hEvent=0xb8) returned 1 [0137.378] SetEvent (hEvent=0xa0) returned 1 [0137.378] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.386] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.392] SetEvent (hEvent=0xa0) returned 1 [0137.392] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.394] SetEvent (hEvent=0xa0) returned 1 [0137.394] SwitchToThread () returned 1 [0137.397] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.431] SetEvent (hEvent=0xa0) returned 1 [0137.432] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0137.432] SetEvent (hEvent=0xa0) returned 1 [0137.432] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0137.437] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.437] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0137.438] SetEvent (hEvent=0xac) returned 1 [0137.438] SetEvent (hEvent=0xa0) returned 1 [0137.449] GetFileType (hFile=0x108) returned 0x1 [0137.449] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0137.449] WriteFile (in: hFile=0x108, lpBuffer=0x12662000*, nNumberOfBytesToWrite=0xa0000, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x12662000*, lpNumberOfBytesWritten=0x12429608*=0xa0000, lpOverlapped=0x12429614) returned 1 [0137.450] GetFileType (hFile=0x108) returned 0x1 [0137.450] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xa0000, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0137.451] ReadFile (in: hFile=0x108, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0137.451] CloseHandle (hObject=0x108) returned 1 [0137.451] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.451] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0137.452] WriteFile (in: hFile=0x108, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0137.452] CloseHandle (hObject=0x108) returned 1 [0137.452] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0xb1, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x124292dc*=0xb1) returned 1 [0137.453] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.453] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.453] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.453] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429728 | out: lpMode=0x12429728) returned 0 [0137.454] WriteFile (in: hFile=0x108, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242972c, lpOverlapped=0x0 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x1242972c*=0x1033, lpOverlapped=0x0) returned 1 [0137.455] CloseHandle (hObject=0x108) returned 1 [0137.455] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\@_read_to_recover_files_@.txt")) returned 0x2020 [0137.455] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0137.455] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.455] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht\\*", lpFindFileData=0x1242939c | out: lpFindFileData=0x1242939c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x35a3e20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35a3e20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.456] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x35a3e20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35a3e20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.456] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x35a3e20, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x35a3e20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35a3e20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0137.456] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.456] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.456] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.456] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.456] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.456] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.456] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.456] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293b8 | out: lpFindFileData=0x124293b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.457] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.457] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.457] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124295bc | out: lpMode=0x124295bc) returned 0 [0137.458] CloseHandle (hObject=0x108) returned 1 [0137.458] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.458] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.458] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.458] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.458] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.458] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.458] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0137.458] CloseHandle (hObject=0x108) returned 1 [0137.459] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.459] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.459] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.459] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0137.460] WriteFile (in: hFile=0x108, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0137.461] CloseHandle (hObject=0x108) returned 1 [0137.461] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\@_read_to_recover_files_@.txt")) returned 0x2020 [0137.461] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0137.461] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.461] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x35c9f80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35c9f80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.461] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x35c9f80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35c9f80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.461] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x35c9f80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x35c9f80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35c9f80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0137.461] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.461] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.461] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.461] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.461] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.462] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.462] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.462] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/minidumps/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.462] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0137.462] CloseHandle (hObject=0x108) returned 1 [0137.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/parent.lock\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\parent.lock\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.462] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/parent.lock\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/parent.lock\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\parent.lock\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.462] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/parent.lock\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.462] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/parent.lock\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\parent.lock\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.463] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/parent.lock" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\parent.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.463] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0137.463] CloseHandle (hObject=0x108) returned 1 [0137.463] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.463] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.463] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.463] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0137.463] WriteFile (in: hFile=0x108, lpBuffer=0x124d3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x124d3900*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0137.464] CloseHandle (hObject=0x108) returned 1 [0137.465] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\@_read_to_recover_files_@.txt")) returned 0x2020 [0137.465] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0137.465] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.465] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x35c9f80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35c9f80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.465] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x35c9f80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35c9f80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.465] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x35c9f80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x35c9f80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35c9f80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0137.465] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 1 [0137.465] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.465] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.465] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.465] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.465] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps/webapps.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\webapps.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.466] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0137.466] ReadFile (in: hFile=0x108, lpBuffer=0x124c2b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c2b00*, lpNumberOfBytesRead=0x12429890*=0x2, lpOverlapped=0x0) returned 1 [0137.467] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps/webapps.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\webapps.json"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2)) returned 1 [0137.467] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.467] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.467] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.467] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.467] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.467] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webapps/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0137.467] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0137.467] CloseHandle (hObject=0x138) returned 1 [0137.467] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.468] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Application Data\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.468] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.468] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Application Data\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.468] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data\\@_read_to_recover_files_@.txt")) returned 0x2021 [0137.468] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Application Data\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0137.468] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Application Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.468] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Application Data\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.468] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.469] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.469] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0137.469] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0137.469] WriteFile (in: hFile=0x138, lpBuffer=0x12491300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12491300*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0137.470] CloseHandle (hObject=0x138) returned 1 [0137.470] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\@_read_to_recover_files_@.txt")) returned 0x20 [0137.470] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0137.470] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.471] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x35c9f80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35c9f80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.471] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x35c9f80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35c9f80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.471] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x35c9f80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x35c9f80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35c9f80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0137.471] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0137.472] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0137.472] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0137.472] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0137.472] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0137.472] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0137.472] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0137.472] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.472] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.472] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.472] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.472] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0137.472] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.473] ReadFile (in: hFile=0x138, lpBuffer=0x124c2e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c2e00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.474] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.475] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.475] ReadFile (in: hFile=0x16c, lpBuffer=0x124c3100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c3100*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.477] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0137.477] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.478] ReadFile (in: hFile=0x144, lpBuffer=0x124c3300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c3300*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.479] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0137.479] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.480] ReadFile (in: hFile=0x148, lpBuffer=0x124c3400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c3400*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.481] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0137.481] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.481] ReadFile (in: hFile=0xdc, lpBuffer=0x124c3500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c3500*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.482] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0137.482] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.483] ReadFile (in: hFile=0x124, lpBuffer=0x124c3700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c3700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.484] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0137.484] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.484] ReadFile (in: hFile=0x178, lpBuffer=0x124c3900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c3900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.486] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a)) returned 1 [0137.486] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e)) returned 1 [0137.486] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493)) returned 1 [0137.486] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499)) returned 1 [0137.486] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c)) returned 1 [0137.486] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496)) returned 1 [0137.487] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494)) returned 1 [0137.487] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.487] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.487] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.487] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.487] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.487] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Contacts/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0137.487] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0137.487] CloseHandle (hObject=0x120) returned 1 [0137.487] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Cookies\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.487] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Cookies\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.488] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Cookies\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0137.488] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0137.488] WriteFile (in: hFile=0x120, lpBuffer=0x12493900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12493900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0137.489] CloseHandle (hObject=0x120) returned 1 [0137.489] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Cookies\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies\\@_read_to_recover_files_@.txt")) returned 0x2020 [0137.490] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Cookies\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0137.490] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.490] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Cookies\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.490] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.490] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.490] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0137.491] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0137.491] WriteFile (in: hFile=0x120, lpBuffer=0x12494c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12494c00*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0137.492] CloseHandle (hObject=0x120) returned 1 [0137.492] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\@_read_to_recover_files_@.txt")) returned 0x20 [0137.492] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0137.493] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.493] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x361e710, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x361e710, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x361e710, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x361e710, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d1fdb0, ftCreationTime.dwHighDateTime=0x1d4cb55, ftLastAccessTime.dwLowDateTime=0x1c1cc180, ftLastAccessTime.dwHighDateTime=0x1d4ce27, ftLastWriteTime.dwLowDateTime=0x1c1cc180, ftLastWriteTime.dwHighDateTime=0x1d4ce27, nFileSizeHigh=0x0, nFileSizeLow=0x371a, dwReserved0=0x0, dwReserved1=0x0, cFileName="-V f37j34zQ4v_tK9ugN.mkv", cAlternateFileName="-VF37J~1.MKV")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d408a30, ftCreationTime.dwHighDateTime=0x1d4d192, ftLastAccessTime.dwLowDateTime=0x2019da0, ftLastAccessTime.dwHighDateTime=0x1d4c6a9, ftLastWriteTime.dwLowDateTime=0x2019da0, ftLastWriteTime.dwHighDateTime=0x1d4c6a9, nFileSizeHigh=0x0, nFileSizeLow=0x3e19, dwReserved0=0x0, dwReserved1=0x0, cFileName="1qQQANFrfLz4s yifR.png", cAlternateFileName="1QQQAN~1.PNG")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f01c10, ftCreationTime.dwHighDateTime=0x1d4d1af, ftLastAccessTime.dwLowDateTime=0xfec23630, ftLastAccessTime.dwHighDateTime=0x1d4c97e, ftLastWriteTime.dwLowDateTime=0xfec23630, ftLastWriteTime.dwHighDateTime=0x1d4c97e, nFileSizeHigh=0x0, nFileSizeLow=0x10c65, dwReserved0=0x0, dwReserved1=0x0, cFileName="5nwqcobOD2GK5MSR4.wav", cAlternateFileName="5NWQCO~1.WAV")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428d6690, ftCreationTime.dwHighDateTime=0x1d4cfcf, ftLastAccessTime.dwLowDateTime=0xf681a5a0, ftLastAccessTime.dwHighDateTime=0x1d4c9f1, ftLastWriteTime.dwLowDateTime=0xf681a5a0, ftLastWriteTime.dwHighDateTime=0x1d4c9f1, nFileSizeHigh=0x0, nFileSizeLow=0x54da, dwReserved0=0x0, dwReserved1=0x0, cFileName="8oMwPWOgMy.mkv", cAlternateFileName="8OMWPW~1.MKV")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x361e710, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x361e710, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3623530, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfee3d470, ftCreationTime.dwHighDateTime=0x1d4c54b, ftLastAccessTime.dwLowDateTime=0xdfa89370, ftLastAccessTime.dwHighDateTime=0x1d4c8c0, ftLastWriteTime.dwLowDateTime=0xdfa89370, ftLastWriteTime.dwHighDateTime=0x1d4c8c0, nFileSizeHigh=0x0, nFileSizeLow=0xa56b, dwReserved0=0x0, dwReserved1=0x0, cFileName="B91EP0IP3.bmp", cAlternateFileName="B91EP0~1.BMP")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409aa5a0, ftCreationTime.dwHighDateTime=0x1d4cf7f, ftLastAccessTime.dwLowDateTime=0x275a2b0, ftLastAccessTime.dwHighDateTime=0x1d4d04d, ftLastWriteTime.dwLowDateTime=0x275a2b0, ftLastWriteTime.dwHighDateTime=0x1d4d04d, nFileSizeHigh=0x0, nFileSizeLow=0x95e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BMnjicYt7vO.mkv", cAlternateFileName="BMNJIC~1.MKV")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4261a300, ftCreationTime.dwHighDateTime=0x1d4caea, ftLastAccessTime.dwLowDateTime=0x1a831980, ftLastAccessTime.dwHighDateTime=0x1d4d4dc, ftLastWriteTime.dwLowDateTime=0x1a831980, ftLastWriteTime.dwHighDateTime=0x1d4d4dc, nFileSizeHigh=0x0, nFileSizeLow=0x10995, dwReserved0=0x0, dwReserved1=0x0, cFileName="DpnSvt_yYQN1ip.wav", cAlternateFileName="DPNSVT~1.WAV")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead05850, ftCreationTime.dwHighDateTime=0x1d4c7f3, ftLastAccessTime.dwLowDateTime=0x88620350, ftLastAccessTime.dwHighDateTime=0x1d4d0c0, ftLastWriteTime.dwLowDateTime=0x88620350, ftLastWriteTime.dwHighDateTime=0x1d4d0c0, nFileSizeHigh=0x0, nFileSizeLow=0xa373, dwReserved0=0x0, dwReserved1=0x0, cFileName="f4Qtm-9U_F.mp3", cAlternateFileName="F4QTM-~1.MP3")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74302370, ftCreationTime.dwHighDateTime=0x1d4c667, ftLastAccessTime.dwLowDateTime=0xd7d97d00, ftLastAccessTime.dwHighDateTime=0x1d4d0c0, ftLastWriteTime.dwLowDateTime=0xd7d97d00, ftLastWriteTime.dwHighDateTime=0x1d4d0c0, nFileSizeHigh=0x0, nFileSizeLow=0x9508, dwReserved0=0x0, dwReserved1=0x0, cFileName="fUwity1af-QlSxxi.pdf", cAlternateFileName="FUWITY~1.PDF")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c21b40, ftCreationTime.dwHighDateTime=0x1d4cd57, ftLastAccessTime.dwLowDateTime=0xec4519c0, ftLastAccessTime.dwHighDateTime=0x1d4d4f3, ftLastWriteTime.dwLowDateTime=0xec4519c0, ftLastWriteTime.dwHighDateTime=0x1d4d4f3, nFileSizeHigh=0x0, nFileSizeLow=0x13f7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="H56i l8jwNvN dqAYS.mp4", cAlternateFileName="H56IL8~1.MP4")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68baa760, ftCreationTime.dwHighDateTime=0x1d4d3a3, ftLastAccessTime.dwLowDateTime=0x5307bf70, ftLastAccessTime.dwHighDateTime=0x1d4c98f, ftLastWriteTime.dwLowDateTime=0x5307bf70, ftLastWriteTime.dwHighDateTime=0x1d4c98f, nFileSizeHigh=0x0, nFileSizeLow=0x14e8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ijOH8.mp3", cAlternateFileName="")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42538820, ftCreationTime.dwHighDateTime=0x1d4d20f, ftLastAccessTime.dwLowDateTime=0xa61cc050, ftLastAccessTime.dwHighDateTime=0x1d4ce73, ftLastWriteTime.dwLowDateTime=0xa61cc050, ftLastWriteTime.dwHighDateTime=0x1d4ce73, nFileSizeHigh=0x0, nFileSizeLow=0xc124, dwReserved0=0x0, dwReserved1=0x0, cFileName="m74aEqfpjloC.gif", cAlternateFileName="M74AEQ~1.GIF")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b35c90, ftCreationTime.dwHighDateTime=0x1d4cc66, ftLastAccessTime.dwLowDateTime=0x5118aac0, ftLastAccessTime.dwHighDateTime=0x1d4d381, ftLastWriteTime.dwLowDateTime=0x5118aac0, ftLastWriteTime.dwHighDateTime=0x1d4d381, nFileSizeHigh=0x0, nFileSizeLow=0xbaca, dwReserved0=0x0, dwReserved1=0x0, cFileName="N399TRFUCOINN.wav", cAlternateFileName="N399TR~1.WAV")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cdf740, ftCreationTime.dwHighDateTime=0x1d4cd26, ftLastAccessTime.dwLowDateTime=0x26bbe8d0, ftLastAccessTime.dwHighDateTime=0x1d4d0a4, ftLastWriteTime.dwLowDateTime=0x26bbe8d0, ftLastWriteTime.dwHighDateTime=0x1d4d0a4, nFileSizeHigh=0x0, nFileSizeLow=0x18a32, dwReserved0=0x0, dwReserved1=0x0, cFileName="PevCaQbO5-.gif", cAlternateFileName="PEVCAQ~1.GIF")) returned 1 [0137.493] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb6115c0, ftCreationTime.dwHighDateTime=0x1d4d111, ftLastAccessTime.dwLowDateTime=0x6c49e020, ftLastAccessTime.dwHighDateTime=0x1d4d2c8, ftLastWriteTime.dwLowDateTime=0x6c49e020, ftLastWriteTime.dwHighDateTime=0x1d4d2c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNj50l2L2qW", cAlternateFileName="PNJ50L~1")) returned 1 [0137.494] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90764160, ftCreationTime.dwHighDateTime=0x1d4c705, ftLastAccessTime.dwLowDateTime=0xb5bf0810, ftLastAccessTime.dwHighDateTime=0x1d4d4bd, ftLastWriteTime.dwLowDateTime=0xb5bf0810, ftLastWriteTime.dwHighDateTime=0x1d4d4bd, nFileSizeHigh=0x0, nFileSizeLow=0x17056, dwReserved0=0x0, dwReserved1=0x0, cFileName="QchgIfBo5xq4.mkv", cAlternateFileName="QCHGIF~1.MKV")) returned 1 [0137.494] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30e981a0, ftCreationTime.dwHighDateTime=0x1d4c9b5, ftLastAccessTime.dwLowDateTime=0xc1042470, ftLastAccessTime.dwHighDateTime=0x1d4c604, ftLastWriteTime.dwLowDateTime=0xc1042470, ftLastWriteTime.dwHighDateTime=0x1d4c604, nFileSizeHigh=0x0, nFileSizeLow=0xfd1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="qLrgvIWjmmlyK.avi", cAlternateFileName="QLRGVI~1.AVI")) returned 1 [0137.494] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77674c90, ftCreationTime.dwHighDateTime=0x1d4c549, ftLastAccessTime.dwLowDateTime=0x278edcc0, ftLastAccessTime.dwHighDateTime=0x1d4d042, ftLastWriteTime.dwLowDateTime=0x278edcc0, ftLastWriteTime.dwHighDateTime=0x1d4d042, nFileSizeHigh=0x0, nFileSizeLow=0x13c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rkFo7BF3eVJrKao.csv", cAlternateFileName="RKFO7B~1.CSV")) returned 1 [0137.494] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8a43480, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xb93ccb00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xb80b9e00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0xff400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sam.exe", cAlternateFileName="")) returned 1 [0137.494] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2b344b0, ftCreationTime.dwHighDateTime=0x1d4c944, ftLastAccessTime.dwLowDateTime=0x38f32e10, ftLastAccessTime.dwHighDateTime=0x1d4cb8f, ftLastWriteTime.dwLowDateTime=0x38f32e10, ftLastWriteTime.dwHighDateTime=0x1d4cb8f, nFileSizeHigh=0x0, nFileSizeLow=0x1039, dwReserved0=0x0, dwReserved1=0x0, cFileName="tm1Vh 1iu.csv", cAlternateFileName="TM1VH1~1.CSV")) returned 1 [0137.494] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd03860, ftCreationTime.dwHighDateTime=0x1d4d282, ftLastAccessTime.dwLowDateTime=0xa03d07b0, ftLastAccessTime.dwHighDateTime=0x1d4d40b, ftLastWriteTime.dwLowDateTime=0xa03d07b0, ftLastWriteTime.dwHighDateTime=0x1d4d40b, nFileSizeHigh=0x0, nFileSizeLow=0x3657, dwReserved0=0x0, dwReserved1=0x0, cFileName="UQloQd.mkv", cAlternateFileName="")) returned 1 [0137.494] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e035440, ftCreationTime.dwHighDateTime=0x1d4d3aa, ftLastAccessTime.dwLowDateTime=0xfadc2620, ftLastAccessTime.dwHighDateTime=0x1d4c9f1, ftLastWriteTime.dwLowDateTime=0xfadc2620, ftLastWriteTime.dwHighDateTime=0x1d4c9f1, nFileSizeHigh=0x0, nFileSizeLow=0x4fbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WLWIo6rts IESz.mp4", cAlternateFileName="WLWIO6~1.MP4")) returned 1 [0137.494] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d3a54f0, ftCreationTime.dwHighDateTime=0x1d4d180, ftLastAccessTime.dwLowDateTime=0xa3e90660, ftLastAccessTime.dwHighDateTime=0x1d4d263, ftLastWriteTime.dwLowDateTime=0xa3e90660, ftLastWriteTime.dwHighDateTime=0x1d4d263, nFileSizeHigh=0x0, nFileSizeLow=0xaf30, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPbf3bW8zJzjM2KHJI7.mp3", cAlternateFileName="WPBF3B~1.MP3")) returned 1 [0137.494] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.494] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.494] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/-V f37j34zQ4v_tK9ugN.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-v f37j34zq4v_tk9ugn.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0137.494] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.494] ReadFile (in: hFile=0x120, lpBuffer=0x1257e000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257e000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.495] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/1qQQANFrfLz4s yifR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1qqqanfrflz4s yifr.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0137.495] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.495] ReadFile (in: hFile=0x27c, lpBuffer=0x1257e200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257e200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.496] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/5nwqcobOD2GK5MSR4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5nwqcobod2gk5msr4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0137.496] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.496] ReadFile (in: hFile=0x15c, lpBuffer=0x1257e300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257e300*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.497] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/8oMwPWOgMy.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8omwpwogmy.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0137.497] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.498] ReadFile (in: hFile=0x190, lpBuffer=0x1257e400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257e400*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.498] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.498] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.499] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/B91EP0IP3.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b91ep0ip3.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0137.499] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.499] ReadFile (in: hFile=0xfc, lpBuffer=0x1257e500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257e500*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.500] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/BMnjicYt7vO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bmnjicyt7vo.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0137.500] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.500] ReadFile (in: hFile=0x104, lpBuffer=0x1257e600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257e600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.501] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/DpnSvt_yYQN1ip.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dpnsvt_yyqn1ip.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0137.501] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.501] ReadFile (in: hFile=0xf0, lpBuffer=0x1257e700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257e700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.502] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/H56i l8jwNvN dqAYS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h56i l8jwnvn dqays.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0137.502] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.502] ReadFile (in: hFile=0xe4, lpBuffer=0x1257e900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257e900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.503] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/N399TRFUCOINN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n399trfucoinn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.503] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.503] ReadFile (in: hFile=0x154, lpBuffer=0x1257ea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257ea00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.504] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.504] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb6115c0, ftCreationTime.dwHighDateTime=0x1d4d111, ftLastAccessTime.dwLowDateTime=0x6c49e020, ftLastAccessTime.dwHighDateTime=0x1d4d2c8, ftLastWriteTime.dwLowDateTime=0x6c49e020, ftLastWriteTime.dwHighDateTime=0x1d4d2c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.504] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.504] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PevCaQbO5-.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pevcaqbo5-.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0137.504] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.505] ReadFile (in: hFile=0x18c, lpBuffer=0x1257eb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257eb00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.505] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/QchgIfBo5xq4.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qchgifbo5xq4.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0137.505] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.506] ReadFile (in: hFile=0x10c, lpBuffer=0x1257ec00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257ec00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.507] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/UQloQd.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uqloqd.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0137.507] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.507] ReadFile (in: hFile=0xc0, lpBuffer=0x1257ed00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257ed00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.508] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/WLWIo6rts IESz.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wlwio6rts iesz.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0137.508] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.508] ReadFile (in: hFile=0x180, lpBuffer=0x1257ee00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257ee00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.509] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/WPbf3bW8zJzjM2KHJI7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wpbf3bw8zjzjm2khji7.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0137.509] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.509] ReadFile (in: hFile=0x19c, lpBuffer=0x1257f000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257f000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.510] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0137.510] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.510] ReadFile (in: hFile=0x110, lpBuffer=0x1257f100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257f100*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.511] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/f4Qtm-9U_F.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f4qtm-9u_f.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0137.511] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.511] ReadFile (in: hFile=0x128, lpBuffer=0x1257f200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257f200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.512] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/fUwity1af-QlSxxi.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fuwity1af-qlsxxi.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0137.512] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.512] ReadFile (in: hFile=0x12c, lpBuffer=0x1257f300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257f300*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.513] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/ijOH8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ijoh8.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0137.513] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.513] ReadFile (in: hFile=0x198, lpBuffer=0x1257f400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257f400*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.514] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/m74aEqfpjloC.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m74aeqfpjloc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0137.514] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.514] ReadFile (in: hFile=0x168, lpBuffer=0x1257f500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257f500*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.515] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/qLrgvIWjmmlyK.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qlrgviwjmmlyk.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0137.515] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.515] ReadFile (in: hFile=0xd0, lpBuffer=0x1257f600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257f600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.516] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/rkFo7BF3eVJrKao.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rkfo7bf3evjrkao.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0137.516] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.516] ReadFile (in: hFile=0xc8, lpBuffer=0x1257f700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257f700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.517] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/sam.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sam.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.517] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/sam.exe\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.517] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/tm1Vh 1iu.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tm1vh 1iu.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0137.518] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.518] ReadFile (in: hFile=0x118, lpBuffer=0x1257f800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1257f800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.518] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/-V f37j34zQ4v_tK9ugN.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-v f37j34zq4v_tk9ugn.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d1fdb0, ftCreationTime.dwHighDateTime=0x1d4cb55, ftLastAccessTime.dwLowDateTime=0x1c1cc180, ftLastAccessTime.dwHighDateTime=0x1d4ce27, ftLastWriteTime.dwLowDateTime=0x1c1cc180, ftLastWriteTime.dwHighDateTime=0x1d4ce27, nFileSizeHigh=0x0, nFileSizeLow=0x371a)) returned 1 [0137.519] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/1qQQANFrfLz4s yifR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1qqqanfrflz4s yifr.png"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d408a30, ftCreationTime.dwHighDateTime=0x1d4d192, ftLastAccessTime.dwLowDateTime=0x2019da0, ftLastAccessTime.dwHighDateTime=0x1d4c6a9, ftLastWriteTime.dwLowDateTime=0x2019da0, ftLastWriteTime.dwHighDateTime=0x1d4c6a9, nFileSizeHigh=0x0, nFileSizeLow=0x3e19)) returned 1 [0137.519] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/1qQQANFrfLz4s yifR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1qqqanfrflz4s yifr.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.519] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.519] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442840 | out: pbBuffer=0x12442840) returned 1 [0137.520] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446540 | out: pbBuffer=0x12446540) returned 1 [0137.520] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1257fc02 | out: pbBuffer=0x1257fc02) returned 1 [0137.520] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1257fcd2 | out: pbBuffer=0x1257fcd2) returned 1 [0137.521] SetEvent (hEvent=0xa8) returned 1 [0137.521] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x3e19, lpOverlapped=0x0) returned 1 [0137.522] GetFileType (hFile=0x17c) returned 0x1 [0137.522] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.522] WriteFile (in: hFile=0x17c, lpBuffer=0x1265c000*, nNumberOfBytesToWrite=0x3e19, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1265c000*, lpNumberOfBytesWritten=0x12429b48*=0x3e19, lpOverlapped=0x12429b54) returned 1 [0137.522] GetFileType (hFile=0x17c) returned 0x1 [0137.522] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x3e19, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.522] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.522] CloseHandle (hObject=0x17c) returned 1 [0137.522] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/1qQQANFrfLz4s yifR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1qqqanfrflz4s yifr.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.523] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.523] WriteFile (in: hFile=0x17c, lpBuffer=0x1249a480*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1249a480*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.523] CloseHandle (hObject=0x17c) returned 1 [0137.523] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x126509c0*, nNumberOfCharsToWrite=0x5a, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x126509c0*, lpNumberOfCharsWritten=0x1242981c*=0x5a) returned 1 [0137.524] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/5nwqcobOD2GK5MSR4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5nwqcobod2gk5msr4.wav"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f01c10, ftCreationTime.dwHighDateTime=0x1d4d1af, ftLastAccessTime.dwLowDateTime=0xfec23630, ftLastAccessTime.dwHighDateTime=0x1d4c97e, ftLastWriteTime.dwLowDateTime=0xfec23630, ftLastWriteTime.dwHighDateTime=0x1d4c97e, nFileSizeHigh=0x0, nFileSizeLow=0x10c65)) returned 1 [0137.524] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/5nwqcobOD2GK5MSR4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5nwqcobod2gk5msr4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.524] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.526] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0137.526] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0137.526] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1257e002 | out: pbBuffer=0x1257e002) returned 1 [0137.528] CloseHandle (hObject=0x178) returned 1 [0137.528] CloseHandle (hObject=0x124) returned 1 [0137.528] CloseHandle (hObject=0xdc) returned 1 [0137.528] CloseHandle (hObject=0x148) returned 1 [0137.528] CloseHandle (hObject=0x144) returned 1 [0137.528] CloseHandle (hObject=0x16c) returned 1 [0137.528] CloseHandle (hObject=0x138) returned 1 [0137.528] CloseHandle (hObject=0x108) returned 1 [0137.598] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.856] SetEvent (hEvent=0xa8) returned 1 [0137.856] SetEvent (hEvent=0xb8) returned 1 [0137.856] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.864] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.906] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.907] SetEvent (hEvent=0xb8) returned 1 [0137.907] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.911] SetEvent (hEvent=0xb8) returned 1 [0137.911] SwitchToThread () returned 1 [0137.911] SetEvent (hEvent=0xb8) returned 1 [0137.911] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.913] SetEvent (hEvent=0xa0) returned 1 [0137.913] SetEvent (hEvent=0xa8) returned 1 [0137.913] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0137.914] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0137.916] SetEvent (hEvent=0xb8) returned 1 [0137.916] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0137.917] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0137.917] SetEvent (hEvent=0xb8) returned 1 [0137.917] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x164fe, lpOverlapped=0x0) returned 1 [0137.918] GetFileType (hFile=0x154) returned 0x1 [0137.919] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.919] WriteFile (in: hFile=0x154, lpBuffer=0x12596000*, nNumberOfBytesToWrite=0x164fe, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12596000*, lpNumberOfBytesWritten=0x12429b48*=0x164fe, lpOverlapped=0x12429b54) returned 1 [0137.919] GetFileType (hFile=0x154) returned 0x1 [0137.919] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x164fe, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.919] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.919] CloseHandle (hObject=0x154) returned 1 [0137.919] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/6g7-O Oj0fEf1rCpHFm.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6g7-o oj0fef1rcphfm.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.919] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.920] WriteFile (in: hFile=0x154, lpBuffer=0x127786c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127786c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.920] CloseHandle (hObject=0x154) returned 1 [0137.920] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0x5e, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x1242981c*=0x5e) returned 1 [0137.920] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/8xs0xeB.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8xs0xeb.ods"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54c5ec90, ftCreationTime.dwHighDateTime=0x1d4cea5, ftLastAccessTime.dwLowDateTime=0x4631de0, ftLastAccessTime.dwHighDateTime=0x1d4c5a4, ftLastWriteTime.dwLowDateTime=0x4631de0, ftLastWriteTime.dwHighDateTime=0x1d4c5a4, nFileSizeHigh=0x0, nFileSizeLow=0x7f79)) returned 1 [0137.920] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/8xs0xeB.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8xs0xeb.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.921] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.921] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0137.922] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0137.922] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc04f | out: pbBuffer=0x124bc04f) returned 1 [0137.922] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc08d | out: pbBuffer=0x124bc08d) returned 1 [0137.922] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.922] SetEvent (hEvent=0xb8) returned 1 [0137.922] SetEvent (hEvent=0xa0) returned 1 [0137.923] SwitchToThread () returned 1 [0137.923] SetEvent (hEvent=0xb8) returned 1 [0137.923] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.925] SetEvent (hEvent=0xa0) returned 1 [0137.925] SetEvent (hEvent=0xa8) returned 1 [0137.925] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0137.926] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0137.928] SetEvent (hEvent=0xb8) returned 1 [0137.928] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0137.929] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0137.929] SetEvent (hEvent=0xac) returned 1 [0137.929] SetEvent (hEvent=0xb8) returned 1 [0137.930] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0xc167, lpOverlapped=0x0) returned 1 [0137.930] GetFileType (hFile=0x154) returned 0x1 [0137.930] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.930] WriteFile (in: hFile=0x154, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xc167, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429b48*=0xc167, lpOverlapped=0x12429b54) returned 1 [0137.931] GetFileType (hFile=0x154) returned 0x1 [0137.931] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0xc167, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.931] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.931] CloseHandle (hObject=0x154) returned 1 [0137.931] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/BK8inQ6dT2M9Bs.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bk8inq6dt2m9bs.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.931] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.932] WriteFile (in: hFile=0x154, lpBuffer=0x127786c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127786c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.932] CloseHandle (hObject=0x154) returned 1 [0137.932] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b8000*, nNumberOfCharsToWrite=0x59, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124b8000*, lpNumberOfCharsWritten=0x1242981c*=0x59) returned 1 [0137.932] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/CItUAKoRDSSYq6S.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cituakordssyq6s.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d14b570, ftCreationTime.dwHighDateTime=0x1d55f4a, ftLastAccessTime.dwLowDateTime=0x44b0f8a0, ftLastAccessTime.dwHighDateTime=0x1d559e1, ftLastWriteTime.dwLowDateTime=0x44b0f8a0, ftLastWriteTime.dwHighDateTime=0x1d559e1, nFileSizeHigh=0x0, nFileSizeLow=0x11294)) returned 1 [0137.932] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/CItUAKoRDSSYq6S.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cituakordssyq6s.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.932] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.933] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0137.933] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0137.933] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c0002 | out: pbBuffer=0x124c0002) returned 1 [0137.934] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.934] SetEvent (hEvent=0xb8) returned 1 [0137.934] SetEvent (hEvent=0xa0) returned 1 [0137.935] SwitchToThread () returned 1 [0137.935] SetEvent (hEvent=0xb8) returned 1 [0137.935] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.937] SetEvent (hEvent=0xa0) returned 1 [0137.937] SetEvent (hEvent=0xa8) returned 1 [0137.937] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0137.947] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.947] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0137.948] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.948] SetEvent (hEvent=0xa0) returned 1 [0137.948] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0137.951] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.951] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0137.951] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0137.951] SetEvent (hEvent=0xac) returned 1 [0137.951] SetEvent (hEvent=0xa0) returned 1 [0137.951] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x2c5b, lpOverlapped=0x0) returned 1 [0137.952] GetFileType (hFile=0x154) returned 0x1 [0137.952] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.952] WriteFile (in: hFile=0x154, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x2c5b, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429b48*=0x2c5b, lpOverlapped=0x12429b54) returned 1 [0137.952] GetFileType (hFile=0x154) returned 0x1 [0137.952] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x2c5b, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.952] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.952] CloseHandle (hObject=0x154) returned 1 [0137.952] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DpEDB_T.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dpedb_t.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.952] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.953] WriteFile (in: hFile=0x154, lpBuffer=0x127786c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127786c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.953] CloseHandle (hObject=0x154) returned 1 [0137.953] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x52, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x52) returned 1 [0137.953] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/EdZE.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\edze.odp"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacd47f50, ftCreationTime.dwHighDateTime=0x1d4c860, ftLastAccessTime.dwLowDateTime=0x2a3b3200, ftLastAccessTime.dwHighDateTime=0x1d4ced7, ftLastWriteTime.dwLowDateTime=0x2a3b3200, ftLastWriteTime.dwHighDateTime=0x1d4ced7, nFileSizeHigh=0x0, nFileSizeLow=0xb704)) returned 1 [0137.954] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/EdZE.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\edze.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.954] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.954] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0137.955] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c0002 | out: pbBuffer=0x124c0002) returned 1 [0137.955] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c00c4 | out: pbBuffer=0x124c00c4) returned 1 [0137.956] SwitchToThread () returned 1 [0137.988] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.027] SetEvent (hEvent=0xb8) returned 1 [0138.028] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.036] SetEvent (hEvent=0xb8) returned 1 [0138.036] SwitchToThread () returned 1 [0138.044] SetEvent (hEvent=0xb8) returned 1 [0138.044] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.052] SetEvent (hEvent=0xa0) returned 1 [0138.053] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0138.061] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.061] SetEvent (hEvent=0xa0) returned 1 [0138.061] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0138.079] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.079] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.092] SetEvent (hEvent=0xac) returned 1 [0138.092] SetEvent (hEvent=0xb8) returned 1 [0138.092] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x10ea3, lpOverlapped=0x0) returned 1 [0138.094] GetFileType (hFile=0x154) returned 0x1 [0138.094] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.094] WriteFile (in: hFile=0x154, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x10ea3, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x12429b48*=0x10ea3, lpOverlapped=0x12429b54) returned 1 [0138.094] GetFileType (hFile=0x154) returned 0x1 [0138.094] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x10ea3, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.094] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.095] CloseHandle (hObject=0x154) returned 1 [0138.095] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Iq_AWBfS.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iq_awbfs.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.095] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.101] WriteFile (in: hFile=0x154, lpBuffer=0x124c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x124c0240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.101] CloseHandle (hObject=0x154) returned 1 [0138.101] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x53, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x53) returned 1 [0138.109] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/OW4mQauZ.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ow4mqauz.ppt"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d550250, ftCreationTime.dwHighDateTime=0x1d4d0b7, ftLastAccessTime.dwLowDateTime=0x8cbfa100, ftLastAccessTime.dwHighDateTime=0x1d4d0d4, ftLastWriteTime.dwLowDateTime=0x8cbfa100, ftLastWriteTime.dwHighDateTime=0x1d4d0d4, nFileSizeHigh=0x0, nFileSizeLow=0xbe51)) returned 1 [0138.109] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/OW4mQauZ.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ow4mqauz.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.110] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.116] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e120 | out: pbBuffer=0x1249e120) returned 1 [0138.116] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8202 | out: pbBuffer=0x124c8202) returned 1 [0138.117] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.125] SetEvent (hEvent=0xb8) returned 1 [0138.126] SetEvent (hEvent=0xa0) returned 1 [0138.127] SwitchToThread () returned 1 [0138.133] SetEvent (hEvent=0xb8) returned 1 [0138.133] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.149] SetEvent (hEvent=0xa0) returned 1 [0138.149] SetEvent (hEvent=0xa8) returned 1 [0138.149] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0138.158] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.158] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.173] SetEvent (hEvent=0xb8) returned 1 [0138.173] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0138.189] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.189] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0138.195] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.195] SetEvent (hEvent=0xac) returned 1 [0138.195] SetEvent (hEvent=0xb8) returned 1 [0138.195] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x4e04, lpOverlapped=0x0) returned 1 [0138.196] GetFileType (hFile=0x154) returned 0x1 [0138.196] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.196] WriteFile (in: hFile=0x154, lpBuffer=0x1257c000*, nNumberOfBytesToWrite=0x4e04, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1257c000*, lpNumberOfBytesWritten=0x12429b48*=0x4e04, lpOverlapped=0x12429b54) returned 1 [0138.196] GetFileType (hFile=0x154) returned 0x1 [0138.196] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x4e04, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.196] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.196] CloseHandle (hObject=0x154) returned 1 [0138.197] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Qn_mCSWqKPk-lT7MH.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qn_mcswqkpk-lt7mh.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.197] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.205] WriteFile (in: hFile=0x154, lpBuffer=0x124c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x124c0240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.205] CloseHandle (hObject=0x154) returned 1 [0138.205] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c000*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfCharsWritten=0x1242981c*=0x5c) returned 1 [0138.209] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/RSTx5xrRFDVy Iqzz.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rstx5xrrfdvy iqzz.docx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd45fbad0, ftCreationTime.dwHighDateTime=0x1d4fc4a, ftLastAccessTime.dwLowDateTime=0x6ae52fd0, ftLastAccessTime.dwHighDateTime=0x1d5646f, ftLastWriteTime.dwLowDateTime=0x6ae52fd0, ftLastWriteTime.dwHighDateTime=0x1d5646f, nFileSizeHigh=0x0, nFileSizeLow=0x83b)) returned 1 [0138.209] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/RSTx5xrRFDVy Iqzz.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rstx5xrrfdvy iqzz.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.209] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.209] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.210] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0138.210] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1245e002 | out: pbBuffer=0x1245e002) returned 1 [0138.210] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1245e08c | out: pbBuffer=0x1245e08c) returned 1 [0138.210] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1245e0cd | out: pbBuffer=0x1245e0cd) returned 1 [0138.211] SwitchToThread () returned 1 [0138.211] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.214] SetEvent (hEvent=0xa0) returned 1 [0138.214] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.217] SetEvent (hEvent=0xa0) returned 1 [0138.217] SwitchToThread () returned 1 [0138.217] SetEvent (hEvent=0xa0) returned 1 [0138.217] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.219] SetEvent (hEvent=0xb8) returned 1 [0138.219] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.220] SetEvent (hEvent=0xb8) returned 1 [0138.220] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0138.223] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.223] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0138.223] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.223] SetEvent (hEvent=0xac) returned 1 [0138.223] SetEvent (hEvent=0xb8) returned 1 [0138.223] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x12406, lpOverlapped=0x0) returned 1 [0138.225] GetFileType (hFile=0x154) returned 0x1 [0138.225] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.225] WriteFile (in: hFile=0x154, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x12406, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429b48*=0x12406, lpOverlapped=0x12429b54) returned 1 [0138.225] GetFileType (hFile=0x154) returned 0x1 [0138.225] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x12406, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.226] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.226] CloseHandle (hObject=0x154) returned 1 [0138.226] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/X aqr.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x aqr.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.226] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.226] WriteFile (in: hFile=0x154, lpBuffer=0x124c06c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x124c06c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.226] CloseHandle (hObject=0x154) returned 1 [0138.226] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12660140*, nNumberOfCharsToWrite=0x50, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x12660140*, lpNumberOfCharsWritten=0x1242981c*=0x50) returned 1 [0138.227] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/X5b66F.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x5b66f.docx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58019f50, ftCreationTime.dwHighDateTime=0x1d50e0e, ftLastAccessTime.dwLowDateTime=0xb257d070, ftLastAccessTime.dwHighDateTime=0x1d54ffc, ftLastWriteTime.dwLowDateTime=0xb257d070, ftLastWriteTime.dwHighDateTime=0x1d54ffc, nFileSizeHigh=0x0, nFileSizeLow=0x11514)) returned 1 [0138.227] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/X5b66F.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x5b66f.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.227] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.227] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.228] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0138.228] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0138.228] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b600b | out: pbBuffer=0x124b600b) returned 1 [0138.228] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b6026 | out: pbBuffer=0x124b6026) returned 1 [0138.229] SwitchToThread () returned 1 [0138.229] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.233] SetEvent (hEvent=0xa0) returned 1 [0138.233] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.235] SetEvent (hEvent=0xa0) returned 1 [0138.235] SwitchToThread () returned 1 [0138.236] SetEvent (hEvent=0xa0) returned 1 [0138.236] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.238] SetEvent (hEvent=0xb8) returned 1 [0138.238] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0138.240] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.240] SetEvent (hEvent=0xb8) returned 1 [0138.240] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.242] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.243] SetEvent (hEvent=0xa0) returned 1 [0138.243] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x16077, lpOverlapped=0x0) returned 1 [0138.245] GetFileType (hFile=0x154) returned 0x1 [0138.245] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.245] WriteFile (in: hFile=0x154, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x16077, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429b48*=0x16077, lpOverlapped=0x12429b54) returned 1 [0138.245] GetFileType (hFile=0x154) returned 0x1 [0138.245] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x16077, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.245] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.245] CloseHandle (hObject=0x154) returned 1 [0138.245] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/_i3FeHRce2s HRSV.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_i3fehrce2s hrsv.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.245] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.246] WriteFile (in: hFile=0x154, lpBuffer=0x12650240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12650240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.246] CloseHandle (hObject=0x154) returned 1 [0138.246] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c80c0*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x127c80c0*, lpNumberOfCharsWritten=0x1242981c*=0x5b) returned 1 [0138.246] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0138.246] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/iyfw6IN.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyfw6in.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4234a2e0, ftCreationTime.dwHighDateTime=0x1d560c4, ftLastAccessTime.dwLowDateTime=0x85e599d0, ftLastAccessTime.dwHighDateTime=0x1d5175a, ftLastWriteTime.dwLowDateTime=0x85e599d0, ftLastWriteTime.dwHighDateTime=0x1d5175a, nFileSizeHigh=0x0, nFileSizeLow=0x17409)) returned 1 [0138.246] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/iyfw6IN.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyfw6in.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.246] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.247] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.248] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12800002 | out: pbBuffer=0x12800002) returned 1 [0138.248] SwitchToThread () returned 1 [0138.249] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.252] SetEvent (hEvent=0xb8) returned 1 [0138.252] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.255] SetEvent (hEvent=0xb8) returned 1 [0138.255] SwitchToThread () returned 1 [0138.255] SetEvent (hEvent=0xb8) returned 1 [0138.255] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.259] SetEvent (hEvent=0xa0) returned 1 [0138.259] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.260] SetEvent (hEvent=0xa0) returned 1 [0138.260] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.262] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.262] SetEvent (hEvent=0xa0) returned 1 [0138.262] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x34b8, lpOverlapped=0x0) returned 1 [0138.263] GetFileType (hFile=0x154) returned 0x1 [0138.263] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.263] WriteFile (in: hFile=0x154, lpBuffer=0x1257c000*, nNumberOfBytesToWrite=0x34b8, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1257c000*, lpNumberOfBytesWritten=0x12429b48*=0x34b8, lpOverlapped=0x12429b54) returned 1 [0138.264] GetFileType (hFile=0x154) returned 0x1 [0138.264] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x34b8, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.264] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.264] CloseHandle (hObject=0x154) returned 1 [0138.264] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/r-XdwL-42Vvwoybm7.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\r-xdwl-42vvwoybm7.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.264] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.264] WriteFile (in: hFile=0x154, lpBuffer=0x126506c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x126506c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.264] CloseHandle (hObject=0x154) returned 1 [0138.264] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b60c0*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124b60c0*, lpNumberOfCharsWritten=0x1242981c*=0x5c) returned 1 [0138.265] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/sAkuVSaLJ-Nqxr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sakuvsalj-nqxr.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8258fec0, ftCreationTime.dwHighDateTime=0x1d50de5, ftLastAccessTime.dwLowDateTime=0x9ed613e0, ftLastAccessTime.dwHighDateTime=0x1d500dd, ftLastWriteTime.dwLowDateTime=0x9ed613e0, ftLastWriteTime.dwHighDateTime=0x1d500dd, nFileSizeHigh=0x0, nFileSizeLow=0x5e7e)) returned 1 [0138.265] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/sAkuVSaLJ-Nqxr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sakuvsalj-nqxr.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.265] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.265] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.266] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c0002 | out: pbBuffer=0x124c0002) returned 1 [0138.267] SwitchToThread () returned 1 [0138.267] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.270] SetEvent (hEvent=0xb8) returned 1 [0138.270] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.272] SetEvent (hEvent=0xb8) returned 1 [0138.272] SwitchToThread () returned 1 [0138.274] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.282] SetEvent (hEvent=0xb8) returned 1 [0138.282] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.283] SetEvent (hEvent=0xb8) returned 1 [0138.283] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.285] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.286] SetEvent (hEvent=0xb8) returned 1 [0138.286] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x34b8, lpOverlapped=0x0) returned 1 [0138.286] GetFileType (hFile=0x190) returned 0x1 [0138.286] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.286] WriteFile (in: hFile=0x190, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x34b8, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x12429aa0*=0x34b8, lpOverlapped=0x12429aac) returned 1 [0138.286] GetFileType (hFile=0x190) returned 0x1 [0138.286] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x34b8, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.286] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.287] CloseHandle (hObject=0x190) returned 1 [0138.287] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/EwYE3NR3ncJ7eHCrP.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\ewye3nr3ncj7ehcrp.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.287] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.287] WriteFile (in: hFile=0x190, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.287] CloseHandle (hObject=0x190) returned 1 [0138.287] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12778000*, nNumberOfCharsToWrite=0x65, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x12778000*, lpNumberOfCharsWritten=0x12429774*=0x65) returned 1 [0138.288] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/PGT3yJWly.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\pgt3yjwly.ods"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90935080, ftCreationTime.dwHighDateTime=0x1d4cf6f, ftLastAccessTime.dwLowDateTime=0x1b466740, ftLastAccessTime.dwHighDateTime=0x1d4ce3e, ftLastWriteTime.dwLowDateTime=0x1b466740, ftLastWriteTime.dwHighDateTime=0x1d4ce3e, nFileSizeHigh=0x0, nFileSizeLow=0xbf9f)) returned 1 [0138.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/PGT3yJWly.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\pgt3yjwly.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.288] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.288] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.289] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d8002 | out: pbBuffer=0x124d8002) returned 1 [0138.289] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d8028 | out: pbBuffer=0x124d8028) returned 1 [0138.289] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d80c8 | out: pbBuffer=0x124d80c8) returned 1 [0138.290] SwitchToThread () returned 1 [0138.291] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.294] SetEvent (hEvent=0xa0) returned 1 [0138.294] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.296] SetEvent (hEvent=0xa0) returned 1 [0138.296] SwitchToThread () returned 1 [0138.296] SetEvent (hEvent=0xa0) returned 1 [0138.296] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.300] SetEvent (hEvent=0xb8) returned 1 [0138.300] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.301] SetEvent (hEvent=0xb8) returned 1 [0138.301] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.305] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.320] SetEvent (hEvent=0xb8) returned 1 [0138.320] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.323] SetEvent (hEvent=0xb8) returned 1 [0138.323] SwitchToThread () returned 1 [0138.323] SetEvent (hEvent=0xb8) returned 1 [0138.323] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.325] SetEvent (hEvent=0xa0) returned 1 [0138.325] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.327] SetEvent (hEvent=0xa0) returned 1 [0138.327] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0138.329] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.329] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.329] SetEvent (hEvent=0xa0) returned 1 [0138.329] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x18500, lpOverlapped=0x0) returned 1 [0138.330] GetFileType (hFile=0x144) returned 0x1 [0138.330] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.331] WriteFile (in: hFile=0x144, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x18500, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x18500, lpOverlapped=0x12429aac) returned 1 [0138.331] GetFileType (hFile=0x144) returned 0x1 [0138.331] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x18500, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.331] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.331] CloseHandle (hObject=0x144) returned 1 [0138.331] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/Red6Mz4FPbX NpVD.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\red6mz4fpbx npvd.csv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.331] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.332] WriteFile (in: hFile=0x144, lpBuffer=0x124c06c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c06c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.332] CloseHandle (hObject=0x144) returned 1 [0138.332] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1249c000*, nNumberOfCharsToWrite=0x63, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1249c000*, lpNumberOfCharsWritten=0x12429774*=0x63) returned 1 [0138.332] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/c1HQNrRu.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\c1hqnrru.docx"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29fee280, ftCreationTime.dwHighDateTime=0x1d4d44c, ftLastAccessTime.dwLowDateTime=0x29dba5d0, ftLastAccessTime.dwHighDateTime=0x1d4cfe8, ftLastWriteTime.dwLowDateTime=0x29dba5d0, ftLastWriteTime.dwHighDateTime=0x1d4cfe8, nFileSizeHigh=0x0, nFileSizeLow=0x18070)) returned 1 [0138.332] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/c1HQNrRu.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\c1hqnrru.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.332] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.333] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.334] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.334] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc067 | out: pbBuffer=0x124bc067) returned 1 [0138.335] SwitchToThread () returned 1 [0138.335] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.339] SetEvent (hEvent=0xb8) returned 1 [0138.339] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.341] SetEvent (hEvent=0xb8) returned 1 [0138.341] SwitchToThread () returned 1 [0138.341] SetEvent (hEvent=0xb8) returned 1 [0138.341] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.344] SetEvent (hEvent=0xa0) returned 1 [0138.344] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.345] SetEvent (hEvent=0xa0) returned 1 [0138.345] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.347] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.347] SetEvent (hEvent=0xa0) returned 1 [0138.347] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xe9be, lpOverlapped=0x0) returned 1 [0138.348] GetFileType (hFile=0x144) returned 0x1 [0138.348] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.348] WriteFile (in: hFile=0x144, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0xe9be, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x12429aa0*=0xe9be, lpOverlapped=0x12429aac) returned 1 [0138.349] GetFileType (hFile=0x144) returned 0x1 [0138.349] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xe9be, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.349] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.349] CloseHandle (hObject=0x144) returned 1 [0138.349] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/o-MKyp06h8MMK3Nef_sT.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\o-mkyp06h8mmk3nef_st.odp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.349] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.349] WriteFile (in: hFile=0x144, lpBuffer=0x124c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c0240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.349] CloseHandle (hObject=0x144) returned 1 [0138.349] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1265e000*, nNumberOfCharsToWrite=0x67, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1265e000*, lpNumberOfCharsWritten=0x12429774*=0x67) returned 1 [0138.350] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/sbJL3EO4YpHWj8imabS.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\sbjl3eo4yphwj8imabs.rtf"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26e9430, ftCreationTime.dwHighDateTime=0x1d4c741, ftLastAccessTime.dwLowDateTime=0x720b3770, ftLastAccessTime.dwHighDateTime=0x1d4ce45, ftLastWriteTime.dwLowDateTime=0x720b3770, ftLastWriteTime.dwHighDateTime=0x1d4ce45, nFileSizeHigh=0x0, nFileSizeLow=0xacf)) returned 1 [0138.350] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/sbJL3EO4YpHWj8imabS.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\sbjl3eo4yphwj8imabs.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.350] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.350] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.351] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0138.351] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.351] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c805b | out: pbBuffer=0x124c805b) returned 1 [0138.351] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c80d4 | out: pbBuffer=0x124c80d4) returned 1 [0138.352] SwitchToThread () returned 1 [0138.353] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.355] SetEvent (hEvent=0xb8) returned 1 [0138.355] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.357] SetEvent (hEvent=0xb8) returned 1 [0138.358] SwitchToThread () returned 1 [0138.358] SetEvent (hEvent=0xb8) returned 1 [0138.358] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.360] SetEvent (hEvent=0xa0) returned 1 [0138.360] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.361] SetEvent (hEvent=0xa0) returned 1 [0138.361] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.363] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.364] SetEvent (hEvent=0xa0) returned 1 [0138.364] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xad60, lpOverlapped=0x0) returned 1 [0138.364] GetFileType (hFile=0x144) returned 0x1 [0138.364] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.365] WriteFile (in: hFile=0x144, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xad60, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429aa0*=0xad60, lpOverlapped=0x12429aac) returned 1 [0138.365] GetFileType (hFile=0x144) returned 0x1 [0138.365] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xad60, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.365] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.365] CloseHandle (hObject=0x144) returned 1 [0138.365] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/wDFQJE7tGXQQFyWMNQ.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\wdfqje7tgxqqfywmnq.odt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.365] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.366] WriteFile (in: hFile=0x144, lpBuffer=0x124c06c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c06c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.366] CloseHandle (hObject=0x144) returned 1 [0138.366] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1245e000*, nNumberOfCharsToWrite=0x65, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1245e000*, lpNumberOfCharsWritten=0x12429774*=0x65) returned 1 [0138.366] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.366] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.366] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.366] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.366] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.367] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.367] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0138.367] CloseHandle (hObject=0x144) returned 1 [0138.367] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.367] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.367] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.368] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0138.368] WriteFile (in: hFile=0x144, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0138.369] CloseHandle (hObject=0x144) returned 1 [0138.369] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.369] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.370] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f32aa0, ftCreationTime.dwHighDateTime=0x1d4d27f, ftLastAccessTime.dwLowDateTime=0x3e4c310, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3e4c310, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.370] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f32aa0, ftCreationTime.dwHighDateTime=0x1d4d27f, ftLastAccessTime.dwLowDateTime=0x3e4c310, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3e4c310, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.370] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x3e4c310, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x3e4c310, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3e74b80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.370] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8af632a0, ftCreationTime.dwHighDateTime=0x1d4cba5, ftLastAccessTime.dwLowDateTime=0xf9d18570, ftLastAccessTime.dwHighDateTime=0x1d4d31c, ftLastWriteTime.dwLowDateTime=0xf9d18570, ftLastWriteTime.dwHighDateTime=0x1d4d31c, nFileSizeHigh=0x0, nFileSizeLow=0x3fe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jB4-VLY3Kq.ppt", cAlternateFileName="JB4-VL~1.PPT")) returned 1 [0138.370] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e2f58f0, ftCreationTime.dwHighDateTime=0x1d4d1cb, ftLastAccessTime.dwLowDateTime=0x445c7140, ftLastAccessTime.dwHighDateTime=0x1d4ce0e, ftLastWriteTime.dwLowDateTime=0x445c7140, ftLastWriteTime.dwHighDateTime=0x1d4ce0e, nFileSizeHigh=0x0, nFileSizeLow=0xe398, dwReserved0=0x0, dwReserved1=0x0, cFileName="xBuzTUKGNsHUWC08M-.doc", cAlternateFileName="XBUZTU~1.DOC")) returned 1 [0138.370] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677f390, ftCreationTime.dwHighDateTime=0x1d4ca17, ftLastAccessTime.dwLowDateTime=0xb757bc90, ftLastAccessTime.dwHighDateTime=0x1d4cff3, ftLastWriteTime.dwLowDateTime=0xb757bc90, ftLastWriteTime.dwHighDateTime=0x1d4cff3, nFileSizeHigh=0x0, nFileSizeLow=0xf791, dwReserved0=0x0, dwReserved1=0x0, cFileName="zaN83FfpylnaUubw5l.rtf", cAlternateFileName="ZAN83F~1.RTF")) returned 1 [0138.370] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa2d3f0, ftCreationTime.dwHighDateTime=0x1d4c9ad, ftLastAccessTime.dwLowDateTime=0xbf7c7a20, ftLastAccessTime.dwHighDateTime=0x1d4cb82, ftLastWriteTime.dwLowDateTime=0xbf7c7a20, ftLastWriteTime.dwHighDateTime=0x1d4cb82, nFileSizeHigh=0x0, nFileSizeLow=0x1039, dwReserved0=0x0, dwReserved1=0x0, cFileName="zVqSpAPcuQk0xpgn.csv", cAlternateFileName="ZVQSPA~1.CSV")) returned 1 [0138.370] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.370] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.370] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/jB4-VLY3Kq.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\jb4-vly3kq.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.371] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.371] ReadFile (in: hFile=0x144, lpBuffer=0x127c8000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.372] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/xBuzTUKGNsHUWC08M-.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\xbuztukgnshuwc08m-.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.372] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.372] ReadFile (in: hFile=0x190, lpBuffer=0x127c8100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x127c8100*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.373] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/zVqSpAPcuQk0xpgn.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\zvqspapcuqk0xpgn.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.373] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.373] ReadFile (in: hFile=0x154, lpBuffer=0x127c8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x127c8200*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.374] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/zaN83FfpylnaUubw5l.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\zan83ffpylnauubw5l.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0138.374] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.374] ReadFile (in: hFile=0x120, lpBuffer=0x127c8300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x127c8300*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.375] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/jB4-VLY3Kq.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\jb4-vly3kq.ppt"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8af632a0, ftCreationTime.dwHighDateTime=0x1d4cba5, ftLastAccessTime.dwLowDateTime=0xf9d18570, ftLastAccessTime.dwHighDateTime=0x1d4d31c, ftLastWriteTime.dwLowDateTime=0xf9d18570, ftLastWriteTime.dwHighDateTime=0x1d4d31c, nFileSizeHigh=0x0, nFileSizeLow=0x3fe8)) returned 1 [0138.375] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/jB4-VLY3Kq.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\jb4-vly3kq.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.375] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.375] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e1a0 | out: pbBuffer=0x1249e1a0) returned 1 [0138.376] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2140 | out: pbBuffer=0x124e2140) returned 1 [0138.376] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127c8402 | out: pbBuffer=0x127c8402) returned 1 [0138.376] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127c8457 | out: pbBuffer=0x127c8457) returned 1 [0138.377] SetEvent (hEvent=0xb8) returned 1 [0138.377] ReadFile (in: hFile=0x27c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x3fe8, lpOverlapped=0x0) returned 1 [0138.378] GetFileType (hFile=0x27c) returned 0x1 [0138.378] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.378] WriteFile (in: hFile=0x27c, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x3fe8, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x124299f8*=0x3fe8, lpOverlapped=0x12429a04) returned 1 [0138.378] GetFileType (hFile=0x27c) returned 0x1 [0138.378] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x3fe8, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.378] ReadFile (in: hFile=0x27c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0138.378] CloseHandle (hObject=0x27c) returned 1 [0138.378] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/jB4-VLY3Kq.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\jb4-vly3kq.ppt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.378] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.379] WriteFile (in: hFile=0x27c, lpBuffer=0x124c0fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x124c0fc0*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0138.379] CloseHandle (hObject=0x27c) returned 1 [0138.379] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1249a460*, nNumberOfCharsToWrite=0x6d, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x1249a460*, lpNumberOfCharsWritten=0x124296cc*=0x6d) returned 1 [0138.380] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/xBuzTUKGNsHUWC08M-.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\xbuztukgnshuwc08m-.doc"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e2f58f0, ftCreationTime.dwHighDateTime=0x1d4d1cb, ftLastAccessTime.dwLowDateTime=0x445c7140, ftLastAccessTime.dwHighDateTime=0x1d4ce0e, ftLastWriteTime.dwLowDateTime=0x445c7140, ftLastWriteTime.dwHighDateTime=0x1d4ce0e, nFileSizeHigh=0x0, nFileSizeLow=0xe398)) returned 1 [0138.380] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/xBuzTUKGNsHUWC08M-.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\xbuztukgnshuwc08m-.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.380] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.380] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.381] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.381] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.381] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc00f | out: pbBuffer=0x124bc00f) returned 1 [0138.382] CloseHandle (hObject=0x120) returned 1 [0138.382] CloseHandle (hObject=0x154) returned 1 [0138.382] CloseHandle (hObject=0x190) returned 1 [0138.382] CloseHandle (hObject=0x144) returned 1 [0138.382] SwitchToThread () returned 1 [0138.383] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.386] SetEvent (hEvent=0xa0) returned 1 [0138.386] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.388] SetEvent (hEvent=0xa0) returned 1 [0138.388] SwitchToThread () returned 1 [0138.388] SetEvent (hEvent=0xa0) returned 1 [0138.388] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0138.389] SetEvent (hEvent=0xb8) returned 1 [0138.390] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.390] SetEvent (hEvent=0xb8) returned 1 [0138.391] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.393] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0138.393] SetEvent (hEvent=0xb8) returned 1 [0138.393] ReadFile (in: hFile=0x27c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0xf791, lpOverlapped=0x0) returned 1 [0138.394] GetFileType (hFile=0x27c) returned 0x1 [0138.394] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.394] WriteFile (in: hFile=0x27c, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0xf791, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x124299f8*=0xf791, lpOverlapped=0x12429a04) returned 1 [0138.394] GetFileType (hFile=0x27c) returned 0x1 [0138.394] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0xf791, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.394] ReadFile (in: hFile=0x27c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0138.394] CloseHandle (hObject=0x27c) returned 1 [0138.394] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/zaN83FfpylnaUubw5l.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\zan83ffpylnauubw5l.rtf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.395] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.395] WriteFile (in: hFile=0x27c, lpBuffer=0x127c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x127c0240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0138.395] CloseHandle (hObject=0x27c) returned 1 [0138.395] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x75, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x124296cc*=0x75) returned 1 [0138.395] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.396] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.396] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.396] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.396] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.396] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.396] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0138.396] CloseHandle (hObject=0x27c) returned 1 [0138.396] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.396] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Music\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.397] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.397] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.397] WriteFile (in: hFile=0x27c, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.398] CloseHandle (hObject=0x27c) returned 1 [0138.398] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.399] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Music\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.399] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.399] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Music\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.399] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.399] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Pictures\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.399] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.400] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.400] WriteFile (in: hFile=0x27c, lpBuffer=0x124d1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d1300*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.401] CloseHandle (hObject=0x27c) returned 1 [0138.401] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.401] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Pictures\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.401] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.402] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Pictures\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.402] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.402] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.402] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.404] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.404] WriteFile (in: hFile=0x27c, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.405] CloseHandle (hObject=0x27c) returned 1 [0138.405] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.405] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.405] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.405] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x3ebf6d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3ebf6d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x3ebf6d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3ebf6d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x3ebf6d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x3ebf6d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3ebf6d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0138.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0138.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0138.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.406] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.406] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.406] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.406] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.406] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.406] ReadFile (in: hFile=0x27c, lpBuffer=0x124c2600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c2600*, lpNumberOfBytesRead=0x12429bd8*=0x0, lpOverlapped=0x0) returned 1 [0138.407] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.407] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.408] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.408] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.409] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.409] ReadFile (in: hFile=0x144, lpBuffer=0x124c2900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c2900*, lpNumberOfBytesRead=0x12429bd8*=0xd8, lpOverlapped=0x0) returned 1 [0138.410] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0138.410] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.410] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.410] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.410] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.411] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.411] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.411] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0138.411] CloseHandle (hObject=0x190) returned 1 [0138.411] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/Favorites.vss\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.411] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/Favorites.vss\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.411] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/Favorites.vss\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.411] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/Favorites.vss\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.411] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/Favorites.vss\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.411] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.411] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0138.411] CloseHandle (hObject=0x190) returned 1 [0138.412] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.412] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.412] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.417] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0138.418] WriteFile (in: hFile=0x190, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0138.419] CloseHandle (hObject=0x190) returned 1 [0138.419] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.419] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.419] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.419] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x3ebf6d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3ebf6d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.419] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x3ebf6d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3ebf6d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.419] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x3ebf6d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x3ebf6d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3eecd60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.419] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0138.419] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.419] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.419] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.419] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.420] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private/folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.423] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.423] ReadFile (in: hFile=0x190, lpBuffer=0x124c2d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124c2d00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.425] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private/folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6)) returned 1 [0138.426] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.426] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.426] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.426] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.426] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.426] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes/_private/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.426] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0138.426] CloseHandle (hObject=0x154) returned 1 [0138.426] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.427] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Videos\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.427] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.427] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.427] WriteFile (in: hFile=0x154, lpBuffer=0x12490000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12490000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.428] CloseHandle (hObject=0x154) returned 1 [0138.428] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.429] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Videos\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.429] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.429] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Videos\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.429] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.429] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.429] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.429] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.430] WriteFile (in: hFile=0x154, lpBuffer=0x12491300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12491300*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.431] CloseHandle (hObject=0x154) returned 1 [0138.431] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.431] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.431] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.431] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3f05400, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3f05400, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.431] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3f05400, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3f05400, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.431] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x3f05400, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x3f05400, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3f07b10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.431] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0138.431] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.431] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.431] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.431] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.432] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files/voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.432] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.432] ReadFile (in: hFile=0x154, lpBuffer=0x124c3000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c3000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.434] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files/voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1 [0138.436] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files/voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0138.436] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.436] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442480 | out: pbBuffer=0x12442480) returned 1 [0138.437] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c3102 | out: pbBuffer=0x124c3102) returned 1 [0138.438] SetEvent (hEvent=0xa0) returned 1 [0138.438] ReadFile (in: hFile=0x120, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x42400, lpOverlapped=0x0) returned 1 [0138.443] GetFileType (hFile=0x120) returned 0x1 [0138.443] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.443] WriteFile (in: hFile=0x120, lpBuffer=0x125b6000*, nNumberOfBytesToWrite=0x42400, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x125b6000*, lpNumberOfBytesWritten=0x12429aa0*=0x42400, lpOverlapped=0x12429aac) returned 1 [0138.444] GetFileType (hFile=0x120) returned 0x1 [0138.444] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x42400, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.444] ReadFile (in: hFile=0x120, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.444] CloseHandle (hObject=0x120) returned 1 [0138.444] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files/voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0138.444] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.444] WriteFile (in: hFile=0x120, lpBuffer=0x127c0fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c0fc0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.445] CloseHandle (hObject=0x120) returned 1 [0138.445] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8700*, nNumberOfCharsToWrite=0x6a, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c8700*, lpNumberOfCharsWritten=0x12429774*=0x6a) returned 1 [0138.445] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.445] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.446] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.446] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.446] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.446] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0138.446] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0138.447] CloseHandle (hObject=0x120) returned 1 [0138.447] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.447] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.447] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0138.447] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.448] WriteFile (in: hFile=0x120, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.449] CloseHandle (hObject=0x120) returned 1 [0138.449] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.449] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.449] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.449] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcabf80b0, ftCreationTime.dwHighDateTime=0x1d4d16f, ftLastAccessTime.dwLowDateTime=0x3f31320, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3f31320, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.449] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcabf80b0, ftCreationTime.dwHighDateTime=0x1d4d16f, ftLastAccessTime.dwLowDateTime=0x3f31320, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3f31320, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.449] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x3f31320, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x3f31320, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3f36140, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.449] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba932f0, ftCreationTime.dwHighDateTime=0x1d4d1e2, ftLastAccessTime.dwLowDateTime=0x1486d020, ftLastAccessTime.dwHighDateTime=0x1d4d1cc, ftLastWriteTime.dwLowDateTime=0x1486d020, ftLastWriteTime.dwHighDateTime=0x1d4d1cc, nFileSizeHigh=0x0, nFileSizeLow=0x18105, dwReserved0=0x0, dwReserved1=0x0, cFileName="BEW_8RVtw4IAMdbG2.odp", cAlternateFileName="BEW_8R~1.ODP")) returned 1 [0138.449] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x396c54f0, ftCreationTime.dwHighDateTime=0x1d4cd6c, ftLastAccessTime.dwLowDateTime=0xd0ca83e0, ftLastAccessTime.dwHighDateTime=0x1d4c749, ftLastWriteTime.dwLowDateTime=0xd0ca83e0, ftLastWriteTime.dwHighDateTime=0x1d4c749, nFileSizeHigh=0x0, nFileSizeLow=0x184bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="dxlu_gWJuQJE0QfuQm.csv", cAlternateFileName="DXLU_G~1.CSV")) returned 1 [0138.449] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e6bf7e0, ftCreationTime.dwHighDateTime=0x1d4c7b4, ftLastAccessTime.dwLowDateTime=0xeb7f290, ftLastAccessTime.dwHighDateTime=0x1d4cf70, ftLastWriteTime.dwLowDateTime=0xeb7f290, ftLastWriteTime.dwHighDateTime=0x1d4cf70, nFileSizeHigh=0x0, nFileSizeLow=0x9f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAg4hC7CcWe.rtf", cAlternateFileName="EAG4HC~1.RTF")) returned 1 [0138.450] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ea1b0, ftCreationTime.dwHighDateTime=0x1d4c63c, ftLastAccessTime.dwLowDateTime=0xfbba2d90, ftLastAccessTime.dwHighDateTime=0x1d4c621, ftLastWriteTime.dwLowDateTime=0xfbba2d90, ftLastWriteTime.dwHighDateTime=0x1d4c621, nFileSizeHigh=0x0, nFileSizeLow=0xdb89, dwReserved0=0x0, dwReserved1=0x0, cFileName="I7-P-H QcPQ.odp", cAlternateFileName="I7-P-H~1.ODP")) returned 1 [0138.450] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcd6db0, ftCreationTime.dwHighDateTime=0x1d4d217, ftLastAccessTime.dwLowDateTime=0x5ab59b0, ftLastAccessTime.dwHighDateTime=0x1d4caa4, ftLastWriteTime.dwLowDateTime=0x5ab59b0, ftLastWriteTime.dwHighDateTime=0x1d4caa4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMNf7IIiE77nKVQ7GmcL", cAlternateFileName="SMNF7I~1")) returned 1 [0138.450] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea8bf8d0, ftCreationTime.dwHighDateTime=0x1d4ce34, ftLastAccessTime.dwLowDateTime=0x52267890, ftLastAccessTime.dwHighDateTime=0x1d4cf60, ftLastWriteTime.dwLowDateTime=0x52267890, ftLastWriteTime.dwHighDateTime=0x1d4cf60, nFileSizeHigh=0x0, nFileSizeLow=0x17773, dwReserved0=0x0, dwReserved1=0x0, cFileName="W3GREwiMqRPSTDNz-94.xlsx", cAlternateFileName="W3GREW~1.XLS")) returned 1 [0138.450] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c006ef0, ftCreationTime.dwHighDateTime=0x1d4d522, ftLastAccessTime.dwLowDateTime=0xed2afee0, ftLastAccessTime.dwHighDateTime=0x1d4d16f, ftLastWriteTime.dwLowDateTime=0xed2afee0, ftLastWriteTime.dwHighDateTime=0x1d4d16f, nFileSizeHigh=0x0, nFileSizeLow=0x189ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="xk82.docx", cAlternateFileName="XK82~1.DOC")) returned 1 [0138.450] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.450] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.450] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.450] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.450] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/BEW_8RVtw4IAMdbG2.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\bew_8rvtw4iamdbg2.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0138.450] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.450] ReadFile (in: hFile=0x120, lpBuffer=0x1244a000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1244a000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.451] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/EAg4hC7CcWe.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\eag4hc7ccwe.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.451] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.451] ReadFile (in: hFile=0x27c, lpBuffer=0x1244a100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1244a100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.452] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/I7-P-H QcPQ.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\i7-p-h qcpq.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.452] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.453] ReadFile (in: hFile=0x144, lpBuffer=0x1244a200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1244a200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.453] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.453] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcd6db0, ftCreationTime.dwHighDateTime=0x1d4d217, ftLastAccessTime.dwLowDateTime=0x5ab59b0, ftLastAccessTime.dwHighDateTime=0x1d4caa4, ftLastWriteTime.dwLowDateTime=0x5ab59b0, ftLastWriteTime.dwHighDateTime=0x1d4caa4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.453] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.454] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/W3GREwiMqRPSTDNz-94.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\w3grewimqrpstdnz-94.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.454] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.454] ReadFile (in: hFile=0x190, lpBuffer=0x1244a300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1244a300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.455] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/dxlu_gWJuQJE0QfuQm.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\dxlu_gwjuqje0qfuqm.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.455] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.455] ReadFile (in: hFile=0x154, lpBuffer=0x1244a400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1244a400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.456] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/xk82.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\xk82.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.456] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.456] ReadFile (in: hFile=0x15c, lpBuffer=0x1244a500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1244a500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.457] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/BEW_8RVtw4IAMdbG2.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\bew_8rvtw4iamdbg2.odp"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba932f0, ftCreationTime.dwHighDateTime=0x1d4d1e2, ftLastAccessTime.dwLowDateTime=0x1486d020, ftLastAccessTime.dwHighDateTime=0x1d4d1cc, ftLastWriteTime.dwLowDateTime=0x1486d020, ftLastWriteTime.dwHighDateTime=0x1d4d1cc, nFileSizeHigh=0x0, nFileSizeLow=0x18105)) returned 1 [0138.457] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/BEW_8RVtw4IAMdbG2.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\bew_8rvtw4iamdbg2.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.457] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.457] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124422e0 | out: pbBuffer=0x124422e0) returned 1 [0138.458] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a602 | out: pbBuffer=0x1244a602) returned 1 [0138.458] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a699 | out: pbBuffer=0x1244a699) returned 1 [0138.459] SetEvent (hEvent=0xb8) returned 1 [0138.459] ReadFile (in: hFile=0xfc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x18105, lpOverlapped=0x0) returned 1 [0138.461] GetFileType (hFile=0xfc) returned 0x1 [0138.461] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.461] WriteFile (in: hFile=0xfc, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x18105, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x18105, lpOverlapped=0x12429aac) returned 1 [0138.461] GetFileType (hFile=0xfc) returned 0x1 [0138.461] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x18105, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.461] ReadFile (in: hFile=0xfc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.461] CloseHandle (hObject=0xfc) returned 1 [0138.461] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/BEW_8RVtw4IAMdbG2.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\bew_8rvtw4iamdbg2.odp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.461] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.462] WriteFile (in: hFile=0xfc, lpBuffer=0x127c0b40*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c0b40*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.462] CloseHandle (hObject=0xfc) returned 1 [0138.462] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c81c0*, nNumberOfCharsToWrite=0x6a, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c81c0*, lpNumberOfCharsWritten=0x12429774*=0x6a) returned 1 [0138.463] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/EAg4hC7CcWe.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\eag4hc7ccwe.rtf"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e6bf7e0, ftCreationTime.dwHighDateTime=0x1d4c7b4, ftLastAccessTime.dwLowDateTime=0xeb7f290, ftLastAccessTime.dwHighDateTime=0x1d4cf70, ftLastWriteTime.dwLowDateTime=0xeb7f290, ftLastWriteTime.dwHighDateTime=0x1d4cf70, nFileSizeHigh=0x0, nFileSizeLow=0x9f24)) returned 1 [0138.463] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/EAg4hC7CcWe.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\eag4hc7ccwe.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.463] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.463] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.464] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2074 | out: pbBuffer=0x124e2074) returned 1 [0138.464] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d8002 | out: pbBuffer=0x124d8002) returned 1 [0138.534] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.022] SwitchToThread () returned 1 [0139.022] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.026] SetEvent (hEvent=0xb8) returned 1 [0139.026] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.027] SetEvent (hEvent=0xb8) returned 1 [0139.027] SwitchToThread () returned 1 [0139.029] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.283] SetEvent (hEvent=0xa8) returned 1 [0139.283] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.285] SetEvent (hEvent=0xa8) returned 1 [0139.285] SwitchToThread () returned 1 [0139.291] SetEvent (hEvent=0xb8) returned 1 [0139.291] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.318] SetEvent (hEvent=0xa8) returned 1 [0139.319] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.331] SetEvent (hEvent=0xa8) returned 1 [0139.332] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.336] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.338] SetEvent (hEvent=0xa8) returned 1 [0139.338] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0xf843, lpOverlapped=0x0) returned 1 [0139.339] GetFileType (hFile=0xe4) returned 0x1 [0139.339] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.340] WriteFile (in: hFile=0xe4, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0xf843, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x12429b48*=0xf843, lpOverlapped=0x12429b54) returned 1 [0139.340] GetFileType (hFile=0xe4) returned 0x1 [0139.340] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0xf843, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.340] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0139.340] CloseHandle (hObject=0xe4) returned 1 [0139.341] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/ZijcOI_7_iSEf.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zijcoi_7_isef.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.341] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.348] WriteFile (in: hFile=0xe4, lpBuffer=0x127c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127c0240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0139.348] CloseHandle (hObject=0xe4) returned 1 [0139.348] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c0b0*, nNumberOfCharsToWrite=0x56, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c0b0*, lpNumberOfCharsWritten=0x1242981c*=0x56) returned 1 [0139.351] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0139.351] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/fMU3F.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fmu3f.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0b4fb00, ftCreationTime.dwHighDateTime=0x1d4c55e, ftLastAccessTime.dwLowDateTime=0x3dba5280, ftLastAccessTime.dwHighDateTime=0x1d4d002, ftLastWriteTime.dwLowDateTime=0x3dba5280, ftLastWriteTime.dwHighDateTime=0x1d4d002, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8)) returned 1 [0139.351] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/fMU3F.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fmu3f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.351] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.352] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.353] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0139.353] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0139.354] SwitchToThread () returned 1 [0139.355] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.393] SetEvent (hEvent=0xb8) returned 1 [0139.393] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.400] SetEvent (hEvent=0xb8) returned 1 [0139.400] SwitchToThread () returned 1 [0139.436] SetEvent (hEvent=0xb8) returned 1 [0139.436] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.446] SetEvent (hEvent=0xa8) returned 1 [0139.446] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.448] SetEvent (hEvent=0xa8) returned 1 [0139.448] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0139.451] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.451] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.452] SetEvent (hEvent=0xac) returned 1 [0139.452] SetEvent (hEvent=0xa8) returned 1 [0139.452] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x5dde, lpOverlapped=0x0) returned 1 [0139.453] GetFileType (hFile=0xe4) returned 0x1 [0139.453] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.453] WriteFile (in: hFile=0xe4, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x5dde, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429b48*=0x5dde, lpOverlapped=0x12429b54) returned 1 [0139.453] GetFileType (hFile=0xe4) returned 0x1 [0139.453] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x5dde, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.453] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0139.453] CloseHandle (hObject=0xe4) returned 1 [0139.453] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/qIm 6 ynK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qim 6 ynk.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.453] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.461] WriteFile (in: hFile=0xe4, lpBuffer=0x127c06c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127c06c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0139.461] CloseHandle (hObject=0xe4) returned 1 [0139.461] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c0b0*, nNumberOfCharsToWrite=0x52, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c0b0*, lpNumberOfCharsWritten=0x1242981c*=0x52) returned 1 [0139.462] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/urPhq_-EMN_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\urphq_-emn_.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d4ccdd0, ftCreationTime.dwHighDateTime=0x1d4c8db, ftLastAccessTime.dwLowDateTime=0xeda3d350, ftLastAccessTime.dwHighDateTime=0x1d4d26a, ftLastWriteTime.dwLowDateTime=0xeda3d350, ftLastWriteTime.dwHighDateTime=0x1d4d26a, nFileSizeHigh=0x0, nFileSizeLow=0x1335e)) returned 1 [0139.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/urPhq_-EMN_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\urphq_-emn_.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.462] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.463] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.463] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0139.463] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc04f | out: pbBuffer=0x124bc04f) returned 1 [0139.463] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc0b4 | out: pbBuffer=0x124bc0b4) returned 1 [0139.465] SwitchToThread () returned 1 [0139.465] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.471] SetEvent (hEvent=0xb8) returned 1 [0139.471] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.474] SetEvent (hEvent=0xb8) returned 1 [0139.474] SwitchToThread () returned 1 [0139.475] SetEvent (hEvent=0xb8) returned 1 [0139.475] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.477] SetEvent (hEvent=0xa8) returned 1 [0139.477] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.479] SetEvent (hEvent=0xa8) returned 1 [0139.479] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.485] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.643] SetEvent (hEvent=0xa8) returned 1 [0139.643] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.645] SetEvent (hEvent=0xa8) returned 1 [0139.645] SetEvent (hEvent=0xa0) returned 1 [0139.645] CloseHandle (hObject=0x180) returned 1 [0139.645] CloseHandle (hObject=0x118) returned 1 [0139.645] CloseHandle (hObject=0xc8) returned 1 [0139.645] CloseHandle (hObject=0xd0) returned 1 [0139.645] CloseHandle (hObject=0x168) returned 1 [0139.645] CloseHandle (hObject=0x110) returned 1 [0139.645] CloseHandle (hObject=0xc0) returned 1 [0139.645] CloseHandle (hObject=0x10c) returned 1 [0139.645] CloseHandle (hObject=0x18c) returned 1 [0139.645] CloseHandle (hObject=0x19c) returned 1 [0139.645] CloseHandle (hObject=0xe4) returned 1 [0139.645] SwitchToThread () returned 1 [0139.720] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.726] SetEvent (hEvent=0xb8) returned 1 [0139.726] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.729] SetEvent (hEvent=0xb8) returned 1 [0139.729] SwitchToThread () returned 1 [0139.730] SetEvent (hEvent=0xb8) returned 1 [0139.730] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.732] SetEvent (hEvent=0xa8) returned 1 [0139.732] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.735] SetEvent (hEvent=0xa8) returned 1 [0139.735] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0139.737] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.737] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.738] SetEvent (hEvent=0xac) returned 1 [0139.738] SetEvent (hEvent=0xa8) returned 1 [0139.738] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x8dd4, lpOverlapped=0x0) returned 1 [0139.739] GetFileType (hFile=0x190) returned 0x1 [0139.739] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.739] WriteFile (in: hFile=0x190, lpBuffer=0x1257c000*, nNumberOfBytesToWrite=0x8dd4, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1257c000*, lpNumberOfBytesWritten=0x12429aa0*=0x8dd4, lpOverlapped=0x12429aac) returned 1 [0139.739] GetFileType (hFile=0x190) returned 0x1 [0139.739] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x8dd4, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.739] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0139.739] CloseHandle (hObject=0x190) returned 1 [0139.739] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/DkRTw60Pu5d6yq-E7Yo7.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\dkrtw60pu5d6yq-e7yo7.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.739] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.740] WriteFile (in: hFile=0x190, lpBuffer=0x124c2240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c2240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0139.740] CloseHandle (hObject=0x190) returned 1 [0139.740] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1249c000*, nNumberOfCharsToWrite=0x63, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1249c000*, lpNumberOfCharsWritten=0x12429774*=0x63) returned 1 [0139.741] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/VuhibnqUI8oH.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\vuhibnqui8oh.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76ef710, ftCreationTime.dwHighDateTime=0x1d4ca87, ftLastAccessTime.dwLowDateTime=0x80c21020, ftLastAccessTime.dwHighDateTime=0x1d4c61d, ftLastWriteTime.dwLowDateTime=0x80c21020, ftLastWriteTime.dwHighDateTime=0x1d4c61d, nFileSizeHigh=0x0, nFileSizeLow=0x16f0d)) returned 1 [0139.741] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/VuhibnqUI8oH.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\vuhibnqui8oh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.741] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.742] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.743] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0139.744] SwitchToThread () returned 1 [0139.744] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.748] SetEvent (hEvent=0xb8) returned 1 [0139.748] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.753] SetEvent (hEvent=0xb8) returned 1 [0139.753] SwitchToThread () returned 1 [0139.754] SetEvent (hEvent=0xb8) returned 1 [0139.754] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.757] SetEvent (hEvent=0xa8) returned 1 [0139.757] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.759] SetEvent (hEvent=0xa8) returned 1 [0139.759] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.762] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.762] SetEvent (hEvent=0xa8) returned 1 [0139.762] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x16ac9, lpOverlapped=0x0) returned 1 [0139.763] GetFileType (hFile=0x190) returned 0x1 [0139.763] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.763] WriteFile (in: hFile=0x190, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x16ac9, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x16ac9, lpOverlapped=0x12429aac) returned 1 [0139.764] GetFileType (hFile=0x190) returned 0x1 [0139.764] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x16ac9, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.764] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0139.764] CloseHandle (hObject=0x190) returned 1 [0139.764] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/ioqTUg1uiPOwAwq2az-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\ioqtug1uipowawq2az-.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.764] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.764] WriteFile (in: hFile=0x190, lpBuffer=0x124c26c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c26c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0139.765] CloseHandle (hObject=0x190) returned 1 [0139.765] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fa000*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fa000*, lpNumberOfCharsWritten=0x12429774*=0x62) returned 1 [0139.765] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/njj-5NO.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\njj-5no.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6b3880, ftCreationTime.dwHighDateTime=0x1d4cb2f, ftLastAccessTime.dwLowDateTime=0xbc36bbf0, ftLastAccessTime.dwHighDateTime=0x1d4cf1a, ftLastWriteTime.dwLowDateTime=0xbc36bbf0, ftLastWriteTime.dwHighDateTime=0x1d4cf1a, nFileSizeHigh=0x0, nFileSizeLow=0x1602b)) returned 1 [0139.765] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/wFgc-JfDcGBq3h6f.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\wfgc-jfdcgbq3h6f.gif"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe0b900, ftCreationTime.dwHighDateTime=0x1d4c89f, ftLastAccessTime.dwLowDateTime=0xf14316d0, ftLastAccessTime.dwHighDateTime=0x1d4c7b9, ftLastWriteTime.dwLowDateTime=0xf14316d0, ftLastWriteTime.dwHighDateTime=0x1d4c7b9, nFileSizeHigh=0x0, nFileSizeLow=0x93fb)) returned 1 [0139.765] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/wFgc-JfDcGBq3h6f.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\wfgc-jfdcgbq3h6f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.765] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.769] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.770] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b8002 | out: pbBuffer=0x124b8002) returned 1 [0139.770] SwitchToThread () returned 1 [0139.771] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.774] SetEvent (hEvent=0xb8) returned 1 [0139.774] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.776] SetEvent (hEvent=0xb8) returned 1 [0139.776] SwitchToThread () returned 1 [0139.789] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.807] SetEvent (hEvent=0xb8) returned 1 [0139.807] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0139.809] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.809] SetEvent (hEvent=0xb8) returned 1 [0139.809] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.888] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.889] SetEvent (hEvent=0xac) returned 1 [0139.889] SetEvent (hEvent=0xa8) returned 1 [0139.889] ReadFile (in: hFile=0x110, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xccd7, lpOverlapped=0x0) returned 1 [0139.889] GetFileType (hFile=0x110) returned 0x1 [0139.890] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.890] WriteFile (in: hFile=0x110, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xccd7, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429aa0*=0xccd7, lpOverlapped=0x12429aac) returned 1 [0139.890] GetFileType (hFile=0x110) returned 0x1 [0139.890] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xccd7, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.890] ReadFile (in: hFile=0x110, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0139.890] CloseHandle (hObject=0x110) returned 1 [0139.890] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/GnW-yHtqkgwLpT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\gnw-yhtqkgwlpt.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0139.890] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.891] WriteFile (in: hFile=0x110, lpBuffer=0x12576240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12576240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0139.891] CloseHandle (hObject=0x110) returned 1 [0139.891] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x6a, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x12429774*=0x6a) returned 1 [0139.892] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/TFYkEMF.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\tfykemf.gif"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c3bb0, ftCreationTime.dwHighDateTime=0x1d4cd81, ftLastAccessTime.dwLowDateTime=0x427eb380, ftLastAccessTime.dwHighDateTime=0x1d4ceb1, ftLastWriteTime.dwLowDateTime=0x427eb380, ftLastWriteTime.dwHighDateTime=0x1d4ceb1, nFileSizeHigh=0x0, nFileSizeLow=0x85f4)) returned 1 [0139.892] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/TFYkEMF.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\tfykemf.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0139.892] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.892] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.893] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0139.893] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0139.894] SwitchToThread () returned 1 [0139.894] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.897] SetEvent (hEvent=0xb8) returned 1 [0139.897] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.901] SetEvent (hEvent=0xb8) returned 1 [0139.901] SwitchToThread () returned 1 [0139.901] SetEvent (hEvent=0xb8) returned 1 [0139.901] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.903] SetEvent (hEvent=0xa8) returned 1 [0139.903] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0139.907] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0139.907] SetEvent (hEvent=0xa8) returned 1 [0139.907] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0139.913] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.000] SetEvent (hEvent=0xa8) returned 1 [0140.000] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.004] SetEvent (hEvent=0xa8) returned 1 [0140.004] SwitchToThread () returned 1 [0140.005] SetEvent (hEvent=0xa8) returned 1 [0140.005] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.007] SetEvent (hEvent=0xb8) returned 1 [0140.007] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.010] SetEvent (hEvent=0xb8) returned 1 [0140.010] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.013] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.013] SetEvent (hEvent=0xb8) returned 1 [0140.013] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x76dd, lpOverlapped=0x0) returned 1 [0140.014] GetFileType (hFile=0x16c) returned 0x1 [0140.014] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.014] WriteFile (in: hFile=0x16c, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x76dd, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429b48*=0x76dd, lpOverlapped=0x12429b54) returned 1 [0140.014] GetFileType (hFile=0x16c) returned 0x1 [0140.014] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x76dd, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.014] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0140.014] CloseHandle (hObject=0x16c) returned 1 [0140.014] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/DLVoZuGo8Sd-W-.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dlvozugo8sd-w-.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.014] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.017] WriteFile (in: hFile=0x16c, lpBuffer=0x127de6c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127de6c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0140.017] CloseHandle (hObject=0x16c) returned 1 [0140.017] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c0b0*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c0b0*, lpNumberOfCharsWritten=0x1242981c*=0x55) returned 1 [0140.018] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/DT-d76Tu9eXs.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dt-d76tu9exs.avi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57236230, ftCreationTime.dwHighDateTime=0x1d4cc00, ftLastAccessTime.dwLowDateTime=0x77f31b20, ftLastAccessTime.dwHighDateTime=0x1d4cfb8, ftLastWriteTime.dwLowDateTime=0x77f31b20, ftLastWriteTime.dwHighDateTime=0x1d4cfb8, nFileSizeHigh=0x0, nFileSizeLow=0x103fe)) returned 1 [0140.018] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/DT-d76Tu9eXs.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dt-d76tu9exs.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.018] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.019] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.019] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0140.020] SwitchToThread () returned 1 [0140.021] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.024] SetEvent (hEvent=0xa8) returned 1 [0140.024] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.027] SetEvent (hEvent=0xa8) returned 1 [0140.027] SwitchToThread () returned 1 [0140.027] SetEvent (hEvent=0xa8) returned 1 [0140.027] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.029] SetEvent (hEvent=0xb8) returned 1 [0140.030] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.031] SetEvent (hEvent=0xb8) returned 1 [0140.031] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.034] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.034] SetEvent (hEvent=0xb8) returned 1 [0140.034] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x12e51, lpOverlapped=0x0) returned 1 [0140.035] GetFileType (hFile=0x16c) returned 0x1 [0140.035] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.035] WriteFile (in: hFile=0x16c, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x12e51, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429b48*=0x12e51, lpOverlapped=0x12429b54) returned 1 [0140.036] GetFileType (hFile=0x16c) returned 0x1 [0140.036] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x12e51, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.036] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0140.036] CloseHandle (hObject=0x16c) returned 1 [0140.036] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/H7-2hc06c0.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\h7-2hc06c0.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.036] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.036] WriteFile (in: hFile=0x16c, lpBuffer=0x127de240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127de240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0140.036] CloseHandle (hObject=0x16c) returned 1 [0140.037] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x51, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x51) returned 1 [0140.037] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/OnHqj.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\onhqj.flv"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd842f850, ftCreationTime.dwHighDateTime=0x1d4d3a1, ftLastAccessTime.dwLowDateTime=0x20681da0, ftLastAccessTime.dwHighDateTime=0x1d4c983, ftLastWriteTime.dwLowDateTime=0x20681da0, ftLastWriteTime.dwHighDateTime=0x1d4c983, nFileSizeHigh=0x0, nFileSizeLow=0x506)) returned 1 [0140.037] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/OnHqj.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\onhqj.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.038] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.080] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.080] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0140.081] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c2092 | out: pbBuffer=0x124c2092) returned 1 [0140.081] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c20be | out: pbBuffer=0x124c20be) returned 1 [0140.082] SwitchToThread () returned 1 [0140.135] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.252] SetEvent (hEvent=0xa8) returned 1 [0140.252] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.258] SetEvent (hEvent=0xa8) returned 1 [0140.258] SwitchToThread () returned 1 [0140.264] SetEvent (hEvent=0xa8) returned 1 [0140.264] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.274] SetEvent (hEvent=0xb8) returned 1 [0140.274] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0140.280] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.280] SetEvent (hEvent=0xb8) returned 1 [0140.280] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.284] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.284] SetEvent (hEvent=0xb8) returned 1 [0140.284] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x2e33, lpOverlapped=0x0) returned 1 [0140.285] GetFileType (hFile=0x16c) returned 0x1 [0140.286] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.286] WriteFile (in: hFile=0x16c, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x2e33, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x12429b48*=0x2e33, lpOverlapped=0x12429b54) returned 1 [0140.286] GetFileType (hFile=0x16c) returned 0x1 [0140.286] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x2e33, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.286] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0140.286] CloseHandle (hObject=0x16c) returned 1 [0140.286] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/X7l3GG.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x7l3gg.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.286] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.287] WriteFile (in: hFile=0x16c, lpBuffer=0x127de6c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127de6c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0140.287] CloseHandle (hObject=0x16c) returned 1 [0140.287] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127e00a0*, nNumberOfCharsToWrite=0x4d, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x127e00a0*, lpNumberOfCharsWritten=0x1242981c*=0x4d) returned 1 [0140.287] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/_ cAnQB.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_ canqb.swf"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895ab320, ftCreationTime.dwHighDateTime=0x1d4d1dc, ftLastAccessTime.dwLowDateTime=0x95db3120, ftLastAccessTime.dwHighDateTime=0x1d4cca4, ftLastWriteTime.dwLowDateTime=0x95db3120, ftLastWriteTime.dwHighDateTime=0x1d4cca4, nFileSizeHigh=0x0, nFileSizeLow=0x1453a)) returned 1 [0140.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/_ cAnQB.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_ canqb.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.288] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.289] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.290] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0140.290] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0140.290] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c2021 | out: pbBuffer=0x124c2021) returned 1 [0140.290] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c2056 | out: pbBuffer=0x124c2056) returned 1 [0140.291] SwitchToThread () returned 1 [0140.292] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.297] SetEvent (hEvent=0xa8) returned 1 [0140.297] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.300] SetEvent (hEvent=0xa8) returned 1 [0140.300] SwitchToThread () returned 1 [0140.303] SetEvent (hEvent=0xa8) returned 1 [0140.303] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.306] SetEvent (hEvent=0xb8) returned 1 [0140.306] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.314] SetEvent (hEvent=0xb8) returned 1 [0140.314] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.325] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.327] SetEvent (hEvent=0xb8) returned 1 [0140.327] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x16e34, lpOverlapped=0x0) returned 1 [0140.329] GetFileType (hFile=0x16c) returned 0x1 [0140.329] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.329] WriteFile (in: hFile=0x16c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x16e34, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429b48*=0x16e34, lpOverlapped=0x12429b54) returned 1 [0140.330] GetFileType (hFile=0x16c) returned 0x1 [0140.330] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x16e34, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.330] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0140.330] CloseHandle (hObject=0x16c) returned 1 [0140.330] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/kWeM6qRi4e2e_ns.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kwem6qri4e2e_ns.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.330] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.336] WriteFile (in: hFile=0x16c, lpBuffer=0x127de240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127de240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0140.336] CloseHandle (hObject=0x16c) returned 1 [0140.336] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c0b0*, nNumberOfCharsToWrite=0x56, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c0b0*, lpNumberOfCharsWritten=0x1242981c*=0x56) returned 1 [0140.337] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/z inyqAN7rqIx9IrQbQ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\z inyqan7rqix9irqbq.swf"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29ade0d0, ftCreationTime.dwHighDateTime=0x1d4cb8f, ftLastAccessTime.dwLowDateTime=0xcbc0eb60, ftLastAccessTime.dwHighDateTime=0x1d4d0d0, ftLastWriteTime.dwLowDateTime=0xcbc0eb60, ftLastWriteTime.dwHighDateTime=0x1d4d0d0, nFileSizeHigh=0x0, nFileSizeLow=0x17917)) returned 1 [0140.337] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/z inyqAN7rqIx9IrQbQ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\z inyqan7rqix9irqbq.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.337] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.340] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.341] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0140.341] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0140.341] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c8021 | out: pbBuffer=0x124c8021) returned 1 [0140.341] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c8047 | out: pbBuffer=0x124c8047) returned 1 [0140.341] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c809a | out: pbBuffer=0x124c809a) returned 1 [0140.342] SwitchToThread () returned 1 [0140.343] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.353] SetEvent (hEvent=0xa8) returned 1 [0140.353] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.360] SetEvent (hEvent=0xa8) returned 1 [0140.360] SwitchToThread () returned 1 [0140.364] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.392] SetEvent (hEvent=0xa8) returned 1 [0140.392] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0140.393] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.393] SetEvent (hEvent=0xa8) returned 1 [0140.393] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.396] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.397] SetEvent (hEvent=0xac) returned 1 [0140.397] SetEvent (hEvent=0xb8) returned 1 [0140.397] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x1240d, lpOverlapped=0x0) returned 1 [0140.398] GetFileType (hFile=0x10c) returned 0x1 [0140.398] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.398] WriteFile (in: hFile=0x10c, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x1240d, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429aa0*=0x1240d, lpOverlapped=0x12429aac) returned 1 [0140.399] GetFileType (hFile=0x10c) returned 0x1 [0140.399] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x1240d, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.399] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0140.399] CloseHandle (hObject=0x10c) returned 1 [0140.399] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/C9Oa2S.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\c9oa2s.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.399] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.399] WriteFile (in: hFile=0x10c, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0140.400] CloseHandle (hObject=0x10c) returned 1 [0140.400] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x12429774*=0x5f) returned 1 [0140.400] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/DI V0p.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\di v0p.mp4"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60c182c0, ftCreationTime.dwHighDateTime=0x1d4ce05, ftLastAccessTime.dwLowDateTime=0x70ef9d70, ftLastAccessTime.dwHighDateTime=0x1d4d036, ftLastWriteTime.dwLowDateTime=0x70ef9d70, ftLastWriteTime.dwHighDateTime=0x1d4d036, nFileSizeHigh=0x0, nFileSizeLow=0x4dad)) returned 1 [0140.400] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/DI V0p.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\di v0p.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.400] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.400] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.401] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0140.401] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0140.401] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c2019 | out: pbBuffer=0x124c2019) returned 1 [0140.401] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c201e | out: pbBuffer=0x124c201e) returned 1 [0140.401] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c20a6 | out: pbBuffer=0x124c20a6) returned 1 [0140.402] SwitchToThread () returned 1 [0140.403] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.405] SetEvent (hEvent=0xa8) returned 1 [0140.405] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.407] SetEvent (hEvent=0xa8) returned 1 [0140.407] SwitchToThread () returned 1 [0140.407] SetEvent (hEvent=0xa8) returned 1 [0140.407] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.409] SetEvent (hEvent=0xb8) returned 1 [0140.409] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.410] SetEvent (hEvent=0xb8) returned 1 [0140.410] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.412] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.412] SetEvent (hEvent=0xb8) returned 1 [0140.412] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xb3d, lpOverlapped=0x0) returned 1 [0140.412] GetFileType (hFile=0x10c) returned 0x1 [0140.412] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.412] WriteFile (in: hFile=0x10c, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0xb3d, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429aa0*=0xb3d, lpOverlapped=0x12429aac) returned 1 [0140.413] GetFileType (hFile=0x10c) returned 0x1 [0140.413] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xb3d, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.413] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0140.413] CloseHandle (hObject=0x10c) returned 1 [0140.413] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/VK_iXNbuWHUlI5Q.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\vk_ixnbuwhuli5q.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.413] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.413] WriteFile (in: hFile=0x10c, lpBuffer=0x127c86c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c86c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0140.414] CloseHandle (hObject=0x10c) returned 1 [0140.414] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1245c000*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1245c000*, lpNumberOfCharsWritten=0x12429774*=0x68) returned 1 [0140.414] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/WL_O-XAPNOYr01t0TN.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\wl_o-xapnoyr01t0tn.mp4"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc22b47a0, ftCreationTime.dwHighDateTime=0x1d4ce0d, ftLastAccessTime.dwLowDateTime=0x2f6da0c0, ftLastAccessTime.dwHighDateTime=0x1d4c728, ftLastWriteTime.dwLowDateTime=0x2f6da0c0, ftLastWriteTime.dwHighDateTime=0x1d4c728, nFileSizeHigh=0x0, nFileSizeLow=0x813b)) returned 1 [0140.414] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/WL_O-XAPNOYr01t0TN.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\wl_o-xapnoyr01t0tn.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.414] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.414] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.415] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0140.415] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc03c | out: pbBuffer=0x124bc03c) returned 1 [0140.415] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc0cc | out: pbBuffer=0x124bc0cc) returned 1 [0140.416] SwitchToThread () returned 1 [0140.416] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.419] SetEvent (hEvent=0xa8) returned 1 [0140.419] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.421] SetEvent (hEvent=0xa8) returned 1 [0140.421] SwitchToThread () returned 1 [0140.421] SetEvent (hEvent=0xa8) returned 1 [0140.421] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.423] SetEvent (hEvent=0xb8) returned 1 [0140.423] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.424] SetEvent (hEvent=0xb8) returned 1 [0140.424] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.426] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.426] SetEvent (hEvent=0xb8) returned 1 [0140.426] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x6a19, lpOverlapped=0x0) returned 1 [0140.427] GetFileType (hFile=0x10c) returned 0x1 [0140.427] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.427] WriteFile (in: hFile=0x10c, lpBuffer=0x12596000*, nNumberOfBytesToWrite=0x6a19, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12596000*, lpNumberOfBytesWritten=0x12429aa0*=0x6a19, lpOverlapped=0x12429aac) returned 1 [0140.427] GetFileType (hFile=0x10c) returned 0x1 [0140.427] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x6a19, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.427] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0140.427] CloseHandle (hObject=0x10c) returned 1 [0140.427] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/ag3hlJ.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\ag3hlj.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.427] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.428] WriteFile (in: hFile=0x10c, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0140.428] CloseHandle (hObject=0x10c) returned 1 [0140.428] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1245e0c0*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1245e0c0*, lpNumberOfCharsWritten=0x12429774*=0x5f) returned 1 [0140.428] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/ayvjHTRQ7B-Qu1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\ayvjhtrq7b-qu1.mp4"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc6d6160, ftCreationTime.dwHighDateTime=0x1d4d0b7, ftLastAccessTime.dwLowDateTime=0x15f477c0, ftLastAccessTime.dwHighDateTime=0x1d4c8f6, ftLastWriteTime.dwLowDateTime=0x15f477c0, ftLastWriteTime.dwHighDateTime=0x1d4c8f6, nFileSizeHigh=0x0, nFileSizeLow=0x183a2)) returned 1 [0140.428] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/ayvjHTRQ7B-Qu1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\ayvjhtrq7b-qu1.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.428] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.429] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.429] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0140.429] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0140.430] SwitchToThread () returned 1 [0140.431] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.434] SetEvent (hEvent=0xa8) returned 1 [0140.434] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.436] SetEvent (hEvent=0xa8) returned 1 [0140.436] SwitchToThread () returned 1 [0140.437] SetEvent (hEvent=0xa8) returned 1 [0140.437] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.438] SetEvent (hEvent=0xb8) returned 1 [0140.438] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.439] SetEvent (hEvent=0xb8) returned 1 [0140.439] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.441] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.442] SetEvent (hEvent=0xb8) returned 1 [0140.442] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xfcab, lpOverlapped=0x0) returned 1 [0140.443] GetFileType (hFile=0x10c) returned 0x1 [0140.443] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.443] WriteFile (in: hFile=0x10c, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0xfcab, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x12429aa0*=0xfcab, lpOverlapped=0x12429aac) returned 1 [0140.443] GetFileType (hFile=0x10c) returned 0x1 [0140.443] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfcab, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.443] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0140.443] CloseHandle (hObject=0x10c) returned 1 [0140.443] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/eyVqagYKT64lOZ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\eyvqagykt64loz.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.443] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.444] WriteFile (in: hFile=0x10c, lpBuffer=0x127c86c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c86c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0140.444] CloseHandle (hObject=0x10c) returned 1 [0140.444] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1265e000*, nNumberOfCharsToWrite=0x67, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1265e000*, lpNumberOfCharsWritten=0x12429774*=0x67) returned 1 [0140.444] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/f8DnfscpyoEN1mpQ94D.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\f8dnfscpyoen1mpq94d.avi"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d2f72a0, ftCreationTime.dwHighDateTime=0x1d4cba5, ftLastAccessTime.dwLowDateTime=0x956fab00, ftLastAccessTime.dwHighDateTime=0x1d4c586, ftLastWriteTime.dwLowDateTime=0x956fab00, ftLastWriteTime.dwHighDateTime=0x1d4c586, nFileSizeHigh=0x0, nFileSizeLow=0x15378)) returned 1 [0140.444] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/f8DnfscpyoEN1mpQ94D.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\f8dnfscpyoen1mpq94d.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.444] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.445] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.445] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0140.445] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0140.446] SwitchToThread () returned 1 [0140.446] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.450] SetEvent (hEvent=0xa8) returned 1 [0140.450] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.452] SetEvent (hEvent=0xa8) returned 1 [0140.452] SwitchToThread () returned 1 [0140.452] SetEvent (hEvent=0xa8) returned 1 [0140.452] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.458] SetEvent (hEvent=0xb8) returned 1 [0140.458] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.459] SetEvent (hEvent=0xb8) returned 1 [0140.459] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.461] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0140.461] SetEvent (hEvent=0xb8) returned 1 [0140.461] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x59bb, lpOverlapped=0x0) returned 1 [0140.462] GetFileType (hFile=0x10c) returned 0x1 [0140.462] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.462] WriteFile (in: hFile=0x10c, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x59bb, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429aa0*=0x59bb, lpOverlapped=0x12429aac) returned 1 [0140.462] GetFileType (hFile=0x10c) returned 0x1 [0140.462] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x59bb, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.462] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0140.462] CloseHandle (hObject=0x10c) returned 1 [0140.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/v2BJb.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\v2bjb.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.462] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.463] WriteFile (in: hFile=0x10c, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0140.463] CloseHandle (hObject=0x10c) returned 1 [0140.463] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12778000*, nNumberOfCharsToWrite=0x5e, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x12778000*, lpNumberOfCharsWritten=0x12429774*=0x5e) returned 1 [0140.463] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.463] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.463] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.463] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.463] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.464] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.464] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0140.464] CloseHandle (hObject=0x10c) returned 1 [0140.464] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.464] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG1\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.464] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log1\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.464] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG1\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.465] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG1\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log1\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.465] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.465] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG1\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.465] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.465] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG2\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.465] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.465] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG2\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.465] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log2\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.465] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.465] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/ntuser.dat.LOG2\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.465] CreateFileW (lpFileName="C:/Users/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.465] FindFirstFileW (in: lpFileName="C:/Users/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.465] CreateFileW (lpFileName="C:/Users/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.466] FindFirstFileW (in: lpFileName="C:/Users/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429af0 | out: lpFindFileData=0x12429af0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.466] GetFileAttributesW (lpFileName="C:/Users/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.466] CreateFileW (lpFileName="C:/Users/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.466] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429cf4 | out: lpMode=0x12429cf4) returned 0 [0140.466] CloseHandle (hObject=0x10c) returned 1 [0140.467] CreateFileW (lpFileName="C:/Users/All Users\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.467] FindFirstFileW (in: lpFileName="C:/Users/All Users\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.467] CreateFileW (lpFileName="C:/Users/All Users\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.467] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429db8 | out: lpMode=0x12429db8) returned 0 [0140.468] WriteFile (in: hFile=0x10c, lpBuffer=0x12583900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429dbc, lpOverlapped=0x0 | out: lpBuffer=0x12583900*, lpNumberOfBytesWritten=0x12429dbc*=0x1033, lpOverlapped=0x0) returned 1 [0140.468] CloseHandle (hObject=0x10c) returned 1 [0140.469] GetFileAttributesW (lpFileName="C:/Users/All Users\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.469] SetFileAttributesW (lpFileName="C:/Users/All Users\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.469] CreateFileW (lpFileName="C:/Users/All Users" (normalized: "c:\\users\\all users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.469] FindFirstFileW (in: lpFileName="C:/Users/All Users\\*", lpFindFileData=0x12429a2c | out: lpFindFileData=0x12429a2c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x51c02c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x51c02c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.469] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x51c02c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x51c02c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.469] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbb892f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xcbb892f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcbb8e110, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x883, dwReserved0=0x0, dwReserved1=0x0, cFileName="00000000.eky", cAlternateFileName="")) returned 1 [0140.469] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbb7cfa0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xcbb7cfa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcbb892f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="00000000.pky", cAlternateFileName="")) returned 1 [0140.469] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x51c02c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x51c02c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x51c29d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.469] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0140.469] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0140.469] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0140.469] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0140.469] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0140.470] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0140.470] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0140.470] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0140.470] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0140.470] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0140.470] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0140.470] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0140.470] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0140.470] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.470] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.470] CreateFileW (lpFileName="C:/Users/All Users/00000000.eky" (normalized: "c:\\users\\all users\\00000000.eky"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.470] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429d18 | out: lpMode=0x12429d18) returned 0 [0140.470] ReadFile (in: hFile=0x10c, lpBuffer=0x124d8000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429d28, lpOverlapped=0x0 | out: lpBuffer=0x124d8000*, lpNumberOfBytesRead=0x12429d28*=0x100, lpOverlapped=0x0) returned 1 [0140.471] CreateFileW (lpFileName="C:/Users/All Users/00000000.pky" (normalized: "c:\\users\\all users\\00000000.pky"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.471] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429d18 | out: lpMode=0x12429d18) returned 0 [0140.471] ReadFile (in: hFile=0x16c, lpBuffer=0x124d8100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429d28, lpOverlapped=0x0 | out: lpBuffer=0x124d8100*, lpNumberOfBytesRead=0x12429d28*=0x100, lpOverlapped=0x0) returned 1 [0140.472] CreateFileW (lpFileName="C:/Users/All Users/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.472] FindFirstFileW (in: lpFileName="C:/Users/All Users/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.472] CreateFileW (lpFileName="C:/Users/All Users/Adobe" (normalized: "c:\\users\\all users\\adobe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.472] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.473] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.473] CreateFileW (lpFileName="C:/Users/All Users/Application Data" (normalized: "c:\\users\\all users\\application data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.473] FindFirstFileW (in: lpFileName="C:/Users/All Users/Application Data\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.473] CreateFileW (lpFileName="C:/Users/All Users/Desktop" (normalized: "c:\\users\\all users\\desktop"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.473] FindFirstFileW (in: lpFileName="C:/Users/All Users/Desktop\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.473] CreateFileW (lpFileName="C:/Users/All Users/Documents" (normalized: "c:\\users\\all users\\documents"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.473] FindFirstFileW (in: lpFileName="C:/Users/All Users/Documents\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.473] CreateFileW (lpFileName="C:/Users/All Users/Favorites" (normalized: "c:\\users\\all users\\favorites"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.474] FindFirstFileW (in: lpFileName="C:/Users/All Users/Favorites\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.474] CreateFileW (lpFileName="C:/Users/All Users/Microsoft" (normalized: "c:\\users\\all users\\microsoft"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.474] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.474] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.474] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help" (normalized: "c:\\users\\all users\\microsoft help"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.474] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft Help\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.476] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.477] CreateFileW (lpFileName="C:/Users/All Users/Mozilla" (normalized: "c:\\users\\all users\\mozilla"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.477] FindFirstFileW (in: lpFileName="C:/Users/All Users/Mozilla\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.477] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.477] CreateFileW (lpFileName="C:/Users/All Users/Oracle" (normalized: "c:\\users\\all users\\oracle"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.477] FindFirstFileW (in: lpFileName="C:/Users/All Users/Oracle\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.477] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.477] CreateFileW (lpFileName="C:/Users/All Users/Package Cache" (normalized: "c:\\users\\all users\\package cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.477] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.479] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.480] CreateFileW (lpFileName="C:/Users/All Users/Start Menu" (normalized: "c:\\users\\all users\\start menu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.480] FindFirstFileW (in: lpFileName="C:/Users/All Users/Start Menu\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.480] CreateFileW (lpFileName="C:/Users/All Users/Sun" (normalized: "c:\\users\\all users\\sun"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.480] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.482] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.482] CreateFileW (lpFileName="C:/Users/All Users/Templates" (normalized: "c:\\users\\all users\\templates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.482] FindFirstFileW (in: lpFileName="C:/Users/All Users/Templates\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.482] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/00000000.eky" (normalized: "c:\\users\\all users\\00000000.eky"), fInfoLevelId=0x0, lpFileInformation=0x12429b00 | out: lpFileInformation=0x12429b00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbb892f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xcbb892f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcbb8e110, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x883)) returned 1 [0140.482] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/00000000.pky" (normalized: "c:\\users\\all users\\00000000.pky"), fInfoLevelId=0x0, lpFileInformation=0x12429b00 | out: lpFileInformation=0x12429b00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbb7cfa0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xcbb7cfa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xcbb892f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1 [0140.482] CreateFileW (lpFileName="C:/Users/All Users/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.482] FindFirstFileW (in: lpFileName="C:/Users/All Users/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.482] CreateFileW (lpFileName="C:/Users/All Users/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.482] FindFirstFileW (in: lpFileName="C:/Users/All Users/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.482] GetFileAttributesW (lpFileName="C:/Users/All Users/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.483] CreateFileW (lpFileName="C:/Users/All Users/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0140.483] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429c4c | out: lpMode=0x12429c4c) returned 0 [0140.483] CloseHandle (hObject=0xd0) returned 1 [0140.483] CreateFileW (lpFileName="C:/Users/All Users/Adobe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.483] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.483] CreateFileW (lpFileName="C:/Users/All Users/Adobe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0140.483] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0140.484] WriteFile (in: hFile=0xd0, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0140.485] CloseHandle (hObject=0xd0) returned 1 [0140.485] GetFileAttributesW (lpFileName="C:/Users/All Users/Adobe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.485] SetFileAttributesW (lpFileName="C:/Users/All Users/Adobe\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.485] CreateFileW (lpFileName="C:/Users/All Users/Adobe" (normalized: "c:\\users\\all users\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.485] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x51e73c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x51e73c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.485] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x51e73c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x51e73c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.485] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x51e73c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x51e73c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x51e9ad0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.485] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0140.485] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0140.485] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.485] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.485] CreateFileW (lpFileName="C:/Users/All Users/Adobe/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.485] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.486] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM" (normalized: "c:\\users\\all users\\adobe\\arm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.486] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/ARM\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.486] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.486] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat" (normalized: "c:\\users\\all users\\adobe\\acrobat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.486] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.486] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.486] CreateFileW (lpFileName="C:/Users/All Users/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.486] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.486] CreateFileW (lpFileName="C:/Users/All Users/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.486] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.487] GetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.487] CreateFileW (lpFileName="C:/Users/All Users/Adobe/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0140.487] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0140.487] CloseHandle (hObject=0xd0) returned 1 [0140.487] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.487] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/ARM\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.487] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0140.487] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0140.488] WriteFile (in: hFile=0xd0, lpBuffer=0x12490000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12490000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0140.489] CloseHandle (hObject=0xd0) returned 1 [0140.489] GetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/ARM\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.489] SetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/ARM\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.489] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM" (normalized: "c:\\users\\all users\\adobe\\arm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.489] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/ARM\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x51f1000, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x51f1000, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.489] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x51f1000, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x51f1000, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.489] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x51f1000, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x51f1000, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x51f3710, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.489] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1 [0140.489] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.489] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.490] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.490] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/ARM/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.490] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.490] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.491] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.492] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.492] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/ARM/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.492] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.492] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/ARM/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.492] GetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/ARM/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.492] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0140.493] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0140.493] CloseHandle (hObject=0xd0) returned 1 [0140.493] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.493] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.494] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0140.494] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0140.494] WriteFile (in: hFile=0xd0, lpBuffer=0x12492600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12492600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0140.495] CloseHandle (hObject=0xd0) returned 1 [0140.495] GetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\@_read_to_recover_files_@.txt")) returned 0x20 [0140.495] SetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.495] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.496] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x51ffa60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x51ffa60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.496] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x51ffa60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x51ffa60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.496] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x51ffa60, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x51ffa60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5204880, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.496] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1 [0140.496] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1 [0140.496] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1 [0140.496] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.496] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.496] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.496] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.496] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0/AdbeRdrSecUpd10111.msp" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0140.496] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0140.497] ReadFile (in: hFile=0xd0, lpBuffer=0x124d8400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124d8400*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0140.498] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0/AdbeRdrUpd10110_MUI.msp" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0140.498] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0140.498] ReadFile (in: hFile=0xc8, lpBuffer=0x124d8500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124d8500*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0140.508] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0/AdbeRdrUpd10116_MUI.msp" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0140.509] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0140.509] ReadFile (in: hFile=0x118, lpBuffer=0x124d8600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124d8600*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0140.512] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0/AdbeRdrSecUpd10111.msp" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800)) returned 1 [0140.513] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0/AdbeRdrUpd10110_MUI.msp" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000)) returned 1 [0140.513] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0/AdbeRdrUpd10116_MUI.msp" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000)) returned 1 [0140.514] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.514] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.514] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.514] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.514] GetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.514] CreateFileW (lpFileName="C:/Users/All Users/Adobe/ARM/Reader_10.0.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0140.514] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0140.514] CloseHandle (hObject=0x180) returned 1 [0140.514] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.515] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.515] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0140.515] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0140.515] WriteFile (in: hFile=0x180, lpBuffer=0x12494c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12494c00*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0140.516] CloseHandle (hObject=0x180) returned 1 [0140.516] GetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.516] SetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.516] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat" (normalized: "c:\\users\\all users\\adobe\\acrobat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.517] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x521cf20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x521cf20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.517] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x521cf20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x521cf20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.517] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0140.517] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x521cf20, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x521cf20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5221d40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.517] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.517] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.517] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.517] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.517] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.518] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.518] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.518] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.518] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.518] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0140.519] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0140.519] WriteFile (in: hFile=0x180, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0140.520] CloseHandle (hObject=0x180) returned 1 [0140.520] GetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.520] SetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.520] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.520] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x5226b60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5226b60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.520] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x5226b60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5226b60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.520] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5226b60, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5226b60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5229270, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.521] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0140.521] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.521] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.521] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.521] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.521] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.521] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.522] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.522] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.522] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.522] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.522] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.522] GetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.522] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0140.522] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0140.522] CloseHandle (hObject=0x180) returned 1 [0140.523] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.523] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.523] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0140.523] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0140.523] WriteFile (in: hFile=0x180, lpBuffer=0x1258a600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1258a600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0140.524] CloseHandle (hObject=0x180) returned 1 [0140.524] GetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.524] SetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.524] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.525] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x52307a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52307a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.525] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x52307a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52307a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.525] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x52307a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x52307a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52355c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.525] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0140.525] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.525] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.525] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.525] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.525] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.525] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.525] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.525] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.525] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.526] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.526] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.526] GetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.526] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0140.526] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0140.526] CloseHandle (hObject=0x180) returned 1 [0140.526] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.526] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.526] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0140.527] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0140.527] WriteFile (in: hFile=0x180, lpBuffer=0x1258cc00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1258cc00*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0140.528] CloseHandle (hObject=0x180) returned 1 [0140.528] GetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.528] SetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.528] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.528] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x523a3e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x523a3e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.528] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x523a3e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x523a3e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.528] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x523a3e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x523a3e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x523caf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.528] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0140.528] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.529] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.529] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.529] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.529] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security/directories.acrodata" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0140.529] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0140.529] ReadFile (in: hFile=0x180, lpBuffer=0x124d8b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d8b00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0140.530] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security/directories.acrodata" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df)) returned 1 [0140.530] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.530] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.530] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.530] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.531] GetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.531] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/10.0/Replicate/Security/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.531] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0140.531] CloseHandle (hObject=0x154) returned 1 [0140.531] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.531] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.531] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.531] FindFirstFileW (in: lpFileName="C:/Users/All Users/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.531] GetFileAttributesW (lpFileName="C:/Users/All Users/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.531] CreateFileW (lpFileName="C:/Users/All Users/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.531] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0140.532] CloseHandle (hObject=0x154) returned 1 [0140.532] CreateFileW (lpFileName="C:/Users/All Users/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\application data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.532] FindFirstFileW (in: lpFileName="C:/Users/All Users/Application Data\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.532] CreateFileW (lpFileName="C:/Users/All Users/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\application data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.532] FindFirstFileW (in: lpFileName="C:/Users/All Users/Application Data\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.532] GetFileAttributesW (lpFileName="C:/Users/All Users/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\application data\\@_read_to_recover_files_@.txt")) returned 0x2021 [0140.532] SetFileAttributesW (lpFileName="C:/Users/All Users/Application Data\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.532] CreateFileW (lpFileName="C:/Users/All Users/Application Data" (normalized: "c:\\users\\all users\\application data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.532] FindFirstFileW (in: lpFileName="C:/Users/All Users/Application Data\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.533] CreateFileW (lpFileName="C:/Users/All Users/Desktop\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\desktop\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.533] FindFirstFileW (in: lpFileName="C:/Users/All Users/Desktop\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.533] CreateFileW (lpFileName="C:/Users/All Users/Desktop\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\desktop\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.534] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0140.534] WriteFile (in: hFile=0x154, lpBuffer=0x12459900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12459900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0140.535] CloseHandle (hObject=0x154) returned 1 [0140.535] GetFileAttributesW (lpFileName="C:/Users/All Users/Desktop\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\desktop\\@_read_to_recover_files_@.txt")) returned 0x20 [0140.535] SetFileAttributesW (lpFileName="C:/Users/All Users/Desktop\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.535] CreateFileW (lpFileName="C:/Users/All Users/Desktop" (normalized: "c:\\users\\all users\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.535] FindFirstFileW (in: lpFileName="C:/Users/All Users/Desktop\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.535] CreateFileW (lpFileName="C:/Users/All Users/Documents\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\documents\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.536] FindFirstFileW (in: lpFileName="C:/Users/All Users/Documents\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.536] CreateFileW (lpFileName="C:/Users/All Users/Documents\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\documents\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.536] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0140.537] WriteFile (in: hFile=0x154, lpBuffer=0x1245ac00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x1245ac00*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0140.537] CloseHandle (hObject=0x154) returned 1 [0140.537] GetFileAttributesW (lpFileName="C:/Users/All Users/Documents\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\documents\\@_read_to_recover_files_@.txt")) returned 0x20 [0140.538] SetFileAttributesW (lpFileName="C:/Users/All Users/Documents\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.538] CreateFileW (lpFileName="C:/Users/All Users/Documents" (normalized: "c:\\users\\all users\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.538] FindFirstFileW (in: lpFileName="C:/Users/All Users/Documents\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.538] CreateFileW (lpFileName="C:/Users/All Users/Favorites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\favorites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.538] FindFirstFileW (in: lpFileName="C:/Users/All Users/Favorites\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.538] CreateFileW (lpFileName="C:/Users/All Users/Favorites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\favorites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.539] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0140.539] WriteFile (in: hFile=0x154, lpBuffer=0x12566000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12566000*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0140.540] CloseHandle (hObject=0x154) returned 1 [0140.540] GetFileAttributesW (lpFileName="C:/Users/All Users/Favorites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\favorites\\@_read_to_recover_files_@.txt")) returned 0x20 [0140.540] SetFileAttributesW (lpFileName="C:/Users/All Users/Favorites\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.540] CreateFileW (lpFileName="C:/Users/All Users/Favorites" (normalized: "c:\\users\\all users\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.540] FindFirstFileW (in: lpFileName="C:/Users/All Users/Favorites\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.540] CreateFileW (lpFileName="C:/Users/All Users/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.540] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.541] CreateFileW (lpFileName="C:/Users/All Users/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.541] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0140.541] WriteFile (in: hFile=0x154, lpBuffer=0x12567300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12567300*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0140.542] CloseHandle (hObject=0x154) returned 1 [0140.542] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.542] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.542] CreateFileW (lpFileName="C:/Users/All Users/Microsoft" (normalized: "c:\\users\\all users\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.542] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x525c6c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x525c6c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x525c6c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x525c6c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x525c6c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x525c6c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52614e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.543] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.544] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.544] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.544] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance" (normalized: "c:\\users\\all users\\microsoft\\assistance"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.544] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.544] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.544] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto" (normalized: "c:\\users\\all users\\microsoft\\crypto"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.544] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.545] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.545] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM" (normalized: "c:\\users\\all users\\microsoft\\drm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.545] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/DRM\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.546] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.546] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Device Stage" (normalized: "c:\\users\\all users\\microsoft\\device stage"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.546] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Device Stage\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.547] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.547] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DeviceSync" (normalized: "c:\\users\\all users\\microsoft\\devicesync"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.547] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/DeviceSync\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.547] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.547] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Event Viewer" (normalized: "c:\\users\\all users\\microsoft\\event viewer"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.547] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Event Viewer\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.548] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.548] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/IdentityCRL" (normalized: "c:\\users\\all users\\microsoft\\identitycrl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.548] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/IdentityCRL\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.548] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.548] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/MF" (normalized: "c:\\users\\all users\\microsoft\\mf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.548] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/MF\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.548] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.549] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/MSDN" (normalized: "c:\\users\\all users\\microsoft\\msdn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.549] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/MSDN\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.553] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.553] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Media Player" (normalized: "c:\\users\\all users\\microsoft\\media player"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.553] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Media Player\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.553] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.553] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/NetFramework" (normalized: "c:\\users\\all users\\microsoft\\netframework"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.553] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/NetFramework\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.554] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.554] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Network" (normalized: "c:\\users\\all users\\microsoft\\network"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.554] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Network\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.554] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.554] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE" (normalized: "c:\\users\\all users\\microsoft\\office"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.554] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.556] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.557] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.557] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.558] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.558] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC" (normalized: "c:\\users\\all users\\microsoft\\rac"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.558] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.558] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.558] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search" (normalized: "c:\\users\\all users\\microsoft\\search"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.558] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.559] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.559] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures" (normalized: "c:\\users\\all users\\microsoft\\user account pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.559] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.559] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.559] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/VISIO" (normalized: "c:\\users\\all users\\microsoft\\visio"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.559] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/VISIO\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.560] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.560] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Vault" (normalized: "c:\\users\\all users\\microsoft\\vault"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.560] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Vault\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.561] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.561] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows" (normalized: "c:\\users\\all users\\microsoft\\windows"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.561] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.561] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.561] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender" (normalized: "c:\\users\\all users\\microsoft\\windows defender"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.561] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.561] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.561] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT" (normalized: "c:\\users\\all users\\microsoft\\windows nt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.561] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.562] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.562] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc" (normalized: "c:\\users\\all users\\microsoft\\wwansvc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.562] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/WwanSvc\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.562] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.563] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome" (normalized: "c:\\users\\all users\\microsoft\\ehome"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.563] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/eHome\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.563] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.563] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.563] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.563] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.563] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.563] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.563] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.564] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0140.564] CloseHandle (hObject=0x154) returned 1 [0140.564] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.564] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.564] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.564] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0140.565] WriteFile (in: hFile=0x154, lpBuffer=0x12569900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12569900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0140.565] CloseHandle (hObject=0x154) returned 1 [0140.565] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Assistance\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.566] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Assistance\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.566] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance" (normalized: "c:\\users\\all users\\microsoft\\assistance"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.566] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x5297040, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5297040, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.566] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x5297040, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5297040, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.566] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5297040, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5297040, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5299750, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.566] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0140.566] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.566] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.566] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.566] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.566] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.566] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.567] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.567] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.567] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.567] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.567] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.567] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Assistance/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.567] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.567] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0140.568] CloseHandle (hObject=0x154) returned 1 [0140.568] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.568] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.568] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.568] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0140.568] WriteFile (in: hFile=0x154, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0140.569] CloseHandle (hObject=0x154) returned 1 [0140.569] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.569] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.570] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.570] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x52a0c80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52a0c80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.570] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x52a0c80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52a0c80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.570] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0140.570] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x52a0c80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x52a0c80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52a3390, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.570] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.570] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.570] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.570] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.570] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.571] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.571] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.571] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.571] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.571] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.571] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0140.572] WriteFile (in: hFile=0x154, lpBuffer=0x1264f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1264f300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0140.573] CloseHandle (hObject=0x154) returned 1 [0140.573] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.573] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.573] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.573] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x52a81b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52a81b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.573] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x52a81b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52a81b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.573] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x52a81b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x52a81b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52aa8c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.573] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0140.573] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.573] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.573] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.574] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.574] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.576] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.578] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.578] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.579] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.579] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.579] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.579] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.579] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.579] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0140.579] CloseHandle (hObject=0x154) returned 1 [0140.579] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.580] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.580] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.581] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0140.581] WriteFile (in: hFile=0x154, lpBuffer=0x12651900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12651900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0140.582] CloseHandle (hObject=0x154) returned 1 [0140.582] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.582] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.583] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.583] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x52bba30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52bba30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.583] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x52bba30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52bba30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x52bba30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x52bba30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52c0850, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0140.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0140.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0140.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0140.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0140.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0140.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0140.584] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.584] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.584] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.584] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.584] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/Help_CValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.585] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0140.585] ReadFile (in: hFile=0x154, lpBuffer=0x124d9300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9300*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0140.587] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/Help_MKWD_AssetId.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0140.587] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0140.587] ReadFile (in: hFile=0x104, lpBuffer=0x124d9400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9400*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0140.589] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/Help_MKWD_BestBet.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0140.590] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0140.591] ReadFile (in: hFile=0xf0, lpBuffer=0x124d9500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9500*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0140.592] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/Help_MTOC_help.H1H" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0140.592] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0140.593] ReadFile (in: hFile=0x108, lpBuffer=0x124d9600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0140.595] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/Help_MValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0140.595] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0140.595] ReadFile (in: hFile=0xdc, lpBuffer=0x124d9700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0140.597] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/Help_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0140.597] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0140.598] ReadFile (in: hFile=0x17c, lpBuffer=0x124d9800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9800*, lpNumberOfBytesRead=0x124299e0*=0x4, lpOverlapped=0x0) returned 1 [0140.598] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0140.599] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0140.599] ReadFile (in: hFile=0x138, lpBuffer=0x124d9900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9900*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0140.603] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/Help_CValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22)) returned 1 [0140.603] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/Help_MKWD_AssetId.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc)) returned 1 [0140.603] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/Help_MKWD_BestBet.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec)) returned 1 [0140.603] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/Help_MTOC_help.H1H" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a)) returned 1 [0140.604] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/Help_MValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944)) returned 1 [0140.604] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/Help_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4)) returned 1 [0140.604] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310)) returned 1 [0140.604] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.604] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.604] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.604] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.604] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.604] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/1.0/en-US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.604] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0140.605] CloseHandle (hObject=0x110) returned 1 [0140.605] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.605] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.605] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.605] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.605] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.605] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Assistance/Client/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.605] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0140.605] CloseHandle (hObject=0x110) returned 1 [0140.605] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.605] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.605] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.606] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0140.606] WriteFile (in: hFile=0x110, lpBuffer=0x127b1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x127b1300*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0140.607] CloseHandle (hObject=0x110) returned 1 [0140.607] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.607] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.607] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto" (normalized: "c:\\users\\all users\\microsoft\\crypto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.607] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52f8ac0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52f8ac0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.608] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52f8ac0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52f8ac0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.608] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x52f8ac0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x52f8ac0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52fd8e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.608] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0140.608] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0140.608] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0140.608] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.608] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.608] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.608] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.608] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.608] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.608] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.608] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.608] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.609] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.609] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.609] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.609] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.609] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.609] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.609] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.609] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.609] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.610] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.610] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0140.610] CloseHandle (hObject=0x110) returned 1 [0140.610] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.610] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.610] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.610] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0140.611] WriteFile (in: hFile=0x110, lpBuffer=0x127b3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x127b3900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0140.614] CloseHandle (hObject=0x110) returned 1 [0140.614] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.614] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.615] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.615] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5304e10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5304e10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.615] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5304e10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5304e10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.615] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5304e10, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5304e10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x530ea50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.615] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0140.615] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.615] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.615] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.615] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.615] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.615] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.616] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.616] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.616] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.616] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.616] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.616] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.616] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.616] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0140.616] CloseHandle (hObject=0x110) returned 1 [0140.617] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.617] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.617] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.617] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0140.617] WriteFile (in: hFile=0x110, lpBuffer=0x127bc000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x127bc000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0140.618] CloseHandle (hObject=0x110) returned 1 [0140.618] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\@_read_to_recover_files_@.txt")) returned 0x20 [0140.618] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.619] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.619] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5315f80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5315f80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.619] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5315f80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5315f80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.619] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x5315f80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5315f80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5318690, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.619] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.619] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.619] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.619] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.619] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.619] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.619] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.619] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.620] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.620] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/DSS/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.620] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0140.620] CloseHandle (hObject=0x110) returned 1 [0140.620] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.620] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.620] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.621] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0140.621] WriteFile (in: hFile=0x110, lpBuffer=0x127be600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x127be600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0140.622] CloseHandle (hObject=0x110) returned 1 [0140.622] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\@_read_to_recover_files_@.txt")) returned 0x20 [0140.622] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.622] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.622] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x531d4b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x531d4b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.622] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x531d4b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x531d4b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.622] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x531d4b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x531d4b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x531fbc0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.622] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.622] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.622] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.623] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.623] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.623] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.623] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.623] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.623] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.623] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/Keys/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.623] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0140.623] CloseHandle (hObject=0x110) returned 1 [0140.623] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.624] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.624] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.624] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0140.624] WriteFile (in: hFile=0x110, lpBuffer=0x127c0c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x127c0c00*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0140.625] CloseHandle (hObject=0x110) returned 1 [0140.625] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.625] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.625] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.626] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x53249e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53249e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.626] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x53249e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53249e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.626] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x53249e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x53249e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5329800, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.626] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0140.626] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0140.626] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.626] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.626] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.626] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.626] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.626] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.626] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.627] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.627] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.628] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.628] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.628] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.628] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.628] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.629] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.629] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.629] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0140.629] CloseHandle (hObject=0x110) returned 1 [0140.629] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.629] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.629] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.630] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0140.630] WriteFile (in: hFile=0x110, lpBuffer=0x127db300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x127db300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0140.631] CloseHandle (hObject=0x110) returned 1 [0140.631] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\@_read_to_recover_files_@.txt")) returned 0x20 [0140.631] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.631] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.631] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5333440, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5333440, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.631] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5333440, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5333440, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.631] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x5333440, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5333440, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5335b50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.631] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.631] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.632] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.632] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.632] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.632] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.632] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.632] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.632] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.632] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/MachineKeys/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.632] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0140.632] CloseHandle (hObject=0x110) returned 1 [0140.633] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.633] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.633] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.635] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0140.635] WriteFile (in: hFile=0x110, lpBuffer=0x127dd900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x127dd900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0140.636] CloseHandle (hObject=0x110) returned 1 [0140.636] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.636] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.636] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.636] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x533f790, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x533f790, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.636] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x533f790, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x533f790, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.637] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1 [0140.637] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x533a970, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x533a970, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53445b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.637] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 1 [0140.637] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.637] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.637] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18/6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.637] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0140.637] ReadFile (in: hFile=0x110, lpBuffer=0x124d9a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124d9a00*, lpNumberOfBytesRead=0x12429a88*=0x2f, lpOverlapped=0x0) returned 1 [0140.638] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.638] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.639] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18/d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0140.639] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0140.648] ReadFile (in: hFile=0x190, lpBuffer=0x124d9b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124d9b00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0140.650] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18/6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f)) returned 1 [0140.650] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18/d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d)) returned 1 [0140.650] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.650] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.650] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.650] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.651] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.651] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Crypto/RSA/S-1-5-18/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0140.651] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0140.651] CloseHandle (hObject=0xe4) returned 1 [0140.651] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.651] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/DRM\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.651] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0140.651] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0140.652] WriteFile (in: hFile=0xe4, lpBuffer=0x124a8000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124a8000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0140.653] CloseHandle (hObject=0xe4) returned 1 [0140.653] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/DRM\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.653] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/DRM\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.653] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM" (normalized: "c:\\users\\all users\\microsoft\\drm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.653] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/DRM\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5366890, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5366890, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5366890, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5366890, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5366890, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5366890, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5368fa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0140.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.653] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.653] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.653] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/DRM/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.654] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM/Server" (normalized: "c:\\users\\all users\\microsoft\\drm\\server"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.654] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/DRM/Server\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.654] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.654] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.654] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/DRM/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.654] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.654] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/DRM/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.654] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/DRM/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.654] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0140.654] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0140.655] CloseHandle (hObject=0xe4) returned 1 [0140.655] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM/Server\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.655] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/DRM/Server\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.655] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM/Server\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0140.655] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0140.656] WriteFile (in: hFile=0xe4, lpBuffer=0x124aa600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124aa600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0140.657] CloseHandle (hObject=0xe4) returned 1 [0140.657] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/DRM/Server\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\@_read_to_recover_files_@.txt")) returned 0x20 [0140.657] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/DRM/Server\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.657] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM/Server" (normalized: "c:\\users\\all users\\microsoft\\drm\\server"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.657] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/DRM/Server\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x53704d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53704d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.657] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x53704d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53704d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.657] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x53704d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x53704d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5372be0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.657] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.657] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.657] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM/Server/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.657] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/DRM/Server/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.657] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM/Server/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.658] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/DRM/Server/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.658] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM/Server/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.658] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/DRM/Server/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.658] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/DRM/Server/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.658] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/DRM/Server/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0140.658] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0140.658] CloseHandle (hObject=0xe4) returned 1 [0140.658] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Device Stage\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.658] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Device Stage\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.658] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Device Stage\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0140.659] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0140.659] WriteFile (in: hFile=0xe4, lpBuffer=0x124acc00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124acc00*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0140.660] CloseHandle (hObject=0xe4) returned 1 [0140.660] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Device Stage\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\@_read_to_recover_files_@.txt")) returned 0x2020 [0140.660] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Device Stage\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.661] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5377a00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5377a00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.661] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5377a00, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5377a00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x537c820, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.661] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0140.661] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0140.661] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.661] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.666] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Device Stage/Device\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.666] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5386460, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5386460, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.666] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5381640, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5381640, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5388b70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.666] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0140.666] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0140.666] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.666] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.671] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Device Stage/Device/{113527a4-45d4-4b6f-b567-97838f1b04b0}\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x53927b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53927b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x53927b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x53927b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5394ec0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0140.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0140.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0140.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0140.671] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0140.672] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.672] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.678] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Device Stage/Device/{8702d817-5aad-4674-9ef3-4d3decd87120}\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.678] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x53a3920, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53a3920, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.678] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x53a1210, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x53a1210, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53a6030, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.678] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0140.678] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0140.678] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0140.678] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.678] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.682] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Device Stage/Task\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.683] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x53afc70, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53afc70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.683] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x53aae50, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x53aae50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53b2380, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.683] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0140.683] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0140.683] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.683] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.690] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Device Stage/Task/{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x53c0de0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53c0de0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x53c0de0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x53c0de0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53c5c00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.691] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.695] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Device Stage/Task/{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}/en-US\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.695] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x53cf840, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53cf840, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.696] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x53cf840, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x53cf840, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53d1f50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.696] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0140.696] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.696] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.702] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Device Stage/Task/{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.702] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x53de2a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53de2a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.702] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x53de2a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x53de2a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53e09b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.702] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0140.702] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0140.702] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0140.702] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0140.702] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0140.702] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0140.702] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0140.702] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0140.702] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0140.702] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.702] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.713] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Device Stage/Task/{e35be42d-f742-4d96-a50a-1775fb1a7a42}/en-US\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.713] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x53f6940, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53f6940, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.713] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x53f6940, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x53f6940, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53fb760, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.713] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0140.713] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.713] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.718] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/DeviceSync\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.718] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5402c90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5402c90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.718] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x5402c90, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5402c90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x54053a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.718] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.718] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.720] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Event Viewer\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.720] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x540a1c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x540a1c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.720] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x540a1c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x540a1c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x540c8d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.720] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0140.721] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.721] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.723] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Event Viewer/Views\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x540efe0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x540efe0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x540efe0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x540efe0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x54116f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0140.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.723] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.725] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Event Viewer/Views/ApplicationViewsRootNode\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.725] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x5413e00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5413e00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.725] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5413e00, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5413e00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5418c20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.725] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.725] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.729] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/IdentityCRL\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.729] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x541da40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x541da40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.729] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x541b330, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x541b330, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5420150, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.729] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0140.729] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0140.729] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.729] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.738] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/MF\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.738] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x54339d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x54339d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.738] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x54339d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x54339d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x54360e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.738] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0140.738] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0140.738] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.738] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.743] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/MSDN\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5442430, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5442430, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0140.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5442430, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5442430, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5444b40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.744] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.746] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/MSDN/8.0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.746] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5447250, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5447250, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.746] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5447250, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5447250, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5449960, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.746] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.746] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.748] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Media Player\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.748] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x544e780, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x544e780, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.749] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x544e780, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x544e780, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5450e90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.749] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.749] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.750] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/NetFramework\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.751] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x54535a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x54535a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.751] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x54535a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x54535a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5455cb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.751] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0140.751] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.751] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.754] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/NetFramework/BreadcrumbStore\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.754] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x545aad0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x545aad0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.754] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x545aad0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x545aad0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x545f8f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.754] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.754] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.756] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Network\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0140.756] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5462000, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5462000, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.757] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5462000, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5462000, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5464710, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.757] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0140.757] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0140.757] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.757] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.759] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Network/Connections\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.759] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5466e20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5466e20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.759] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x5466e20, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5466e20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5469530, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.759] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.759] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.761] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Network/Downloader\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.762] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x546bc40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x546bc40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.762] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x546bc40, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x546bc40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5470a60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.762] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0140.762] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0140.762] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.762] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.768] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249fb20 | out: pbBuffer=0x1249fb20) returned 1 [0140.769] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1252e302 | out: pbBuffer=0x1252e302) returned 1 [0140.769] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1252e31f | out: pbBuffer=0x1252e31f) returned 1 [0140.771] SetEvent (hEvent=0xa8) returned 1 [0140.771] ReadFile (in: hFile=0x124, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x400000, lpOverlapped=0x0) returned 1 [0140.855] CloseHandle (hObject=0x16c) returned 1 [0140.855] CloseHandle (hObject=0x10c) returned 1 [0140.855] CloseHandle (hObject=0x118) returned 1 [0140.855] CloseHandle (hObject=0xc8) returned 1 [0140.855] CloseHandle (hObject=0xd0) returned 1 [0140.855] CloseHandle (hObject=0x180) returned 1 [0140.855] CloseHandle (hObject=0x138) returned 1 [0140.855] CloseHandle (hObject=0x17c) returned 1 [0140.856] CloseHandle (hObject=0xdc) returned 1 [0140.856] CloseHandle (hObject=0x108) returned 1 [0140.856] CloseHandle (hObject=0xf0) returned 1 [0140.856] CloseHandle (hObject=0x104) returned 1 [0140.856] CloseHandle (hObject=0x154) returned 1 [0140.856] CloseHandle (hObject=0x190) returned 1 [0140.856] CloseHandle (hObject=0x110) returned 1 [0140.856] CloseHandle (hObject=0xc0) returned 1 [0140.856] CloseHandle (hObject=0x18c) returned 1 [0140.856] CloseHandle (hObject=0x19c) returned 1 [0140.856] CloseHandle (hObject=0xe4) returned 1 [0140.856] CloseHandle (hObject=0x148) returned 1 [0140.856] CloseHandle (hObject=0x168) returned 1 [0140.856] SwitchToThread () returned 1 [0140.857] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.931] SetEvent (hEvent=0xb8) returned 1 [0140.931] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.934] SetEvent (hEvent=0xb8) returned 1 [0140.934] SwitchToThread () returned 1 [0140.934] SetEvent (hEvent=0xb8) returned 1 [0140.935] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0140.972] SetEvent (hEvent=0xa8) returned 1 [0140.973] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0141.027] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0141.027] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0141.030] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0141.030] SetEvent (hEvent=0xa0) returned 1 [0141.030] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0141.033] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0141.033] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0141.038] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0141.038] SetEvent (hEvent=0xac) returned 1 [0141.038] SetEvent (hEvent=0xa0) returned 1 [0141.061] GetFileType (hFile=0x124) returned 0x1 [0141.061] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0141.061] WriteFile (in: hFile=0x124, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x400000, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x124299f8*=0x400000, lpOverlapped=0x12429a04) returned 1 [0141.101] GetFileType (hFile=0x124) returned 0x1 [0141.101] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x400000, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0141.101] ReadFile (in: hFile=0x124, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0141.101] CloseHandle (hObject=0x124) returned 1 [0141.102] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Network/Downloader/qmgr1.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0141.102] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0141.103] WriteFile (in: hFile=0x124, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0141.111] CloseHandle (hObject=0x124) returned 1 [0141.111] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x124296cc*=0x57) returned 1 [0141.112] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Network/Downloader/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.112] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Network/Downloader/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.112] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Network/Downloader/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.112] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Network/Downloader/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.112] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Network/Downloader/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.113] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Network/Downloader/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0141.113] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.156] CloseHandle (hObject=0x124) returned 1 [0141.156] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.156] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.157] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0141.157] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0141.158] WriteFile (in: hFile=0x124, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0141.159] CloseHandle (hObject=0x124) returned 1 [0141.159] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OFFICE\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.159] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OFFICE\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.160] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE" (normalized: "c:\\users\\all users\\microsoft\\office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.160] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x582bba0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x582bba0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.160] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x582bba0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x582bba0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.160] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x582bba0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x582bba0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x58330d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.160] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0141.160] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0141.160] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0141.160] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0141.160] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0141.160] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0141.160] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0141.160] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.160] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.160] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.160] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.160] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/AssetLibrary.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0141.163] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0141.163] ReadFile (in: hFile=0x124, lpBuffer=0x124b8000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0141.173] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/DocumentRepository.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0141.174] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0141.174] ReadFile (in: hFile=0x168, lpBuffer=0x124b8100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0141.176] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/MySharePoints.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0141.177] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0141.178] ReadFile (in: hFile=0x148, lpBuffer=0x124b8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0141.180] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/MySite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0141.181] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0141.181] ReadFile (in: hFile=0xe4, lpBuffer=0x124b8300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0141.183] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/SharePointPortalSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0141.188] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0141.188] ReadFile (in: hFile=0x19c, lpBuffer=0x124b8500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0141.190] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/SharePointTeamSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0141.191] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0141.191] ReadFile (in: hFile=0x18c, lpBuffer=0x124b8600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0141.193] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.193] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.194] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.194] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/AssetLibrary.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536)) returned 1 [0141.195] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/DocumentRepository.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e)) returned 1 [0141.195] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/MySharePoints.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e)) returned 1 [0141.195] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/MySite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e)) returned 1 [0141.195] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/SharePointPortalSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e)) returned 1 [0141.195] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/SharePointTeamSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e)) returned 1 [0141.195] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.195] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.195] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.195] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.196] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.196] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0141.196] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0141.196] CloseHandle (hObject=0xc0) returned 1 [0141.196] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.196] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.196] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0141.197] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0141.197] WriteFile (in: hFile=0xc0, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0141.198] CloseHandle (hObject=0xc0) returned 1 [0141.198] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.198] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.198] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.198] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x588af10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x588af10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x588af10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x588af10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0141.199] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0141.199] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x588af10, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x588af10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x588d620, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.199] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.199] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.199] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.199] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.200] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.201] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.201] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.204] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.204] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.204] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.205] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.205] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.205] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0141.206] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0141.206] WriteFile (in: hFile=0xc0, lpBuffer=0x124d3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d3900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0141.207] CloseHandle (hObject=0xc0) returned 1 [0141.207] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.208] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.208] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.208] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x58a0ea0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x58a0ea0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.208] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x58a0ea0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x58a0ea0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.209] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x58a0ea0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x58a0ea0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x58a5cc0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.209] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0141.209] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0141.209] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0141.209] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0141.209] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0141.209] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0141.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.210] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.210] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.211] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.211] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0141.211] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.211] ReadFile (in: hFile=0xc0, lpBuffer=0x124b8800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b8800*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.213] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0141.214] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.214] ReadFile (in: hFile=0x110, lpBuffer=0x124b8900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b8900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.216] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0141.217] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.218] ReadFile (in: hFile=0x190, lpBuffer=0x124b8a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b8a00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.220] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0141.221] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.221] ReadFile (in: hFile=0x154, lpBuffer=0x124b8b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b8b00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.224] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0141.227] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.228] ReadFile (in: hFile=0x104, lpBuffer=0x124b8c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b8c00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.230] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0141.230] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.231] ReadFile (in: hFile=0xf0, lpBuffer=0x124b8d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b8d00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.233] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0141.234] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.234] ReadFile (in: hFile=0x108, lpBuffer=0x124b8e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b8e00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.237] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0141.238] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.238] ReadFile (in: hFile=0xdc, lpBuffer=0x124b8f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b8f00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.240] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0141.241] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.241] ReadFile (in: hFile=0x17c, lpBuffer=0x124b9000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9000*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.243] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0141.244] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.244] ReadFile (in: hFile=0x138, lpBuffer=0x124b9100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9100*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.246] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0141.248] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.248] ReadFile (in: hFile=0x180, lpBuffer=0x124b9200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9200*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.251] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0141.252] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.252] ReadFile (in: hFile=0xd0, lpBuffer=0x124b9300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9300*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.254] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0141.255] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.255] ReadFile (in: hFile=0xc8, lpBuffer=0x124b9400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9400*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.257] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0141.258] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.259] ReadFile (in: hFile=0x118, lpBuffer=0x124b9500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9500*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.261] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0141.262] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.262] ReadFile (in: hFile=0x10c, lpBuffer=0x124b9600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9600*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.264] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0141.265] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.266] ReadFile (in: hFile=0x16c, lpBuffer=0x124b9700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9700*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.268] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0141.269] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.269] ReadFile (in: hFile=0x178, lpBuffer=0x124b9800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9800*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.271] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0141.273] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.273] ReadFile (in: hFile=0x12c, lpBuffer=0x124b9900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.275] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0141.276] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.276] ReadFile (in: hFile=0x198, lpBuffer=0x124b9a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9a00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.278] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0141.279] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.279] ReadFile (in: hFile=0x15c, lpBuffer=0x124b9b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9b00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.281] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0141.282] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.282] ReadFile (in: hFile=0x144, lpBuffer=0x124b9c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9c00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.284] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0141.285] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.285] ReadFile (in: hFile=0xfc, lpBuffer=0x124b9d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9d00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.287] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0141.287] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.287] ReadFile (in: hFile=0x120, lpBuffer=0x124b9e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9e00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.292] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0141.292] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.292] ReadFile (in: hFile=0x27c, lpBuffer=0x124b9f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b9f00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.295] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0141.296] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.296] ReadFile (in: hFile=0x128, lpBuffer=0x12578000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578000*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.298] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0141.299] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.299] ReadFile (in: hFile=0xbc, lpBuffer=0x12578100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578100*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.302] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.303] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.303] ReadFile (in: hFile=0xe8, lpBuffer=0x12578200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578200*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.304] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1 [0141.305] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60)) returned 1 [0141.305] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960)) returned 1 [0141.305] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60)) returned 1 [0141.305] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160)) returned 1 [0141.305] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960)) returned 1 [0141.305] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60)) returned 1 [0141.305] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360)) returned 1 [0141.306] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60)) returned 1 [0141.306] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60)) returned 1 [0141.306] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560)) returned 1 [0141.306] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560)) returned 1 [0141.306] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60)) returned 1 [0141.306] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60)) returned 1 [0141.306] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60)) returned 1 [0141.306] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360)) returned 1 [0141.306] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160)) returned 1 [0141.306] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60)) returned 1 [0141.307] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360)) returned 1 [0141.307] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160)) returned 1 [0141.307] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960)) returned 1 [0141.307] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560)) returned 1 [0141.307] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60)) returned 1 [0141.307] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60)) returned 1 [0141.307] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360)) returned 1 [0141.307] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960)) returned 1 [0141.307] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60)) returned 1 [0141.307] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.307] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.308] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.308] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.308] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.308] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/1036/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0141.308] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0141.308] CloseHandle (hObject=0x114) returned 1 [0141.308] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.309] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.309] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0141.310] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0141.310] WriteFile (in: hFile=0x114, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0141.311] CloseHandle (hObject=0x114) returned 1 [0141.311] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.312] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.312] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.312] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5999f00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5999f00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.312] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5999f00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5999f00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5999f00, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5999f00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x599ed20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0141.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0141.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0141.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0141.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0141.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0141.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.314] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.314] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.314] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.315] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0141.315] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.315] ReadFile (in: hFile=0x114, lpBuffer=0x12578300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578300*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.317] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0141.318] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.318] ReadFile (in: hFile=0x160, lpBuffer=0x12578400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578400*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.320] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.320] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.320] ReadFile (in: hFile=0x164, lpBuffer=0x12578500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578500*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.323] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0141.323] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.323] ReadFile (in: hFile=0x158, lpBuffer=0x12578600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578600*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.326] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0141.327] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.327] ReadFile (in: hFile=0xf8, lpBuffer=0x12578700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578700*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.329] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0141.330] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.330] ReadFile (in: hFile=0x130, lpBuffer=0x12578800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578800*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.332] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0141.332] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.333] ReadFile (in: hFile=0x134, lpBuffer=0x12578900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.335] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0141.335] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.336] ReadFile (in: hFile=0x188, lpBuffer=0x12578a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578a00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.338] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0141.338] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.339] ReadFile (in: hFile=0x150, lpBuffer=0x12578b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578b00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.341] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0141.341] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.341] ReadFile (in: hFile=0x98, lpBuffer=0x12578c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578c00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.344] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0141.344] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.344] ReadFile (in: hFile=0x100, lpBuffer=0x12578d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578d00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.347] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0141.347] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.347] ReadFile (in: hFile=0x13c, lpBuffer=0x12578e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578e00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.350] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0141.350] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.350] ReadFile (in: hFile=0x11c, lpBuffer=0x12578f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12578f00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.352] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0141.353] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.353] ReadFile (in: hFile=0x170, lpBuffer=0x12579000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12579000*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.358] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0141.358] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.358] ReadFile (in: hFile=0x174, lpBuffer=0x12579100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12579100*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.360] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0141.361] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.361] ReadFile (in: hFile=0xf4, lpBuffer=0x12579200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12579200*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.364] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0141.364] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.365] ReadFile (in: hFile=0x14c, lpBuffer=0x12579300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12579300*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.367] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0141.367] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.367] ReadFile (in: hFile=0x140, lpBuffer=0x12579400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12579400*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.370] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0141.370] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.371] ReadFile (in: hFile=0xd8, lpBuffer=0x12579500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12579500*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.372] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0141.373] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.373] ReadFile (in: hFile=0xcc, lpBuffer=0x12579600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12579600*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.375] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0141.375] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.376] ReadFile (in: hFile=0xe0, lpBuffer=0x12579700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12579700*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.377] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0141.377] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.378] ReadFile (in: hFile=0xec, lpBuffer=0x12579800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12579800*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.380] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0141.380] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.381] ReadFile (in: hFile=0x184, lpBuffer=0x12579900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12579900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.384] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x194 [0141.385] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.385] ReadFile (in: hFile=0x194, lpBuffer=0x12579a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12579a00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.387] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a0 [0141.388] GetConsoleMode (in: hConsoleHandle=0x1a0, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.388] ReadFile (in: hFile=0x1a0, lpBuffer=0x12579b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12579b00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.390] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0141.391] GetConsoleMode (in: hConsoleHandle=0x1a4, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.391] ReadFile (in: hFile=0x1a4, lpBuffer=0x12579c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12579c00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.394] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a8 [0141.394] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0141.394] ReadFile (in: hFile=0x1a8, lpBuffer=0x12579d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12579d00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0141.396] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760)) returned 1 [0141.397] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960)) returned 1 [0141.397] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960)) returned 1 [0141.397] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60)) returned 1 [0141.397] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160)) returned 1 [0141.397] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60)) returned 1 [0141.397] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560)) returned 1 [0141.397] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360)) returned 1 [0141.398] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60)) returned 1 [0141.398] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960)) returned 1 [0141.398] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960)) returned 1 [0141.398] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560)) returned 1 [0141.398] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1 [0141.398] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160)) returned 1 [0141.398] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560)) returned 1 [0141.398] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560)) returned 1 [0141.398] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60)) returned 1 [0141.399] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60)) returned 1 [0141.399] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360)) returned 1 [0141.399] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360)) returned 1 [0141.399] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960)) returned 1 [0141.399] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960)) returned 1 [0141.399] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360)) returned 1 [0141.399] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60)) returned 1 [0141.399] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960)) returned 1 [0141.399] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760)) returned 1 [0141.399] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1 [0141.399] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.400] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.400] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.400] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.400] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.400] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/3082/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0141.400] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0141.400] CloseHandle (hObject=0x1ac) returned 1 [0141.400] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.400] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.400] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.401] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.401] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.401] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OFFICE/UICaptions/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0141.401] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.401] CloseHandle (hObject=0x1ac) returned 1 [0141.401] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.401] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.401] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0141.402] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0141.402] WriteFile (in: hFile=0x1ac, lpBuffer=0x1255b300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x1255b300*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0141.403] CloseHandle (hObject=0x1ac) returned 1 [0141.403] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.403] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.403] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.404] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a781b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5a781b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.404] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a781b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5a781b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.404] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5a781b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5a781b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5a7a8c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.404] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0141.404] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0141.404] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.404] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.404] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.404] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.404] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.404] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.405] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.405] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0141.405] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0141.406] ReadFile (in: hFile=0x1ac, lpBuffer=0x12776000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12776000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0141.408] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5)) returned 1 [0141.409] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0141.409] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0141.409] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249ee00 | out: pbBuffer=0x1249ee00) returned 1 [0141.410] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12776102 | out: pbBuffer=0x12776102) returned 1 [0141.410] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12776112 | out: pbBuffer=0x12776112) returned 1 [0141.411] SetEvent (hEvent=0xb8) returned 1 [0141.411] ReadFile (in: hFile=0x1b0, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x469bd5, lpOverlapped=0x0) returned 1 [0141.508] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0141.513] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0141.608] SetEvent (hEvent=0xa0) returned 1 [0141.608] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0141.609] SetEvent (hEvent=0xa0) returned 1 [0141.609] SwitchToThread () returned 1 [0141.610] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0141.621] SetEvent (hEvent=0xa0) returned 1 [0141.621] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0141.622] SetEvent (hEvent=0xa0) returned 1 [0141.622] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0141.623] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0141.623] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0141.650] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0141.916] SetEvent (hEvent=0xa8) returned 1 [0141.916] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0141.917] SetEvent (hEvent=0xa8) returned 1 [0141.917] SetEvent (hEvent=0xa0) returned 1 [0141.917] CloseHandle (hObject=0xbc) returned 1 [0141.917] CloseHandle (hObject=0x1b0) returned 1 [0141.917] CloseHandle (hObject=0x160) returned 1 [0141.917] CloseHandle (hObject=0x114) returned 1 [0141.917] CloseHandle (hObject=0xe8) returned 1 [0141.917] CloseHandle (hObject=0x158) returned 1 [0141.917] CloseHandle (hObject=0x164) returned 1 [0141.917] CloseHandle (hObject=0xf8) returned 1 [0141.917] SwitchToThread () returned 1 [0141.918] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0141.940] SetEvent (hEvent=0xa0) returned 1 [0141.940] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0141.942] SetEvent (hEvent=0xa0) returned 1 [0141.942] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0141.943] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0141.943] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0142.422] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0142.529] SetEvent (hEvent=0xa8) returned 1 [0142.529] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0142.537] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0142.547] SetEvent (hEvent=0xb8) returned 1 [0142.547] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0142.549] SetEvent (hEvent=0xb8) returned 1 [0142.549] SwitchToThread () returned 1 [0142.550] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0142.651] SetEvent (hEvent=0xb8) returned 1 [0142.652] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0142.731] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0142.731] SetEvent (hEvent=0xb8) returned 1 [0142.731] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0142.732] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0142.732] SetEvent (hEvent=0xb8) returned 1 [0142.733] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0142.733] SetEvent (hEvent=0xb8) returned 1 [0142.733] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0142.734] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0142.734] SetEvent (hEvent=0xb8) returned 1 [0142.767] GetFileType (hFile=0x164) returned 0x1 [0142.767] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0142.767] WriteFile (in: hFile=0x164, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x588124, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429950*=0x588124, lpOverlapped=0x1242995c) returned 1 [0142.835] GetFileType (hFile=0x164) returned 0x1 [0142.835] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x588124, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0142.835] ReadFile (in: hFile=0x164, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0142.835] CloseHandle (hObject=0x164) returned 1 [0142.835] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0142.835] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0142.836] WriteFile (in: hFile=0x164, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0142.836] CloseHandle (hObject=0x164) returned 1 [0142.836] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x9c, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x12429624*=0x9c) returned 1 [0142.837] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64/vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0142.837] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.837] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.837] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.837] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.837] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.837] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0142.838] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0142.838] CloseHandle (hObject=0x164) returned 1 [0142.838] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.838] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.838] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0142.895] SetEvent (hEvent=0xac) returned 1 [0142.895] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0142.896] WriteFile (in: hFile=0x164, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0142.897] CloseHandle (hObject=0x164) returned 1 [0142.897] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.897] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.897] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.897] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x681c4b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x681c4b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x681c4b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x681c4b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x67b0620, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x67b0620, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x681c4b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0142.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0142.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.897] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.897] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.898] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.898] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}/state.rsm" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0142.898] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0142.899] ReadFile (in: hFile=0x164, lpBuffer=0x1256e100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1256e100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0142.899] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}/vcredist_x64.exe" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0142.900] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0142.900] ReadFile (in: hFile=0x158, lpBuffer=0x1256e200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1256e200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0142.902] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}/state.rsm" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a)) returned 1 [0142.902] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}/vcredist_x64.exe" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8)) returned 1 [0142.903] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.903] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.903] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.903] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.904] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.904] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.904] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0142.904] CloseHandle (hObject=0x178) returned 1 [0142.904] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.904] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.904] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.904] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0142.905] WriteFile (in: hFile=0x178, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0142.906] CloseHandle (hObject=0x178) returned 1 [0142.906] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.906] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.907] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.907] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x6842610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6842610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.907] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x6842610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6842610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.907] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6842610, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6842610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6842610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.907] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0142.907] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.907] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.907] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.908] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.908] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.908] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.909] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.909] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.909] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.909] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.909] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.909] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.909] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.909] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0142.909] CloseHandle (hObject=0x178) returned 1 [0142.910] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.910] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.910] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.910] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0142.910] WriteFile (in: hFile=0x178, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0142.912] CloseHandle (hObject=0x178) returned 1 [0142.912] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.912] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.912] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.913] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x6842610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6842610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.913] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x6842610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6842610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.913] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6842610, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6842610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6842610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.913] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0142.913] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.913] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.913] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.913] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.913] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.913] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.913] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.913] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.914] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.914] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.929] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.930] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.930] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.930] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0142.932] CloseHandle (hObject=0x178) returned 1 [0142.932] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.932] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.932] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.934] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0142.934] WriteFile (in: hFile=0x178, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0142.935] CloseHandle (hObject=0x178) returned 1 [0142.935] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.936] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.936] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.936] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x6894690, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6894690, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.936] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x6894690, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6894690, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.936] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6891f80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6891f80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x68994b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.936] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd15e8b00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd15e8b00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd15e8b00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0142.936] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0142.936] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.936] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.936] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.936] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.936] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.938] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0142.938] ReadFile (in: hFile=0x178, lpBuffer=0x1256eb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1256eb00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0142.940] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86/vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.941] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0142.941] ReadFile (in: hFile=0xe8, lpBuffer=0x1256ec00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1256ec00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0142.944] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd15e8b00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd15e8b00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd15e8b00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x13babb)) returned 1 [0142.944] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0142.944] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0142.944] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e5e0 | out: pbBuffer=0x1249e5e0) returned 1 [0142.946] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1256f002 | out: pbBuffer=0x1256f002) returned 1 [0142.947] SetEvent (hEvent=0xa0) returned 1 [0142.947] ReadFile (in: hFile=0xf8, lpBuffer=0x13594000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x13594000*, lpNumberOfBytesRead=0x1242996c*=0x13babb, lpOverlapped=0x0) returned 1 [0142.979] GetFileType (hFile=0xf8) returned 0x1 [0142.979] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0142.979] WriteFile (in: hFile=0xf8, lpBuffer=0x13d94000*, nNumberOfBytesToWrite=0x13babb, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x13d94000*, lpNumberOfBytesWritten=0x12429950*=0x13babb, lpOverlapped=0x1242995c) returned 1 [0142.986] GetFileType (hFile=0xf8) returned 0x1 [0142.986] SetFilePointerEx (in: hFile=0xf8, liDistanceToMove=0x13babb, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0142.986] ReadFile (in: hFile=0xf8, lpBuffer=0x13594000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x13594000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0142.986] CloseHandle (hObject=0xf8) returned 1 [0142.986] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0142.986] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0142.987] WriteFile (in: hFile=0xf8, lpBuffer=0x12576d80*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x12576d80*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0142.987] CloseHandle (hObject=0xf8) returned 1 [0142.987] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c000*, nNumberOfCharsToWrite=0x98, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfCharsWritten=0x12429624*=0x98) returned 1 [0142.988] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86/vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000)) returned 1 [0142.988] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.988] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.988] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.988] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.989] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.989] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0142.989] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0142.989] CloseHandle (hObject=0x164) returned 1 [0142.989] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.989] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.989] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0142.990] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0142.990] WriteFile (in: hFile=0x164, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0142.991] CloseHandle (hObject=0x164) returned 1 [0142.992] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.992] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.992] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.992] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x691d210, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x691d210, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.993] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x691d210, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x691d210, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.993] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x691d210, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x691d210, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6922030, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.993] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0142.993] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.993] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.993] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.993] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.993] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.993] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.993] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.993] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.994] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.994] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.994] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.994] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.994] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0142.994] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0142.994] CloseHandle (hObject=0x164) returned 1 [0142.994] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.994] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.995] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0142.995] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0142.995] WriteFile (in: hFile=0x164, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0142.997] CloseHandle (hObject=0x164) returned 1 [0142.997] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.997] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.998] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.998] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x6929560, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6929560, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.998] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x6929560, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6929560, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.998] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6929560, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6929560, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x692e380, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.998] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0142.998] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.998] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.998] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.998] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.998] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.998] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.999] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.999] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.999] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.999] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.000] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.000] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.000] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.000] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0143.000] CloseHandle (hObject=0x164) returned 1 [0143.000] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.000] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.000] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.003] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0143.003] WriteFile (in: hFile=0x164, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0143.004] CloseHandle (hObject=0x164) returned 1 [0143.004] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.004] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.005] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.005] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x693a6d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x693a6d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.005] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x693a6d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x693a6d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.005] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x69358b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x69358b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x693f4f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.005] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0143.005] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0143.005] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.006] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.006] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.006] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.006] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.006] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.006] ReadFile (in: hFile=0x164, lpBuffer=0x1256e800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1256e800*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.009] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86/vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.009] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.010] ReadFile (in: hFile=0x158, lpBuffer=0x1256e900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1256e900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.012] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e)) returned 1 [0143.012] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.013] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.013] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e4e0 | out: pbBuffer=0x1249e4e0) returned 1 [0143.014] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446224 | out: pbBuffer=0x12446224) returned 1 [0143.014] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1256ec02 | out: pbBuffer=0x1256ec02) returned 1 [0143.014] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1256ec7f | out: pbBuffer=0x1256ec7f) returned 1 [0143.016] SetEvent (hEvent=0xa8) returned 1 [0143.016] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x4f699e, lpOverlapped=0x0) returned 1 [0143.123] CloseHandle (hObject=0x158) returned 1 [0143.123] CloseHandle (hObject=0x164) returned 1 [0143.123] SwitchToThread () returned 1 [0143.123] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0143.211] SetEvent (hEvent=0xb8) returned 1 [0143.211] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0143.213] SetEvent (hEvent=0xb8) returned 1 [0143.213] SwitchToThread () returned 1 [0143.214] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0143.248] SetEvent (hEvent=0xb8) returned 1 [0143.248] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0143.249] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0143.249] SetEvent (hEvent=0xb8) returned 1 [0143.249] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0143.268] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0143.268] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0143.268] SetEvent (hEvent=0xac) returned 1 [0143.268] SetEvent (hEvent=0xb8) returned 1 [0143.277] GetFileType (hFile=0x158) returned 0x1 [0143.277] SetFilePointerEx (in: hFile=0x158, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0143.277] WriteFile (in: hFile=0x158, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x165257, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429950*=0x165257, lpOverlapped=0x1242995c) returned 1 [0143.283] GetFileType (hFile=0x158) returned 0x1 [0143.283] SetFilePointerEx (in: hFile=0x158, liDistanceToMove=0x165257, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0143.283] ReadFile (in: hFile=0x158, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0143.283] CloseHandle (hObject=0x158) returned 1 [0143.283] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.283] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.284] WriteFile (in: hFile=0x158, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0143.284] CloseHandle (hObject=0x158) returned 1 [0143.284] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x9a, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x12429624*=0x9a) returned 1 [0143.284] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64/vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000)) returned 1 [0143.284] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.284] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.285] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.285] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.285] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.285] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.285] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0143.285] CloseHandle (hObject=0x158) returned 1 [0143.286] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.286] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.286] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.286] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0143.287] WriteFile (in: hFile=0x158, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0143.288] CloseHandle (hObject=0x158) returned 1 [0143.288] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.288] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.288] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.288] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6be50b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6be50b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.288] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6be50b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6be50b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.288] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6be50b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6be50b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6be50b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.288] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.288] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.288] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.288] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.289] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.289] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.289] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.289] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.289] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.289] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.289] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.289] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.289] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.289] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.290] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0143.290] CloseHandle (hObject=0x158) returned 1 [0143.290] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.290] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.290] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.290] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0143.291] WriteFile (in: hFile=0x158, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0143.292] CloseHandle (hObject=0x158) returned 1 [0143.292] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.292] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.292] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.292] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6be50b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6be50b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6be50b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6be50b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6be50b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6be50b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6be50b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0143.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.292] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.292] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.293] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.293] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.293] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.293] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.293] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.293] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.293] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.293] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.293] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.293] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.294] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0143.294] CloseHandle (hObject=0x158) returned 1 [0143.294] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.294] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.294] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.296] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0143.296] WriteFile (in: hFile=0x158, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0143.297] CloseHandle (hObject=0x158) returned 1 [0143.297] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.297] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.297] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.297] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6be50b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6be50b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.298] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6be50b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6be50b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.298] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6be50b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6be50b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6be50b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.298] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9b1b00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7c9b1b00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7c9b1b00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0143.298] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0143.298] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.298] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.298] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.298] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.298] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.299] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.299] ReadFile (in: hFile=0x158, lpBuffer=0x1256e900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1256e900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.301] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64/vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.302] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.302] ReadFile (in: hFile=0x178, lpBuffer=0x1256ea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1256ea00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.305] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9b1b00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7c9b1b00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7c9b1b00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x554520)) returned 1 [0143.305] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.305] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.305] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442700 | out: pbBuffer=0x12442700) returned 1 [0143.306] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446214 | out: pbBuffer=0x12446214) returned 1 [0143.306] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1256ed02 | out: pbBuffer=0x1256ed02) returned 1 [0143.306] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1256edde | out: pbBuffer=0x1256edde) returned 1 [0143.307] SetEvent (hEvent=0xa8) returned 1 [0143.307] ReadFile (in: hFile=0x164, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x554520, lpOverlapped=0x0) returned 1 [0143.424] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0143.426] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0143.523] SetEvent (hEvent=0xb8) returned 1 [0143.523] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0143.525] SetEvent (hEvent=0xb8) returned 1 [0143.525] SwitchToThread () returned 1 [0143.526] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0143.553] SetEvent (hEvent=0xb8) returned 1 [0143.561] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0143.577] SetEvent (hEvent=0xb8) returned 1 [0143.577] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0143.579] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0145.418] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0145.424] SetEvent (hEvent=0xb8) returned 1 [0145.424] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0145.426] SetEvent (hEvent=0xb8) returned 1 [0145.426] SwitchToThread () returned 1 [0145.431] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0145.450] SetEvent (hEvent=0xb8) returned 1 [0145.451] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0145.452] SetEvent (hEvent=0xb8) returned 1 [0145.452] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0145.457] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0145.457] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0145.457] SetEvent (hEvent=0xb8) returned 1 [0145.462] GetFileType (hFile=0xbc) returned 0x1 [0145.462] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0145.462] WriteFile (in: hFile=0xbc, lpBuffer=0x12662000*, nNumberOfBytesToWrite=0xbd7f0, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12662000*, lpNumberOfBytesWritten=0x12429aa0*=0xbd7f0, lpOverlapped=0x12429aac) returned 1 [0145.464] GetFileType (hFile=0xbc) returned 0x1 [0145.464] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0xbd7f0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0145.464] ReadFile (in: hFile=0xbc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0145.464] CloseHandle (hObject=0xbc) returned 1 [0145.464] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.464] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0145.465] WriteFile (in: hFile=0xbc, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0145.465] CloseHandle (hObject=0xbc) returned 1 [0145.465] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127e0000*, nNumberOfCharsToWrite=0x49, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127e0000*, lpNumberOfCharsWritten=0x12429774*=0x49) returned 1 [0145.465] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.466] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.466] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.466] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.466] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.466] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.466] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0145.466] CloseHandle (hObject=0xbc) returned 1 [0145.466] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\application data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.466] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Application Data\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.466] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\application data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.467] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Application Data\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.467] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\application data\\@_read_to_recover_files_@.txt")) returned 0x2021 [0145.467] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Application Data\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.467] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Application Data" (normalized: "c:\\users\\default\\appdata\\local\\application data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.467] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Application Data\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.467] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/History\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\history\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.470] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/History\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.471] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/History\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\history\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.473] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0145.473] WriteFile (in: hFile=0xbc, lpBuffer=0x124d1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d1300*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0145.474] CloseHandle (hObject=0xbc) returned 1 [0145.474] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/History\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\history\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.474] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/History\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.474] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/History" (normalized: "c:\\users\\default\\appdata\\local\\history"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.474] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/History\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.474] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.475] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.475] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.475] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0145.475] WriteFile (in: hFile=0xbc, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0145.476] CloseHandle (hObject=0xbc) returned 1 [0145.476] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.476] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.477] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft" (normalized: "c:\\users\\default\\appdata\\local\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.477] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x804c300, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x804c300, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.477] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x804c300, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x804c300, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.477] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x804c300, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x804c300, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x804ea10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.477] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0145.477] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0145.477] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0145.477] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0145.477] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0145.477] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0145.477] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0145.477] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0145.477] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0145.477] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.477] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.477] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.477] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.477] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.477] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.478] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.478] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.478] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.479] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.480] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.480] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.481] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.482] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.482] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.482] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.482] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.482] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.484] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.485] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.485] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.485] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.485] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.485] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.486] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.487] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.487] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.487] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.487] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.487] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.488] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.488] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.488] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.488] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.488] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.488] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.488] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.488] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0145.488] CloseHandle (hObject=0xbc) returned 1 [0145.489] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.489] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.489] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.489] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0145.489] WriteFile (in: hFile=0xbc, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0145.490] CloseHandle (hObject=0xbc) returned 1 [0145.491] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.491] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.491] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.491] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x806e5e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x806e5e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.491] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x806e5e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x806e5e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.491] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x806e5e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x806e5e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8070cf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.491] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.491] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.491] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.491] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.491] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.491] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.492] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.492] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.492] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.492] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.492] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0145.495] CloseHandle (hObject=0xbc) returned 1 [0145.495] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.496] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.496] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.496] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0145.497] WriteFile (in: hFile=0xbc, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0145.498] CloseHandle (hObject=0xbc) returned 1 [0145.498] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.498] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.498] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.498] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x807f750, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x807f750, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.498] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x807f750, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x807f750, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.498] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x807f750, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x807f750, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8084570, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.498] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0145.498] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0145.498] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0145.498] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.498] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.498] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.498] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.499] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/FeedsStore.feedsdb-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.499] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.502] ReadFile (in: hFile=0xbc, lpBuffer=0x12466200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12466200*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.512] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.512] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.515] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.516] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.516] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.516] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.516] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/FeedsStore.feedsdb-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0145.516] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.516] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.516] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.516] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.516] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.516] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.517] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0145.517] CloseHandle (hObject=0x1b0) returned 1 [0145.517] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.518] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.518] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.518] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0145.518] WriteFile (in: hFile=0x1b0, lpBuffer=0x12493300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12493300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0145.519] CloseHandle (hObject=0x1b0) returned 1 [0145.519] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.519] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.520] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.520] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x80b52b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x80b52b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.520] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x80b52b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x80b52b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.520] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x80b52b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x80b52b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x80b79c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.520] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0145.520] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0145.520] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0145.520] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.520] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.520] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.520] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.521] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/MSNBC News~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.521] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0145.521] ReadFile (in: hFile=0x1b0, lpBuffer=0x12466500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466500*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0145.523] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/Microsoft at Home~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0145.524] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0145.524] ReadFile (in: hFile=0x158, lpBuffer=0x12466600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0145.525] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/Microsoft at Work~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0145.526] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0145.526] ReadFile (in: hFile=0x178, lpBuffer=0x12466700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0145.528] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/MSNBC News~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0145.528] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/Microsoft at Home~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0145.528] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/Microsoft at Work~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0145.528] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.528] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.528] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.528] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.528] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.528] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/Microsoft Feeds~/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.528] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0145.529] CloseHandle (hObject=0x164) returned 1 [0145.529] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.529] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.529] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.529] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0145.529] WriteFile (in: hFile=0x164, lpBuffer=0x12495900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12495900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0145.530] CloseHandle (hObject=0x164) returned 1 [0145.530] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.530] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.531] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.531] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x80d0060, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x80d0060, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x80d0060, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x80d0060, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x80d0060, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x80d0060, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x80d2770, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0145.531] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.531] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.531] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.531] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.531] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.531] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.531] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.532] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.532] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.532] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.532] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.532] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.532] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.532] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0145.532] CloseHandle (hObject=0x164) returned 1 [0145.532] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.532] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.532] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.533] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0145.533] WriteFile (in: hFile=0x164, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0145.534] CloseHandle (hObject=0x164) returned 1 [0145.534] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.534] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.534] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.534] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x80d2770, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x80d2770, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.534] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x80d2770, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x80d2770, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.534] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x80d2770, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x80d2770, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x80d7590, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.534] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0145.534] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.535] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.535] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.535] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.535] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.535] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0145.535] ReadFile (in: hFile=0x164, lpBuffer=0x12467200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12467200*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0145.537] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0145.537] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.537] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.538] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.538] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.538] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.538] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds/{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~/WebSlices~/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0145.538] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0145.538] CloseHandle (hObject=0xe8) returned 1 [0145.538] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.539] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.539] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0145.539] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0145.539] WriteFile (in: hFile=0xe8, lpBuffer=0x12774600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12774600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0145.540] CloseHandle (hObject=0xe8) returned 1 [0145.540] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.541] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.541] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.541] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x80e38e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x80e38e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.541] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x80e38e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x80e38e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.541] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0145.541] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0145.541] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x80e38e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x80e38e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x80e5ff0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.541] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0145.541] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0145.541] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0145.541] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0145.541] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.541] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.541] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.541] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.542] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.542] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.542] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.542] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.542] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.542] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.542] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.542] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.542] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.542] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.542] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.543] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.543] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0145.543] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.543] ReadFile (in: hFile=0xe8, lpBuffer=0x12467d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12467d00*, lpNumberOfBytesRead=0x12429a88*=0x43, lpOverlapped=0x0) returned 1 [0145.544] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0145.545] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.545] ReadFile (in: hFile=0xf8, lpBuffer=0x12467f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12467f00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.547] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0145.547] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0145.547] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0145.547] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0145.547] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e980 | out: pbBuffer=0x1249e980) returned 1 [0145.548] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446894 | out: pbBuffer=0x12446894) returned 1 [0145.548] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12560202 | out: pbBuffer=0x12560202) returned 1 [0145.548] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12560246 | out: pbBuffer=0x12560246) returned 1 [0145.549] SetEvent (hEvent=0xa0) returned 1 [0145.550] ReadFile (in: hFile=0x114, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x8000, lpOverlapped=0x0) returned 1 [0145.550] GetFileType (hFile=0x114) returned 0x1 [0145.550] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0145.550] WriteFile (in: hFile=0x114, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429950*=0x8000, lpOverlapped=0x1242995c) returned 1 [0145.550] GetFileType (hFile=0x114) returned 0x1 [0145.550] SetFilePointerEx (in: hFile=0x114, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0145.551] ReadFile (in: hFile=0x114, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0145.551] CloseHandle (hObject=0x114) returned 1 [0145.551] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0145.551] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0145.551] WriteFile (in: hFile=0x114, lpBuffer=0x1248d440*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248d440*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0145.551] CloseHandle (hObject=0x114) returned 1 [0145.551] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6cc0*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124b6cc0*, lpNumberOfCharsWritten=0x12429624*=0x5c) returned 1 [0145.552] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.552] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.552] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0145.553] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0145.553] WriteFile (in: hFile=0x114, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0145.554] CloseHandle (hObject=0x114) returned 1 [0145.554] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.555] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.555] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.555] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x81034b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x81034b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.555] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x81034b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x81034b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.555] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x81034b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x81034b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x81082d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.555] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0145.555] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0145.555] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.555] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.555] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.555] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.555] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0145.556] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0145.556] ReadFile (in: hFile=0x114, lpBuffer=0x12560200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12560200*, lpNumberOfBytesRead=0x124299e0*=0x43, lpOverlapped=0x0) returned 1 [0145.557] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.565] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0145.565] ReadFile (in: hFile=0x1b0, lpBuffer=0x12560300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12560300*, lpNumberOfBytesRead=0x124299e0*=0x0, lpOverlapped=0x0) returned 1 [0145.565] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0145.565] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.565] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.565] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.565] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.565] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.565] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0145.566] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0145.566] CloseHandle (hObject=0x158) returned 1 [0145.566] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.566] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.566] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.566] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.566] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.566] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/1NBUR4HR/fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0145.566] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0145.566] CloseHandle (hObject=0x158) returned 1 [0145.566] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.566] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.567] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0145.567] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0145.567] WriteFile (in: hFile=0x158, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0145.568] CloseHandle (hObject=0x158) returned 1 [0145.568] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.568] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.568] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.568] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8116d30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8116d30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.569] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8116d30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8116d30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.569] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8116d30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8116d30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x811bb50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.569] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0145.569] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0145.569] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.569] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.569] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.569] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.569] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0145.569] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0145.570] ReadFile (in: hFile=0x158, lpBuffer=0x12560c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12560c00*, lpNumberOfBytesRead=0x124299e0*=0x43, lpOverlapped=0x0) returned 1 [0145.570] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0145.571] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0145.571] ReadFile (in: hFile=0x178, lpBuffer=0x12560d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12560d00*, lpNumberOfBytesRead=0x124299e0*=0x0, lpOverlapped=0x0) returned 1 [0145.571] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0145.571] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.571] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.571] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.571] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.571] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.571] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.571] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0145.572] CloseHandle (hObject=0x164) returned 1 [0145.572] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.572] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.572] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.572] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.572] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.572] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/6ASVN7J7/fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.572] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0145.572] CloseHandle (hObject=0x164) returned 1 [0145.572] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.572] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.572] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.572] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.573] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.573] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.573] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0145.573] CloseHandle (hObject=0x164) returned 1 [0145.573] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.573] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.573] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.573] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0145.574] WriteFile (in: hFile=0x164, lpBuffer=0x1245ec00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1245ec00*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0145.574] CloseHandle (hObject=0x164) returned 1 [0145.575] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.575] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.575] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.575] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8127ea0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8127ea0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.575] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8127ea0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8127ea0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.575] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8127ea0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8127ea0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x812a5b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.575] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0145.575] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0145.575] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.575] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.575] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.575] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.575] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.576] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0145.576] ReadFile (in: hFile=0x164, lpBuffer=0x12561500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12561500*, lpNumberOfBytesRead=0x124299e0*=0x43, lpOverlapped=0x0) returned 1 [0145.577] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0145.577] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0145.578] ReadFile (in: hFile=0xe8, lpBuffer=0x12561600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12561600*, lpNumberOfBytesRead=0x124299e0*=0x0, lpOverlapped=0x0) returned 1 [0145.578] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0145.578] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.578] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.578] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.578] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.578] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.578] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0145.578] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0145.578] CloseHandle (hObject=0xf8) returned 1 [0145.578] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.579] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.579] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.579] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.579] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.579] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/D68G7BIJ/fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0145.579] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0145.579] CloseHandle (hObject=0xf8) returned 1 [0145.579] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.579] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.579] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0145.580] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0145.580] WriteFile (in: hFile=0xf8, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0145.581] CloseHandle (hObject=0xf8) returned 1 [0145.581] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.581] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.581] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.581] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8136900, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8136900, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.581] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8136900, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8136900, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.581] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8136900, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8136900, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x813b720, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.581] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0145.582] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0145.582] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.582] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.582] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.582] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.582] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0145.582] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0145.582] ReadFile (in: hFile=0xf8, lpBuffer=0x12561e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12561e00*, lpNumberOfBytesRead=0x124299e0*=0x43, lpOverlapped=0x0) returned 1 [0145.583] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.583] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0145.584] ReadFile (in: hFile=0xbc, lpBuffer=0x12561f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12561f00*, lpNumberOfBytesRead=0x124299e0*=0x0, lpOverlapped=0x0) returned 1 [0145.584] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0145.584] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.584] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.584] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.584] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.584] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.584] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0145.584] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0145.584] CloseHandle (hObject=0x160) returned 1 [0145.584] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.585] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.585] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.585] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.585] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/fwlink[1]\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.585] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Feeds Cache/KQMHSVKD/fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0145.585] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0145.585] CloseHandle (hObject=0x160) returned 1 [0145.585] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.585] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.585] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0145.586] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0145.586] WriteFile (in: hFile=0x160, lpBuffer=0x1256e000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1256e000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0145.587] CloseHandle (hObject=0x160) returned 1 [0145.587] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.587] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.587] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.587] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8145360, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8145360, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.588] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8145360, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8145360, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.588] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8145360, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8145360, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x814a180, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.588] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0145.588] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0145.588] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.588] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.588] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.588] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.588] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0145.589] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.589] ReadFile (in: hFile=0x160, lpBuffer=0x1255a600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255a600*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.591] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0145.591] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.592] ReadFile (in: hFile=0x130, lpBuffer=0x1255a700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255a700*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.593] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9)) returned 1 [0145.594] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0145.594] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0145.594] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e680 | out: pbBuffer=0x1249e680) returned 1 [0145.595] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124464a0 | out: pbBuffer=0x124464a0) returned 1 [0145.595] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1255a802 | out: pbBuffer=0x1255a802) returned 1 [0145.595] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1255a856 | out: pbBuffer=0x1255a856) returned 1 [0145.596] SetEvent (hEvent=0xb8) returned 1 [0145.596] ReadFile (in: hFile=0x134, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x2fa9, lpOverlapped=0x0) returned 1 [0145.596] GetFileType (hFile=0x134) returned 0x1 [0145.596] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0145.596] WriteFile (in: hFile=0x134, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x2fa9, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429950*=0x2fa9, lpOverlapped=0x1242995c) returned 1 [0145.597] GetFileType (hFile=0x134) returned 0x1 [0145.597] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x2fa9, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0145.597] ReadFile (in: hFile=0x134, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0145.597] CloseHandle (hObject=0x134) returned 1 [0145.597] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0145.597] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0145.597] WriteFile (in: hFile=0x134, lpBuffer=0x1248cb40*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248cb40*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0145.597] CloseHandle (hObject=0x134) returned 1 [0145.598] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d9040*, nNumberOfCharsToWrite=0x64, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124d9040*, lpNumberOfCharsWritten=0x12429624*=0x64) returned 1 [0145.598] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9)) returned 1 [0145.598] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0145.598] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0145.599] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0145.600] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0145.600] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1247c002 | out: pbBuffer=0x1247c002) returned 1 [0145.600] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1247c011 | out: pbBuffer=0x1247c011) returned 1 [0145.601] CloseHandle (hObject=0x164) returned 1 [0145.601] CloseHandle (hObject=0x178) returned 1 [0145.601] CloseHandle (hObject=0x158) returned 1 [0145.601] CloseHandle (hObject=0x1b0) returned 1 [0145.601] CloseHandle (hObject=0x114) returned 1 [0145.684] SetEvent (hEvent=0xb8) returned 1 [0145.684] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0145.686] SetEvent (hEvent=0xa8) returned 1 [0145.686] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0145.687] SetEvent (hEvent=0xa8) returned 1 [0145.688] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0145.692] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0145.796] SetEvent (hEvent=0xa8) returned 1 [0145.796] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0145.800] SetEvent (hEvent=0xa8) returned 1 [0145.800] SwitchToThread () returned 1 [0145.801] SetEvent (hEvent=0xa8) returned 1 [0145.801] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0145.812] SetEvent (hEvent=0xb8) returned 1 [0145.813] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0145.833] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0145.833] SetEvent (hEvent=0xa0) returned 1 [0145.833] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0145.834] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0145.834] SetEvent (hEvent=0xa0) returned 1 [0145.846] GetFileType (hFile=0x138) returned 0x1 [0145.846] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0145.846] WriteFile (in: hFile=0x138, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x200000, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429950*=0x200000, lpOverlapped=0x1242995c) returned 1 [0145.853] GetFileType (hFile=0x138) returned 0x1 [0145.853] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x200000, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0145.853] ReadFile (in: hFile=0x138, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0145.854] CloseHandle (hObject=0x138) returned 1 [0145.854] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/edb.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0145.854] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0145.854] WriteFile (in: hFile=0x138, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0145.871] CloseHandle (hObject=0x138) returned 1 [0145.871] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfCharsWritten=0x12429624*=0x5b) returned 1 [0145.871] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0145.871] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0145.871] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0145.872] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0145.873] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0145.873] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b6022 | out: pbBuffer=0x124b6022) returned 1 [0145.874] SwitchToThread () returned 1 [0145.874] SetEvent (hEvent=0xa0) returned 1 [0145.874] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0145.887] SetEvent (hEvent=0xa8) returned 1 [0145.887] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0145.909] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0145.909] SetEvent (hEvent=0xb8) returned 1 [0145.909] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0145.910] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0145.910] SetEvent (hEvent=0xb8) returned 1 [0145.922] GetFileType (hFile=0x138) returned 0x1 [0145.922] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0145.922] WriteFile (in: hFile=0x138, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x200000, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429950*=0x200000, lpOverlapped=0x1242995c) returned 1 [0145.930] GetFileType (hFile=0x138) returned 0x1 [0145.930] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x200000, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0145.930] ReadFile (in: hFile=0x138, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0145.930] CloseHandle (hObject=0x138) returned 1 [0145.930] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0145.930] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0145.931] WriteFile (in: hFile=0x138, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0145.947] CloseHandle (hObject=0x138) returned 1 [0145.947] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x12429624*=0x60) returned 1 [0145.948] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/edbres00001.jrs" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0145.948] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/edbres00002.jrs" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0145.948] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0145.948] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.949] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.949] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.949] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.949] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.949] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0145.949] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0145.950] CloseHandle (hObject=0x138) returned 1 [0145.950] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.950] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.950] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0145.950] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0145.951] WriteFile (in: hFile=0x138, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0145.952] CloseHandle (hObject=0x138) returned 1 [0145.952] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.952] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.952] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.952] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x84a6ef0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x84a6ef0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.952] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x84a6ef0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x84a6ef0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.952] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x84a6ef0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x84a6ef0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x84abd10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.952] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="new", cAlternateFileName="")) returned 1 [0145.952] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.952] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.952] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.953] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.953] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.953] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.954] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.955] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.955] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.955] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.955] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.955] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.955] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0145.956] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0145.956] CloseHandle (hObject=0x138) returned 1 [0145.956] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.956] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.957] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0145.957] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0145.957] WriteFile (in: hFile=0x138, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0145.958] CloseHandle (hObject=0x138) returned 1 [0145.958] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.958] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.959] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.959] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x84b8060, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x84b8060, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.959] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x84b8060, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x84b8060, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.959] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x84b8060, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x84b8060, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x84bce80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.959] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0145.959] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2ab7545, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x206000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1 [0145.959] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1 [0145.959] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.959] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.959] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.959] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.959] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/WindowsMail.MSMessageStore" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.msmessagestore"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0145.960] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0145.960] ReadFile (in: hFile=0x138, lpBuffer=0x124c8800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x124c8800*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0145.963] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0145.964] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0145.964] ReadFile (in: hFile=0x108, lpBuffer=0x124c8900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x124c8900*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0145.966] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0145.966] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0145.966] ReadFile (in: hFile=0xdc, lpBuffer=0x124c8a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x124c8a00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0145.968] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/WindowsMail.MSMessageStore" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.msmessagestore"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2ab7545, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x206000)) returned 1 [0145.968] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0145.968] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0145.969] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0145.969] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e280 | out: pbBuffer=0x1249e280) returned 1 [0145.970] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2190 | out: pbBuffer=0x124e2190) returned 1 [0145.970] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8b02 | out: pbBuffer=0x124c8b02) returned 1 [0145.970] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c8b07 | out: pbBuffer=0x124c8b07) returned 1 [0145.972] SetEvent (hEvent=0xa0) returned 1 [0145.972] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x4000, lpOverlapped=0x0) returned 1 [0145.972] GetFileType (hFile=0x17c) returned 0x1 [0145.972] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0145.972] WriteFile (in: hFile=0x17c, lpBuffer=0x12494000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x12494000*, lpNumberOfBytesWritten=0x12429800*=0x4000, lpOverlapped=0x1242980c) returned 1 [0145.972] GetFileType (hFile=0x17c) returned 0x1 [0145.972] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0145.972] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0145.973] CloseHandle (hObject=0x17c) returned 1 [0145.973] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0145.973] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0145.973] WriteFile (in: hFile=0x17c, lpBuffer=0x12466fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x12466fc0*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0145.973] CloseHandle (hObject=0x17c) returned 1 [0145.973] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12776000*, nNumberOfCharsToWrite=0x6e, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x12776000*, lpNumberOfCharsWritten=0x124294d4*=0x6e) returned 1 [0145.974] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0145.974] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0145.974] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0145.975] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0145.976] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2074 | out: pbBuffer=0x124e2074) returned 1 [0145.976] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0145.976] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc031 | out: pbBuffer=0x124bc031) returned 1 [0145.976] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc098 | out: pbBuffer=0x124bc098) returned 1 [0145.977] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0145.977] SetEvent (hEvent=0xac) returned 1 [0145.978] SetEvent (hEvent=0xb8) returned 1 [0145.978] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x200000, lpOverlapped=0x0) returned 1 [0146.014] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.015] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.053] SetEvent (hEvent=0xa8) returned 1 [0146.054] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.054] SetEvent (hEvent=0xa8) returned 1 [0146.055] SwitchToThread () returned 1 [0146.056] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.101] SetEvent (hEvent=0xa8) returned 1 [0146.101] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0146.102] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.102] SetEvent (hEvent=0xa8) returned 1 [0146.102] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.125] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.125] SetEvent (hEvent=0xac) returned 1 [0146.125] SetEvent (hEvent=0xb8) returned 1 [0146.125] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x432, lpOverlapped=0x0) returned 1 [0146.126] GetFileType (hFile=0x170) returned 0x1 [0146.126] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.126] WriteFile (in: hFile=0x170, lpBuffer=0x127c8000*, nNumberOfBytesToWrite=0x432, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x127c8000*, lpNumberOfBytesWritten=0x124298a8*=0x432, lpOverlapped=0x124298b4) returned 1 [0146.126] GetFileType (hFile=0x170) returned 0x1 [0146.126] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x432, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.126] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.126] CloseHandle (hObject=0x170) returned 1 [0146.126] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.126] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.127] WriteFile (in: hFile=0x170, lpBuffer=0x12578240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x12578240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.127] CloseHandle (hObject=0x170) returned 1 [0146.127] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c2000*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124c2000*, lpNumberOfCharsWritten=0x1242957c*=0x68) returned 1 [0146.127] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285)) returned 1 [0146.127] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7)) returned 1 [0146.128] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.128] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.128] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.129] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0146.129] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.129] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c0a5 | out: pbBuffer=0x1248c0a5) returned 1 [0146.130] SwitchToThread () returned 1 [0146.130] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.132] SetEvent (hEvent=0xa8) returned 1 [0146.132] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.134] SetEvent (hEvent=0xa8) returned 1 [0146.135] SwitchToThread () returned 1 [0146.135] SetEvent (hEvent=0xa8) returned 1 [0146.135] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.136] SetEvent (hEvent=0xb8) returned 1 [0146.136] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.137] SetEvent (hEvent=0xb8) returned 1 [0146.137] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.139] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.140] SetEvent (hEvent=0xb8) returned 1 [0146.140] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0xed, lpOverlapped=0x0) returned 1 [0146.140] GetFileType (hFile=0x170) returned 0x1 [0146.140] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.140] WriteFile (in: hFile=0x170, lpBuffer=0x124d8000*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124d8000*, lpNumberOfBytesWritten=0x124298a8*=0xed, lpOverlapped=0x124298b4) returned 1 [0146.140] GetFileType (hFile=0x170) returned 0x1 [0146.140] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xed, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.140] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.140] CloseHandle (hObject=0x170) returned 1 [0146.140] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Green Bubbles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.140] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.141] WriteFile (in: hFile=0x170, lpBuffer=0x125786c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x125786c0*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.141] CloseHandle (hObject=0x170) returned 1 [0146.141] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d2000*, nNumberOfCharsToWrite=0x70, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124d2000*, lpNumberOfCharsWritten=0x1242957c*=0x70) returned 1 [0146.141] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906)) returned 1 [0146.141] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.141] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.142] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.143] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.143] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c068 | out: pbBuffer=0x1248c068) returned 1 [0146.144] SwitchToThread () returned 1 [0146.144] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.147] SetEvent (hEvent=0xa8) returned 1 [0146.147] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.149] SetEvent (hEvent=0xa8) returned 1 [0146.149] SwitchToThread () returned 1 [0146.150] SetEvent (hEvent=0xa8) returned 1 [0146.150] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.151] SetEvent (hEvent=0xb8) returned 1 [0146.151] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.152] SetEvent (hEvent=0xb8) returned 1 [0146.152] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.154] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.154] SetEvent (hEvent=0xb8) returned 1 [0146.154] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x107e, lpOverlapped=0x0) returned 1 [0146.155] GetFileType (hFile=0x170) returned 0x1 [0146.155] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.155] WriteFile (in: hFile=0x170, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x107e, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x124298a8*=0x107e, lpOverlapped=0x124298b4) returned 1 [0146.155] GetFileType (hFile=0x170) returned 0x1 [0146.155] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x107e, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.155] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.155] CloseHandle (hObject=0x170) returned 1 [0146.155] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.155] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.155] WriteFile (in: hFile=0x170, lpBuffer=0x12578240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x12578240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.156] CloseHandle (hObject=0x170) returned 1 [0146.156] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d20e0*, nNumberOfCharsToWrite=0x6d, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124d20e0*, lpNumberOfCharsWritten=0x1242957c*=0x6d) returned 1 [0146.156] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Orange Circles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0146.156] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Orange Circles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.156] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.157] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.157] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0146.157] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.157] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c006 | out: pbBuffer=0x1248c006) returned 1 [0146.157] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c09b | out: pbBuffer=0x1248c09b) returned 1 [0146.157] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c0be | out: pbBuffer=0x1248c0be) returned 1 [0146.158] SwitchToThread () returned 1 [0146.159] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.160] SetEvent (hEvent=0xa8) returned 1 [0146.161] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.163] SetEvent (hEvent=0xa8) returned 1 [0146.163] SwitchToThread () returned 1 [0146.164] SetEvent (hEvent=0xa8) returned 1 [0146.164] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.166] SetEvent (hEvent=0xb8) returned 1 [0146.166] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.167] SetEvent (hEvent=0xb8) returned 1 [0146.167] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.169] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.169] SetEvent (hEvent=0xb8) returned 1 [0146.169] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0xe8, lpOverlapped=0x0) returned 1 [0146.169] GetFileType (hFile=0x170) returned 0x1 [0146.169] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.169] WriteFile (in: hFile=0x170, lpBuffer=0x124d8000*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124d8000*, lpNumberOfBytesWritten=0x124298a8*=0xe8, lpOverlapped=0x124298b4) returned 1 [0146.170] GetFileType (hFile=0x170) returned 0x1 [0146.170] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.170] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.170] CloseHandle (hObject=0x170) returned 1 [0146.170] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.170] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.170] WriteFile (in: hFile=0x170, lpBuffer=0x125786c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x125786c0*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.170] CloseHandle (hObject=0x170) returned 1 [0146.170] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d2000*, nNumberOfCharsToWrite=0x6a, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124d2000*, lpNumberOfCharsWritten=0x1242957c*=0x6a) returned 1 [0146.171] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb)) returned 1 [0146.171] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.171] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.171] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.172] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0146.172] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.172] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c086 | out: pbBuffer=0x1248c086) returned 1 [0146.173] SwitchToThread () returned 1 [0146.173] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.175] SetEvent (hEvent=0xa8) returned 1 [0146.175] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.177] SetEvent (hEvent=0xa8) returned 1 [0146.177] SwitchToThread () returned 1 [0146.177] SetEvent (hEvent=0xa8) returned 1 [0146.177] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.179] SetEvent (hEvent=0xb8) returned 1 [0146.179] SetEvent (hEvent=0xa0) returned 1 [0146.179] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.180] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.181] SetEvent (hEvent=0xa8) returned 1 [0146.181] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.182] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0146.209] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.209] SetEvent (hEvent=0xac) returned 1 [0146.210] SetEvent (hEvent=0xa8) returned 1 [0146.210] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x780, lpOverlapped=0x0) returned 1 [0146.217] GetFileType (hFile=0x170) returned 0x1 [0146.218] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.218] WriteFile (in: hFile=0x170, lpBuffer=0x124bc000*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124bc000*, lpNumberOfBytesWritten=0x124298a8*=0x780, lpOverlapped=0x124298b4) returned 1 [0146.226] GetFileType (hFile=0x170) returned 0x1 [0146.226] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x780, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.226] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.235] CloseHandle (hObject=0x170) returned 1 [0146.243] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.255] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.431] WriteFile (in: hFile=0x170, lpBuffer=0x12578240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x12578240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.431] CloseHandle (hObject=0x170) returned 1 [0146.431] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fe0d0*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x127fe0d0*, lpNumberOfCharsWritten=0x1242957c*=0x68) returned 1 [0146.438] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Shades of Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0146.438] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Shades of Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.438] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.448] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.448] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0146.449] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.449] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c0b4 | out: pbBuffer=0x1248c0b4) returned 1 [0146.449] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.455] SetEvent (hEvent=0xa8) returned 1 [0146.455] SetEvent (hEvent=0xb8) returned 1 [0146.456] SwitchToThread () returned 1 [0146.462] SetEvent (hEvent=0xa8) returned 1 [0146.462] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.471] SetEvent (hEvent=0xb8) returned 1 [0146.471] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.480] SetEvent (hEvent=0xb8) returned 1 [0146.480] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.495] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.501] SetEvent (hEvent=0xac) returned 1 [0146.501] SetEvent (hEvent=0xb8) returned 1 [0146.501] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x127e, lpOverlapped=0x0) returned 1 [0146.502] GetFileType (hFile=0x170) returned 0x1 [0146.502] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.502] WriteFile (in: hFile=0x170, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x127e, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x124298a8*=0x127e, lpOverlapped=0x124298b4) returned 1 [0146.502] GetFileType (hFile=0x170) returned 0x1 [0146.502] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x127e, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.502] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.502] CloseHandle (hObject=0x170) returned 1 [0146.503] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.503] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.513] WriteFile (in: hFile=0x170, lpBuffer=0x12578240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x12578240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.513] CloseHandle (hObject=0x170) returned 1 [0146.514] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d80e0*, nNumberOfCharsToWrite=0x6f, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124d80e0*, lpNumberOfCharsWritten=0x1242957c*=0x6f) returned 1 [0146.519] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Soft Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0146.520] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Soft Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.520] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.529] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.530] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0146.530] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.531] SwitchToThread () returned 1 [0146.537] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.567] SetEvent (hEvent=0xa8) returned 1 [0146.567] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.575] SetEvent (hEvent=0xa8) returned 1 [0146.575] SwitchToThread () returned 1 [0146.583] SetEvent (hEvent=0xa8) returned 1 [0146.583] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.590] SetEvent (hEvent=0xb8) returned 1 [0146.590] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.606] SetEvent (hEvent=0xb8) returned 1 [0146.606] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0146.620] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.620] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0146.621] SetEvent (hEvent=0xac) returned 1 [0146.621] SetEvent (hEvent=0xb8) returned 1 [0146.621] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0xe6, lpOverlapped=0x0) returned 1 [0146.622] GetFileType (hFile=0x170) returned 0x1 [0146.622] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.622] WriteFile (in: hFile=0x170, lpBuffer=0x124c0000*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124c0000*, lpNumberOfBytesWritten=0x124298a8*=0xe6, lpOverlapped=0x124298b4) returned 1 [0146.622] GetFileType (hFile=0x170) returned 0x1 [0146.622] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xe6, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.622] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.622] CloseHandle (hObject=0x170) returned 1 [0146.623] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.623] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.625] WriteFile (in: hFile=0x170, lpBuffer=0x125786c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x125786c0*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.625] CloseHandle (hObject=0x170) returned 1 [0146.626] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c2000*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124c2000*, lpNumberOfCharsWritten=0x1242957c*=0x68) returned 1 [0146.666] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51)) returned 1 [0146.666] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.666] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.669] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.672] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410084 | out: pbBuffer=0x12410084) returned 1 [0146.672] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.672] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c03f | out: pbBuffer=0x1248c03f) returned 1 [0146.673] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c084 | out: pbBuffer=0x1248c084) returned 1 [0146.684] SwitchToThread () returned 1 [0146.686] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.710] SetEvent (hEvent=0xa8) returned 1 [0146.710] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.722] SetEvent (hEvent=0xa8) returned 1 [0146.722] SwitchToThread () returned 1 [0146.727] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.749] SetEvent (hEvent=0xa8) returned 1 [0146.749] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0146.750] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.750] SetEvent (hEvent=0xa8) returned 1 [0146.750] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0146.751] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0146.751] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0148.955] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0148.963] SetEvent (hEvent=0xa0) returned 1 [0148.963] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0148.978] SetEvent (hEvent=0xa0) returned 1 [0148.978] SwitchToThread () returned 1 [0148.978] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0148.986] SetEvent (hEvent=0xa0) returned 1 [0148.986] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0148.987] SetEvent (hEvent=0xa0) returned 1 [0148.987] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0148.997] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0148.997] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0149.005] SetEvent (hEvent=0xa0) returned 1 [0149.006] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0149.018] SetEvent (hEvent=0xa0) returned 1 [0149.018] SwitchToThread () returned 1 [0149.019] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0149.025] SetEvent (hEvent=0xa0) returned 1 [0149.026] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0149.038] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0149.038] SetEvent (hEvent=0xa0) returned 1 [0149.038] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0149.039] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0149.039] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0149.045] SetEvent (hEvent=0xa0) returned 1 [0149.045] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0149.055] SetEvent (hEvent=0xa0) returned 1 [0149.055] SwitchToThread () returned 1 [0149.055] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0149.061] SetEvent (hEvent=0xa0) returned 1 [0149.062] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0149.075] SetEvent (hEvent=0xa0) returned 1 [0149.075] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0149.076] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0149.082] SetEvent (hEvent=0xa0) returned 1 [0149.082] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0149.082] SetEvent (hEvent=0xa0) returned 1 [0149.082] SwitchToThread () returned 1 [0149.092] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0149.134] SetEvent (hEvent=0xa0) returned 1 [0149.135] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0149.246] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0149.246] SetEvent (hEvent=0xa0) returned 1 [0149.246] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0149.398] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0149.399] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0149.399] SetEvent (hEvent=0xac) returned 1 [0149.399] SetEvent (hEvent=0xa0) returned 1 [0149.400] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0149.400] SetEvent (hEvent=0xa0) returned 1 [0149.400] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0149.446] GetFileType (hFile=0xcc) returned 0x1 [0149.446] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.447] WriteFile (in: hFile=0xcc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0149.540] GetFileType (hFile=0xcc) returned 0x1 [0149.540] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.540] GetFileType (hFile=0xcc) returned 0x1 [0149.540] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.540] WriteFile (in: hFile=0xcc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0149.632] GetFileType (hFile=0xcc) returned 0x1 [0149.632] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.632] GetFileType (hFile=0xcc) returned 0x1 [0149.632] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.632] WriteFile (in: hFile=0xcc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0149.729] GetFileType (hFile=0xcc) returned 0x1 [0149.729] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.729] GetFileType (hFile=0xcc) returned 0x1 [0149.729] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.729] WriteFile (in: hFile=0xcc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0149.822] GetFileType (hFile=0xcc) returned 0x1 [0149.822] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.823] GetFileType (hFile=0xcc) returned 0x1 [0149.823] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.823] WriteFile (in: hFile=0xcc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0149.922] GetFileType (hFile=0xcc) returned 0x1 [0149.922] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.922] GetFileType (hFile=0xcc) returned 0x1 [0149.922] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.922] WriteFile (in: hFile=0xcc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0150.018] GetFileType (hFile=0xcc) returned 0x1 [0150.018] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0150.018] GetFileType (hFile=0xcc) returned 0x1 [0150.018] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0150.018] WriteFile (in: hFile=0xcc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0150.109] GetFileType (hFile=0xcc) returned 0x1 [0150.109] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0150.109] GetFileType (hFile=0xcc) returned 0x1 [0150.109] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0150.109] WriteFile (in: hFile=0xcc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0150.199] GetFileType (hFile=0xcc) returned 0x1 [0150.199] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0150.200] ReadFile (in: hFile=0xcc, lpBuffer=0x130a2000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x130a2000*, lpNumberOfBytesRead=0x12429abc*=0x800000, lpOverlapped=0x0) returned 1 [0150.378] SetEvent (hEvent=0xa8) returned 1 [0150.379] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0150.446] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0150.446] SetEvent (hEvent=0xa8) returned 1 [0150.446] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0150.599] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0150.655] GetFileType (hFile=0xcc) returned 0x1 [0150.655] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0150.655] WriteFile (in: hFile=0xcc, lpBuffer=0x140a2000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x140a2000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0150.755] GetFileType (hFile=0xcc) returned 0x1 [0150.755] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0150.755] ReadFile (in: hFile=0xcc, lpBuffer=0x130a2000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x130a2000*, lpNumberOfBytesRead=0x12429abc*=0x800000, lpOverlapped=0x0) returned 1 [0150.853] SetEvent (hEvent=0xa0) returned 1 [0150.853] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x0 [0150.854] SetEvent (hEvent=0xa0) returned 1 [0150.854] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0x1) returned 0x102 [0150.854] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0150.967] GetFileType (hFile=0xcc) returned 0x1 [0150.967] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0150.968] WriteFile (in: hFile=0xcc, lpBuffer=0x138a2000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x138a2000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0151.092] GetFileType (hFile=0xcc) returned 0x1 [0151.092] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0151.092] ReadFile (in: hFile=0xcc, lpBuffer=0x130a2000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x130a2000*, lpNumberOfBytesRead=0x12429abc*=0x107b8a, lpOverlapped=0x0) returned 1 [0151.117] GetFileType (hFile=0xcc) returned 0x1 [0151.117] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0151.117] WriteFile (in: hFile=0xcc, lpBuffer=0x140a2000*, nNumberOfBytesToWrite=0x107b8a, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x140a2000*, lpNumberOfBytesWritten=0x12429aa0*=0x107b8a, lpOverlapped=0x12429aac) returned 1 [0151.130] GetFileType (hFile=0xcc) returned 0x1 [0151.130] SetFilePointerEx (in: hFile=0xcc, liDistanceToMove=0x1907b8a, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0151.130] ReadFile (in: hFile=0xcc, lpBuffer=0x130a2000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x130a2000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0151.130] CloseHandle (hObject=0xcc) returned 1 [0151.131] CreateFileW (lpFileName="C:/Users/Public/Videos/Sample Videos/Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0151.131] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0151.131] WriteFile (in: hFile=0xcc, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0151.131] CloseHandle (hObject=0xcc) returned 1 [0151.131] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1260e000*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1260e000*, lpNumberOfCharsWritten=0x12429774*=0x4f) returned 1 [0151.131] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Videos/Sample Videos/desktop.ini" (normalized: "c:\\users\\public\\videos\\sample videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1 [0151.132] CreateFileW (lpFileName="C:/Users/Public/Videos/Sample Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0151.132] FindFirstFileW (in: lpFileName="C:/Users/Public/Videos/Sample Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0151.132] CreateFileW (lpFileName="C:/Users/Public/Videos/Sample Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0151.132] FindFirstFileW (in: lpFileName="C:/Users/Public/Videos/Sample Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0151.132] GetFileAttributesW (lpFileName="C:/Users/Public/Videos/Sample Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0151.132] CreateFileW (lpFileName="C:/Users/Public/Videos/Sample Videos/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0151.132] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0151.132] CloseHandle (hObject=0xcc) returned 1 [0151.132] CreateFileW (lpFileName="C:/bootmgr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\bootmgr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0151.132] FindFirstFileW (in: lpFileName="C:/bootmgr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429ba0 | out: lpFindFileData=0x12429ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0151.133] CreateFileW (lpFileName="C:/bootmgr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\bootmgr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0151.133] FindFirstFileW (in: lpFileName="C:/bootmgr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429b98 | out: lpFindFileData=0x12429b98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0151.133] GetFileAttributesW (lpFileName="C:/bootmgr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\bootmgr\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0151.133] CreateFileW (lpFileName="C:/bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0151.133] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429d9c | out: lpMode=0x12429d9c) returned 0 [0151.133] CloseHandle (hObject=0xcc) returned 1 [0151.134] CreateFileW (lpFileName="C:/hiberfil.sys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\hiberfil.sys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0151.134] FindFirstFileW (in: lpFileName="C:/hiberfil.sys\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429ba0 | out: lpFindFileData=0x12429ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0151.134] CreateFileW (lpFileName="C:/hiberfil.sys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\hiberfil.sys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0151.134] FindFirstFileW (in: lpFileName="C:/hiberfil.sys\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429b98 | out: lpFindFileData=0x12429b98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0151.134] GetFileAttributesW (lpFileName="C:/hiberfil.sys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\hiberfil.sys\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0151.134] CreateFileW (lpFileName="C:/hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0151.134] FindFirstFileW (in: lpFileName="C:/hiberfil.sys\\*", lpFindFileData=0x12429ad4 | out: lpFindFileData=0x12429ad4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0151.134] CreateFileW (lpFileName="C:/pagefile.sys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\pagefile.sys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0151.135] FindFirstFileW (in: lpFileName="C:/pagefile.sys\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429ba0 | out: lpFindFileData=0x12429ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0151.135] CreateFileW (lpFileName="C:/pagefile.sys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\pagefile.sys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0151.135] FindFirstFileW (in: lpFileName="C:/pagefile.sys\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429b98 | out: lpFindFileData=0x12429b98*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0151.135] GetFileAttributesW (lpFileName="C:/pagefile.sys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\pagefile.sys\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0151.135] CreateFileW (lpFileName="C:/pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0151.135] FindFirstFileW (in: lpFileName="C:/pagefile.sys\\*", lpFindFileData=0x12429ad4 | out: lpFindFileData=0x12429ad4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0151.135] SetEvent (hEvent=0xa8) returned 1 [0151.135] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x10, pbBuffer=0x124100b0 | out: pbBuffer=0x124100b0) returned 1 [0151.135] CreateFileW (lpFileName="SUsupj.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\susupj.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0151.136] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12807d78 | out: lpMode=0x12807d78) returned 0 [0151.137] WriteFile (in: hFile=0xcc, lpBuffer=0x643dc0*, nNumberOfBytesToWrite=0x1a228, lpNumberOfBytesWritten=0x12807d7c, lpOverlapped=0x0 | out: lpBuffer=0x643dc0*, lpNumberOfBytesWritten=0x12807d7c*=0x1a228, lpOverlapped=0x0) returned 1 [0151.140] CloseHandle (hObject=0xcc) returned 1 [0151.144] GetFileAttributesExW (in: lpFileName="A:\\" (normalized: "a:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.148] CreateFileW (lpFileName="A:\\" (normalized: "a:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.151] GetFileAttributesExW (in: lpFileName="B:\\" (normalized: "b:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.154] CreateFileW (lpFileName="B:\\" (normalized: "b:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.154] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xce7b3560, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xce7b3560, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0151.154] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0151.157] GetFileAttributesExW (in: lpFileName="D:\\" (normalized: "d:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.161] CreateFileW (lpFileName="D:\\" (normalized: "d:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.164] GetFileAttributesExW (in: lpFileName="E:\\" (normalized: "e:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.167] CreateFileW (lpFileName="E:\\" (normalized: "e:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.170] GetFileAttributesExW (in: lpFileName="F:\\" (normalized: "f:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.173] CreateFileW (lpFileName="F:\\" (normalized: "f:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.177] GetFileAttributesExW (in: lpFileName="G:\\" (normalized: "g:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.180] CreateFileW (lpFileName="G:\\" (normalized: "g:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.183] GetFileAttributesExW (in: lpFileName="H:\\" (normalized: "h:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.186] CreateFileW (lpFileName="H:\\" (normalized: "h:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.189] GetFileAttributesExW (in: lpFileName="I:\\" (normalized: "i:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.192] CreateFileW (lpFileName="I:\\" (normalized: "i:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.195] GetFileAttributesExW (in: lpFileName="J:\\" (normalized: "j:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.198] CreateFileW (lpFileName="J:\\" (normalized: "j:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.202] GetFileAttributesExW (in: lpFileName="K:\\" (normalized: "k:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.206] CreateFileW (lpFileName="K:\\" (normalized: "k:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.209] GetFileAttributesExW (in: lpFileName="L:\\" (normalized: "l:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.213] CreateFileW (lpFileName="L:\\" (normalized: "l:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.217] GetFileAttributesExW (in: lpFileName="M:\\" (normalized: "m:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.220] CreateFileW (lpFileName="M:\\" (normalized: "m:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.223] GetFileAttributesExW (in: lpFileName="N:\\" (normalized: "n:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.226] CreateFileW (lpFileName="N:\\" (normalized: "n:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.229] GetFileAttributesExW (in: lpFileName="O:\\" (normalized: "o:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.232] CreateFileW (lpFileName="O:\\" (normalized: "o:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.236] GetFileAttributesExW (in: lpFileName="P:\\" (normalized: "p:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.239] CreateFileW (lpFileName="P:\\" (normalized: "p:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.242] GetFileAttributesExW (in: lpFileName="Q:\\" (normalized: "q:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.246] CreateFileW (lpFileName="Q:\\" (normalized: "q:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.249] GetFileAttributesExW (in: lpFileName="R:\\" (normalized: "r:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.252] CreateFileW (lpFileName="R:\\" (normalized: "r:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.255] GetFileAttributesExW (in: lpFileName="S:\\" (normalized: "s:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.258] CreateFileW (lpFileName="S:\\" (normalized: "s:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.262] GetFileAttributesExW (in: lpFileName="T:\\" (normalized: "t:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.265] CreateFileW (lpFileName="T:\\" (normalized: "t:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.268] GetFileAttributesExW (in: lpFileName="U:\\" (normalized: "u:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.271] CreateFileW (lpFileName="U:\\" (normalized: "u:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.274] GetFileAttributesExW (in: lpFileName="V:\\" (normalized: "v:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.277] CreateFileW (lpFileName="V:\\" (normalized: "v:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.280] GetFileAttributesExW (in: lpFileName="W:\\" (normalized: "w:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.283] CreateFileW (lpFileName="W:\\" (normalized: "w:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.287] GetFileAttributesExW (in: lpFileName="X:\\" (normalized: "x:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.290] CreateFileW (lpFileName="X:\\" (normalized: "x:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.293] GetFileAttributesExW (in: lpFileName="Y:\\" (normalized: "y:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.296] CreateFileW (lpFileName="Y:\\" (normalized: "y:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.299] GetFileAttributesExW (in: lpFileName="Z:\\" (normalized: "z:"), fInfoLevelId=0x0, lpFileInformation=0x12429b28 | out: lpFileInformation=0x12429b28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0151.302] CreateFileW (lpFileName="Z:\\" (normalized: "z:"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff [0151.302] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x1247c5b0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0151.302] GetFileAttributesExW (in: lpFileName="SUsupj.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\susupj.exe"), fInfoLevelId=0x0, lpFileInformation=0x124299d4 | out: lpFileInformation=0x124299d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ffe30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0xb4ffe30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xb50c180, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1a228)) returned 1 [0151.302] GetProcAddress (hModule=0x76c20000, lpProcName="GetFullPathNameW") returned 0x76c340d4 [0151.303] GetFullPathNameW (in: lpFileName="SUsupj.exe", nBufferLength=0x64, lpBuffer=0x1247c680, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SUsupj.exe", lpFilePart=0x0) returned 0x30 [0151.303] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x1247c750, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0151.303] GetFileAttributesExW (in: lpFileName="SUsupj.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\susupj.exe"), fInfoLevelId=0x0, lpFileInformation=0x1242990c | out: lpFileInformation=0x1242990c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ffe30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0xb4ffe30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xb50c180, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1a228)) returned 1 [0151.303] GetFullPathNameW (in: lpFileName="SUsupj.exe", nBufferLength=0x64, lpBuffer=0x1247c820, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SUsupj.exe", lpFilePart=0x0) returned 0x30 [0151.303] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0151.303] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429c48 | out: lpMode=0x12429c48) returned 0 [0151.303] CreatePipe (in: hReadPipe=0x12429c8c, hWritePipe=0x12429c90, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x12429c8c*=0xd8, hWritePipe=0x12429c90*=0x1b4) returned 1 [0151.303] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429c64 | out: lpMode=0x12429c64) returned 0 [0151.304] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429c64 | out: lpMode=0x12429c64) returned 0 [0151.304] CreatePipe (in: hReadPipe=0x12429c8c, hWritePipe=0x12429c90, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x12429c8c*=0x190, hWritePipe=0x12429c90*=0x154) returned 1 [0151.304] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429c64 | out: lpMode=0x12429c64) returned 0 [0151.304] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429c64 | out: lpMode=0x12429c64) returned 0 [0151.304] GetEnvironmentStringsW () returned 0x74bf18* [0151.304] FreeEnvironmentStringsW (penv=0x74bf18) returned 1 [0151.304] GetCurrentProcess () returned 0xffffffff [0151.304] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xcc, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124105d0, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124105d0*=0x104) returned 1 [0151.304] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x1b4, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124105d4, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124105d4*=0xf0) returned 1 [0151.304] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x154, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x124105d8, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x124105d8*=0xe0) returned 1 [0151.305] CreateProcessW (in: lpApplicationName="SUsupj.exe", lpCommandLine="SUsupj.exe -c C: /accepteula", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x1255a000, lpCurrentDirectory=0x0, lpStartupInfo=0x12429c14*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x104, hStdOutput=0xf0, hStdError=0xe0), lpProcessInformation=0x12429bf0 | out: lpCommandLine="SUsupj.exe -c C: /accepteula", lpProcessInformation=0x12429bf0*(hProcess=0xc0, hThread=0x18c, dwProcessId=0x920, dwThreadId=0x934)) returned 1 [0151.316] CloseHandle (hObject=0x18c) returned 1 [0151.316] CloseHandle (hObject=0xe0) returned 1 [0151.316] CloseHandle (hObject=0xf0) returned 1 [0151.316] CloseHandle (hObject=0x104) returned 1 [0151.316] CloseHandle (hObject=0xcc) returned 1 [0151.316] CloseHandle (hObject=0x1b4) returned 1 [0151.316] CloseHandle (hObject=0x154) returned 1 [0151.316] SetEvent (hEvent=0xa8) returned 1 [0151.316] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xffffffff) Thread: id = 4 os_tid = 0x9a8 [0030.645] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x324fff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x324fff38*=0x9c) returned 1 [0030.645] VirtualQuery (in: lpAddress=0x324fff48, lpBuffer=0x324fff48, dwLength=0x1c | out: lpBuffer=0x324fff48*(BaseAddress=0x324ff000, AllocationBase=0x32400000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0030.645] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xa0 [0030.645] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0030.699] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0030.913] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0030.913] ReadFile (in: hFile=0xb4, lpBuffer=0x124bc000, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfBytesRead=0x12425eb8*=0xc, lpOverlapped=0x0) returned 1 [0035.210] SetEvent (hEvent=0xac) returned 1 [0035.210] ReadFile (in: hFile=0xb4, lpBuffer=0x124c200c, nNumberOfBytesToRead=0x5f4, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c200c*, lpNumberOfBytesRead=0x12425eb8*=0xfc, lpOverlapped=0x0) returned 1 [0035.210] ReadFile (in: hFile=0xb4, lpBuffer=0x124c2108, nNumberOfBytesToRead=0x4f8, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c2108*, lpNumberOfBytesRead=0x12425eb8*=0x1, lpOverlapped=0x0) returned 1 [0035.213] ReadFile (in: hFile=0xb4, lpBuffer=0x124c2109, nNumberOfBytesToRead=0x4f7, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c2109*, lpNumberOfBytesRead=0x12425eb8*=0xe, lpOverlapped=0x0) returned 1 [0035.213] ReadFile (in: hFile=0xb4, lpBuffer=0x124c2117, nNumberOfBytesToRead=0x4e9, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c2117*, lpNumberOfBytesRead=0x12425eb8*=0x1, lpOverlapped=0x0) returned 1 [0035.244] ReadFile (in: hFile=0xb4, lpBuffer=0x124c2118, nNumberOfBytesToRead=0x4e8, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c2118*, lpNumberOfBytesRead=0x12425eb8*=0xdd, lpOverlapped=0x0) returned 1 [0035.244] ReadFile (in: hFile=0xb4, lpBuffer=0x124c21f5, nNumberOfBytesToRead=0x40b, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c21f5*, lpNumberOfBytesRead=0x12425eb8*=0x1, lpOverlapped=0x0) returned 1 [0035.284] SetEvent (hEvent=0xac) returned 1 [0035.284] ReadFile (in: hFile=0xb4, lpBuffer=0x124c21f6, nNumberOfBytesToRead=0x40a, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c21f6*, lpNumberOfBytesRead=0x12425eb8*=0x4c, lpOverlapped=0x0) returned 1 [0035.284] ReadFile (in: hFile=0xb4, lpBuffer=0x124c2242, nNumberOfBytesToRead=0x3be, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c2242*, lpNumberOfBytesRead=0x12425eb8*=0x1, lpOverlapped=0x0) returned 1 [0035.303] ReadFile (in: hFile=0xb4, lpBuffer=0x124c2243, nNumberOfBytesToRead=0x3bd, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c2243*, lpNumberOfBytesRead=0x12425eb8*=0x9b, lpOverlapped=0x0) returned 1 [0035.303] ReadFile (in: hFile=0xb4, lpBuffer=0x124c22de, nNumberOfBytesToRead=0x322, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c22de*, lpNumberOfBytesRead=0x12425eb8*=0x1, lpOverlapped=0x0) returned 1 [0035.331] ReadFile (in: hFile=0xb4, lpBuffer=0x124c22df, nNumberOfBytesToRead=0x321, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c22df*, lpNumberOfBytesRead=0x12425eb8*=0xc4, lpOverlapped=0x0) returned 1 [0035.331] ReadFile (in: hFile=0xb4, lpBuffer=0x124c23a3, nNumberOfBytesToRead=0x25d, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c23a3*, lpNumberOfBytesRead=0x12425eb8*=0x1, lpOverlapped=0x0) returned 1 [0035.336] ReadFile (in: hFile=0xb4, lpBuffer=0x124c23a4, nNumberOfBytesToRead=0x25c, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c23a4*, lpNumberOfBytesRead=0x12425eb8*=0x21, lpOverlapped=0x0) returned 1 [0035.336] ReadFile (in: hFile=0xb4, lpBuffer=0x124c23c5, nNumberOfBytesToRead=0x23b, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c23c5*, lpNumberOfBytesRead=0x12425eb8*=0x1, lpOverlapped=0x0) returned 1 [0035.367] ReadFile (in: hFile=0xb4, lpBuffer=0x124c23c6, nNumberOfBytesToRead=0x23a, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c23c6*, lpNumberOfBytesRead=0x12425eb8*=0xec, lpOverlapped=0x0) returned 1 [0035.367] ReadFile (in: hFile=0xb4, lpBuffer=0x124c44b2, nNumberOfBytesToRead=0x94e, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c44b2*, lpNumberOfBytesRead=0x12425eb8*=0x1, lpOverlapped=0x0) returned 1 [0035.391] ReadFile (in: hFile=0xb4, lpBuffer=0x124c44b3, nNumberOfBytesToRead=0x94d, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c44b3*, lpNumberOfBytesRead=0x12425eb8*=0xaf, lpOverlapped=0x0) returned 1 [0035.391] ReadFile (in: hFile=0xb4, lpBuffer=0x124c4562, nNumberOfBytesToRead=0x89e, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c4562*, lpNumberOfBytesRead=0x12425eb8*=0x3, lpOverlapped=0x0) returned 1 [0035.400] ReadFile (in: hFile=0xb4, lpBuffer=0x124c4565, nNumberOfBytesToRead=0x89b, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c4565*, lpNumberOfBytesRead=0x12425eb8*=0x51, lpOverlapped=0x0) returned 1 [0035.400] ReadFile (in: hFile=0xb4, lpBuffer=0x124c45b6, nNumberOfBytesToRead=0x84a, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c45b6*, lpNumberOfBytesRead=0x12425eb8*=0x1, lpOverlapped=0x0) returned 1 [0035.431] ReadFile (in: hFile=0xb4, lpBuffer=0x124c45b7, nNumberOfBytesToRead=0x849, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c45b7*, lpNumberOfBytesRead=0x12425eb8*=0x11d, lpOverlapped=0x0) returned 1 [0035.431] ReadFile (in: hFile=0xb4, lpBuffer=0x124c46d4, nNumberOfBytesToRead=0x72c, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c46d4*, lpNumberOfBytesRead=0x12425eb8*=0x1, lpOverlapped=0x0) returned 1 [0035.447] ReadFile (in: hFile=0xb4, lpBuffer=0x124c46d5, nNumberOfBytesToRead=0x72b, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c46d5*, lpNumberOfBytesRead=0x12425eb8*=0x61, lpOverlapped=0x0) returned 1 [0035.447] ReadFile (in: hFile=0xb4, lpBuffer=0x124c4736, nNumberOfBytesToRead=0x6ca, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c4736*, lpNumberOfBytesRead=0x12425eb8*=0x1, lpOverlapped=0x0) returned 1 [0035.465] ReadFile (in: hFile=0xb4, lpBuffer=0x124c4737, nNumberOfBytesToRead=0x6c9, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c4737*, lpNumberOfBytesRead=0x12425eb8*=0xaa, lpOverlapped=0x0) returned 1 [0035.465] ReadFile (in: hFile=0xb4, lpBuffer=0x124c47e1, nNumberOfBytesToRead=0x61f, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c47e1*, lpNumberOfBytesRead=0x12425eb8*=0x1, lpOverlapped=0x0) returned 1 [0035.506] ReadFile (in: hFile=0xb4, lpBuffer=0x124c47e2, nNumberOfBytesToRead=0x61e, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c47e2*, lpNumberOfBytesRead=0x12425eb8*=0x12f, lpOverlapped=0x0) returned 1 [0035.506] ReadFile (in: hFile=0xb4, lpBuffer=0x124c4911, nNumberOfBytesToRead=0x4ef, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c4911*, lpNumberOfBytesRead=0x12425eb8*=0x1, lpOverlapped=0x0) returned 1 [0035.534] ReadFile (in: hFile=0xb4, lpBuffer=0x124c4912, nNumberOfBytesToRead=0x4ee, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c4912*, lpNumberOfBytesRead=0x12425eb8*=0xd3, lpOverlapped=0x0) returned 1 [0035.534] ReadFile (in: hFile=0xb4, lpBuffer=0x124c49e5, nNumberOfBytesToRead=0x41b, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c49e5*, lpNumberOfBytesRead=0x12425eb8*=0x1, lpOverlapped=0x0) returned 1 [0035.561] ReadFile (in: hFile=0xb4, lpBuffer=0x124c49e6, nNumberOfBytesToRead=0x41a, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c49e6*, lpNumberOfBytesRead=0x12425eb8*=0xb1, lpOverlapped=0x0) returned 1 [0035.561] ReadFile (in: hFile=0xb4, lpBuffer=0x124c4a97, nNumberOfBytesToRead=0x369, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c4a97*, lpNumberOfBytesRead=0x12425eb8*=0xc, lpOverlapped=0x0) returned 1 [0035.566] ReadFile (in: hFile=0xb4, lpBuffer=0x124c4aa3, nNumberOfBytesToRead=0x35d, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c4aa3*, lpNumberOfBytesRead=0x12425eb8*=0x23, lpOverlapped=0x0) returned 1 [0035.567] ReadFile (in: hFile=0xb4, lpBuffer=0x124c4ac6, nNumberOfBytesToRead=0x33a, lpNumberOfBytesRead=0x12425eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c4ac6, lpNumberOfBytesRead=0x12425eb8*=0x0, lpOverlapped=0x0) returned 0 [0035.606] SetEvent (hEvent=0xac) returned 1 [0035.606] CloseHandle (hObject=0xb4) returned 1 [0035.606] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0035.931] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0036.598] SetEvent (hEvent=0xa8) returned 1 [0036.598] ReadFile (in: hFile=0xbc, lpBuffer=0x124bc200, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x124efeb8, lpOverlapped=0x0 | out: lpBuffer=0x124bc200, lpNumberOfBytesRead=0x124efeb8*=0x0, lpOverlapped=0x0) returned 0 [0037.380] SetEvent (hEvent=0xac) returned 1 [0037.380] CloseHandle (hObject=0xbc) returned 1 [0037.380] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0037.651] SetEvent (hEvent=0x7c) returned 1 [0037.651] ReadFile (in: hFile=0xc0, lpBuffer=0x124bc400, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x12420eb8, lpOverlapped=0x0 | out: lpBuffer=0x124bc400*, lpNumberOfBytesRead=0x12420eb8*=0x28, lpOverlapped=0x0) returned 1 [0039.130] SetEvent (hEvent=0xac) returned 1 [0039.130] ReadFile (in: hFile=0xc0, lpBuffer=0x127fe028, nNumberOfBytesToRead=0x5d8, lpNumberOfBytesRead=0x12420eb8, lpOverlapped=0x0 | out: lpBuffer=0x127fe028, lpNumberOfBytesRead=0x12420eb8*=0x0, lpOverlapped=0x0) returned 0 [0040.053] CloseHandle (hObject=0xc0) returned 1 [0040.053] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0041.699] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0041.715] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0042.085] SetEvent (hEvent=0xa8) returned 1 [0042.085] ReadFile (in: hFile=0xc0, lpBuffer=0x124bc600, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x124f1eb8, lpOverlapped=0x0 | out: lpBuffer=0x124bc600, lpNumberOfBytesRead=0x124f1eb8*=0x0, lpOverlapped=0x0) returned 0 [0043.059] SetEvent (hEvent=0xac) returned 1 [0043.059] CloseHandle (hObject=0xc0) returned 1 [0043.059] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0043.209] SetEvent (hEvent=0x7c) returned 1 [0043.209] ReadFile (in: hFile=0xbc, lpBuffer=0x124bc800, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x12806eb8, lpOverlapped=0x0 | out: lpBuffer=0x124bc800*, lpNumberOfBytesRead=0x12806eb8*=0x25, lpOverlapped=0x0) returned 1 [0043.962] SetEvent (hEvent=0xac) returned 1 [0043.962] ReadFile (in: hFile=0xbc, lpBuffer=0x127fe625, nNumberOfBytesToRead=0x5db, lpNumberOfBytesRead=0x12806eb8, lpOverlapped=0x0 | out: lpBuffer=0x127fe625, lpNumberOfBytesRead=0x12806eb8*=0x0, lpOverlapped=0x0) returned 0 [0044.028] SetEvent (hEvent=0xac) returned 1 [0044.028] CloseHandle (hObject=0xbc) returned 1 [0044.028] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0044.052] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0044.053] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0044.054] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0044.055] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0044.070] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0044.118] SetEvent (hEvent=0xa8) returned 1 [0044.118] ReadFile (in: hFile=0xc8, lpBuffer=0x12816000, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x124f1eb8, lpOverlapped=0x0 | out: lpBuffer=0x12816000*, lpNumberOfBytesRead=0x124f1eb8*=0x3, lpOverlapped=0x0) returned 1 [0045.486] SetEvent (hEvent=0xac) returned 1 [0045.486] ReadFile (in: hFile=0xc8, lpBuffer=0x1281a603, nNumberOfBytesToRead=0x5fd, lpNumberOfBytesRead=0x124f1eb8, lpOverlapped=0x0 | out: lpBuffer=0x1281a603*, lpNumberOfBytesRead=0x124f1eb8*=0x3, lpOverlapped=0x0) returned 1 [0045.486] ReadFile (in: hFile=0xc8, lpBuffer=0x1281a606, nNumberOfBytesToRead=0x5fa, lpNumberOfBytesRead=0x124f1eb8, lpOverlapped=0x0 | out: lpBuffer=0x1281a606, lpNumberOfBytesRead=0x124f1eb8*=0x0, lpOverlapped=0x0) returned 0 [0045.546] CloseHandle (hObject=0xc8) returned 1 [0045.546] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0045.546] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0045.651] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0045.713] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0045.851] SetEvent (hEvent=0xa8) returned 1 [0045.851] VirtualAlloc (lpAddress=0x127ea000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x127ea000 [0045.898] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0045.909] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0046.089] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0046.174] SetEvent (hEvent=0xb8) returned 1 [0046.176] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0046.176] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0046.176] SetEvent (hEvent=0xb8) returned 1 [0046.177] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0046.178] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0046.875] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0047.662] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0047.961] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0048.076] SetEvent (hEvent=0xa8) returned 1 [0048.076] VirtualAlloc (lpAddress=0x12772000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x12772000 [0048.078] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0048.078] SetEvent (hEvent=0xa8) returned 1 [0048.078] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0048.079] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0052.868] SetEvent (hEvent=0xb8) returned 1 [0052.868] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0052.981] SetEvent (hEvent=0xb8) returned 1 [0052.981] SetEvent (hEvent=0x6c) returned 1 [0052.981] SwitchToThread () returned 1 [0053.094] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0053.651] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0053.819] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0053.890] SetEvent (hEvent=0x6c) returned 1 [0053.890] VirtualAlloc (lpAddress=0x1245a000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x1245a000 [0053.891] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0054.060] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0054.060] SetEvent (hEvent=0x6c) returned 1 [0054.060] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0054.061] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0054.062] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0054.062] SetEvent (hEvent=0xac) returned 1 [0054.062] SetEvent (hEvent=0x6c) returned 1 [0054.062] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0054.062] SetEvent (hEvent=0x6c) returned 1 [0054.062] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0054.110] GetFileType (hFile=0xc8) returned 0x1 [0054.110] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.110] WriteFile (in: hFile=0xc8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0054.206] GetFileType (hFile=0xc8) returned 0x1 [0054.206] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.206] GetFileType (hFile=0xc8) returned 0x1 [0054.206] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.206] WriteFile (in: hFile=0xc8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0054.300] GetFileType (hFile=0xc8) returned 0x1 [0054.300] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.300] GetFileType (hFile=0xc8) returned 0x1 [0054.300] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.300] WriteFile (in: hFile=0xc8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0054.392] GetFileType (hFile=0xc8) returned 0x1 [0054.392] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.392] GetFileType (hFile=0xc8) returned 0x1 [0054.392] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.392] WriteFile (in: hFile=0xc8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0054.511] GetFileType (hFile=0xc8) returned 0x1 [0054.511] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.511] GetFileType (hFile=0xc8) returned 0x1 [0054.511] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.511] WriteFile (in: hFile=0xc8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0054.629] GetFileType (hFile=0xc8) returned 0x1 [0054.629] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.629] GetFileType (hFile=0xc8) returned 0x1 [0054.629] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.629] WriteFile (in: hFile=0xc8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0054.728] GetFileType (hFile=0xc8) returned 0x1 [0054.728] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.728] GetFileType (hFile=0xc8) returned 0x1 [0054.728] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.728] WriteFile (in: hFile=0xc8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0054.829] GetFileType (hFile=0xc8) returned 0x1 [0054.829] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.829] GetFileType (hFile=0xc8) returned 0x1 [0054.829] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.829] WriteFile (in: hFile=0xc8, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0054.926] GetFileType (hFile=0xc8) returned 0x1 [0054.926] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0054.926] ReadFile (in: hFile=0xc8, lpBuffer=0x13c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x13c00000*, lpNumberOfBytesRead=0x1242fb64*=0x621fcc, lpOverlapped=0x0) returned 1 [0055.061] SetEvent (hEvent=0xa8) returned 1 [0055.071] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0055.076] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0055.076] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0055.088] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0055.088] SetEvent (hEvent=0xa8) returned 1 [0055.088] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0055.186] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0055.186] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0056.020] SetEvent (hEvent=0x6c) returned 1 [0056.020] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0056.097] SetEvent (hEvent=0x6c) returned 1 [0056.097] CloseHandle (hObject=0xbc) returned 1 [0056.097] CloseHandle (hObject=0xc0) returned 1 [0056.097] CloseHandle (hObject=0x98) returned 1 [0056.097] CloseHandle (hObject=0xc8) returned 1 [0056.097] SwitchToThread () returned 1 [0056.098] SetEvent (hEvent=0x6c) returned 1 [0056.098] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0056.098] SetEvent (hEvent=0x6c) returned 1 [0056.098] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0056.098] SetEvent (hEvent=0x6c) returned 1 [0056.098] SwitchToThread () returned 1 [0056.201] SetEvent (hEvent=0xa8) returned 1 [0056.201] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0057.409] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0057.447] SetEvent (hEvent=0x6c) returned 1 [0057.447] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0057.453] SetEvent (hEvent=0x6c) returned 1 [0057.453] SwitchToThread () returned 1 [0057.523] SetEvent (hEvent=0xa8) returned 1 [0057.524] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0057.911] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0058.038] SetEvent (hEvent=0x6c) returned 1 [0058.038] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0058.052] SetEvent (hEvent=0x6c) returned 1 [0058.052] SwitchToThread () returned 1 [0058.145] SetEvent (hEvent=0xa8) returned 1 [0058.145] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0059.252] SetEvent (hEvent=0x7c) returned 1 [0059.252] SwitchToThread () returned 1 [0059.305] VirtualAlloc (lpAddress=0x124a0000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x124a0000 [0059.306] SetEvent (hEvent=0x7c) returned 1 [0059.306] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0059.378] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0059.378] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0059.378] SetEvent (hEvent=0xac) returned 1 [0059.378] SetEvent (hEvent=0x7c) returned 1 [0059.378] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0059.379] SetEvent (hEvent=0x7c) returned 1 [0059.379] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0059.425] GetFileType (hFile=0xe4) returned 0x1 [0059.425] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0059.425] WriteFile (in: hFile=0xe4, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0059.519] GetFileType (hFile=0xe4) returned 0x1 [0059.519] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0059.519] GetFileType (hFile=0xe4) returned 0x1 [0059.519] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0059.519] WriteFile (in: hFile=0xe4, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0059.613] GetFileType (hFile=0xe4) returned 0x1 [0059.613] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0059.613] GetFileType (hFile=0xe4) returned 0x1 [0059.613] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0059.613] WriteFile (in: hFile=0xe4, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0059.706] GetFileType (hFile=0xe4) returned 0x1 [0059.706] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0059.706] GetFileType (hFile=0xe4) returned 0x1 [0059.706] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0059.706] WriteFile (in: hFile=0xe4, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0059.799] GetFileType (hFile=0xe4) returned 0x1 [0059.799] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0059.799] GetFileType (hFile=0xe4) returned 0x1 [0059.799] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0059.799] WriteFile (in: hFile=0xe4, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0059.891] GetFileType (hFile=0xe4) returned 0x1 [0059.891] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0059.892] GetFileType (hFile=0xe4) returned 0x1 [0059.892] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0059.892] WriteFile (in: hFile=0xe4, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0059.985] GetFileType (hFile=0xe4) returned 0x1 [0059.985] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0059.985] GetFileType (hFile=0xe4) returned 0x1 [0059.985] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0059.985] WriteFile (in: hFile=0xe4, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0060.118] GetFileType (hFile=0xe4) returned 0x1 [0060.118] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0060.118] GetFileType (hFile=0xe4) returned 0x1 [0060.118] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0060.118] WriteFile (in: hFile=0xe4, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0060.412] GetFileType (hFile=0xe4) returned 0x1 [0060.412] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0060.412] ReadFile (in: hFile=0xe4, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429abc*=0x2f35ed, lpOverlapped=0x0) returned 1 [0060.436] VirtualAlloc (lpAddress=0x13dc8000, dwSize=0x2f4000, flAllocationType=0x1000, flProtect=0x4) returned 0x13dc8000 [0060.470] VirtualAlloc (lpAddress=0x140bc000, dwSize=0x2f4000, flAllocationType=0x1000, flProtect=0x4) returned 0x140bc000 [0060.502] SetEvent (hEvent=0x6c) returned 1 [0060.520] GetFileType (hFile=0xe4) returned 0x1 [0060.520] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0060.520] WriteFile (in: hFile=0xe4, lpBuffer=0x13dc8000*, nNumberOfBytesToWrite=0x2f35ed, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13dc8000*, lpNumberOfBytesWritten=0x12429aa0*=0x2f35ed, lpOverlapped=0x12429aac) returned 1 [0060.548] GetFileType (hFile=0xe4) returned 0x1 [0060.548] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0xaf35ed, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0060.548] ReadFile (in: hFile=0xe4, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0060.548] CloseHandle (hObject=0xe4) returned 1 [0060.844] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0060.844] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0060.854] WriteFile (in: hFile=0xe4, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0060.854] CloseHandle (hObject=0xe4) returned 1 [0061.127] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x6f, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x12429774*=0x6f) returned 1 [0061.143] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00)) returned 1 [0061.143] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543)) returned 1 [0061.143] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.143] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0061.143] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.143] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0061.143] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0061.143] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.en/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0061.143] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0061.153] CloseHandle (hObject=0xe4) returned 1 [0061.153] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.153] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0061.153] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0061.153] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0061.160] WriteFile (in: hFile=0xe4, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0061.161] CloseHandle (hObject=0xe4) returned 1 [0061.161] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\@_read_to_recover_files_@.txt")) returned 0x2020 [0061.161] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0061.162] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.162] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd726c850, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd726c850, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0061.162] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd726c850, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd726c850, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.162] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xd726c850, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xd726c850, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd72800d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0061.162] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0061.162] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0061.162] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0061.162] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.162] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0061.162] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0061.162] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0061.162] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0061.171] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0061.236] ReadFile (in: hFile=0xe4, lpBuffer=0x124d0000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0061.256] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0061.256] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0061.265] VirtualAlloc (lpAddress=0x127bc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x127bc000 [0061.265] ReadFile (in: hFile=0x98, lpBuffer=0x127bc000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127bc000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0061.275] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0061.275] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0061.289] ReadFile (in: hFile=0xc0, lpBuffer=0x127bc100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127bc100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0061.295] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea)) returned 1 [0061.295] VirtualAlloc (lpAddress=0x127be000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x127be000 [0061.295] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-002C-0409-1000-0000000FF1CE}-C/Proof.es/Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0061.296] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0061.298] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1 [0061.298] VirtualAlloc (lpAddress=0x127c0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x127c0000 [0061.299] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127bc202 | out: pbBuffer=0x127bc202) returned 1 [0061.299] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127bc23c | out: pbBuffer=0x127bc23c) returned 1 [0061.300] SetEvent (hEvent=0x7c) returned 1 [0061.300] ReadFile (in: hFile=0xbc, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429abc*=0x800000, lpOverlapped=0x0) returned 1 [0061.479] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0061.518] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0061.770] SetEvent (hEvent=0x6c) returned 1 [0061.770] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0061.867] SetEvent (hEvent=0x6c) returned 1 [0061.867] SwitchToThread () returned 1 [0061.966] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0062.619] SetEvent (hEvent=0x7c) returned 1 [0062.619] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0062.638] SetEvent (hEvent=0x6c) returned 1 [0062.653] SwitchToThread () returned 1 [0062.752] SetEvent (hEvent=0x6c) returned 1 [0062.752] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0062.849] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0062.849] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0062.946] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0062.946] SetEvent (hEvent=0xb8) returned 1 [0062.946] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0063.063] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0063.063] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0068.092] SetEvent (hEvent=0x6c) returned 1 [0068.092] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0068.155] SetEvent (hEvent=0x6c) returned 1 [0068.155] SetEvent (hEvent=0x7c) returned 1 [0068.155] SetEvent (hEvent=0xb8) returned 1 [0068.155] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0071.158] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0071.178] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0071.757] SetEvent (hEvent=0x6c) returned 1 [0071.757] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0071.757] SetEvent (hEvent=0x6c) returned 1 [0071.757] SwitchToThread () returned 1 [0071.859] SetEvent (hEvent=0x7c) returned 1 [0071.859] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0072.913] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0072.936] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0073.033] SetEvent (hEvent=0x7c) returned 1 [0073.033] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0073.101] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0073.101] SetEvent (hEvent=0x7c) returned 1 [0073.101] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0073.109] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0073.109] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0073.152] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0073.152] SetEvent (hEvent=0xac) returned 1 [0073.152] SetEvent (hEvent=0x7c) returned 1 [0073.152] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0073.154] SetEvent (hEvent=0x7c) returned 1 [0073.154] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0073.205] GetFileType (hFile=0xc0) returned 0x1 [0073.205] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0073.205] WriteFile (in: hFile=0xc0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x7e1dcd, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x7e1dcd, lpOverlapped=0x12429b54) returned 1 [0073.306] GetFileType (hFile=0xc0) returned 0x1 [0073.306] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x7e1dcd, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0073.306] ReadFile (in: hFile=0xc0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0073.306] CloseHandle (hObject=0xc0) returned 1 [0073.306] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0073.307] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0073.308] WriteFile (in: hFile=0xc0, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0073.308] CloseHandle (hObject=0xc0) returned 1 [0073.308] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124de000*, nNumberOfCharsToWrite=0x67, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124de000*, lpNumberOfCharsWritten=0x1242981c*=0x67) returned 1 [0073.310] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400)) returned 1 [0073.310] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1 [0073.310] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0073.311] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.311] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0073.311] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.311] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0073.311] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0073.311] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00B4-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0073.311] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0073.338] CloseHandle (hObject=0xc0) returned 1 [0073.338] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.339] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0073.339] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0073.339] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0073.392] WriteFile (in: hFile=0xc0, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0073.394] CloseHandle (hObject=0xc0) returned 1 [0073.394] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0073.394] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0073.394] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.394] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xde1ed710, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xde1ed710, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0073.394] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xde1ed710, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xde1ed710, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.394] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xde1ed710, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xde1ed710, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xde26ed60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0073.394] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0073.394] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0073.394] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0073.395] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0073.395] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0073.395] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0073.395] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0073.395] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0073.395] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0073.396] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.462] ReadFile (in: hFile=0xc0, lpBuffer=0x127bc600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x127bc600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.517] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0073.517] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.571] ReadFile (in: hFile=0xbc, lpBuffer=0x124c4000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.627] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0073.627] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.655] ReadFile (in: hFile=0xe4, lpBuffer=0x124c4100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4100*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.657] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0073.657] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0073.665] ReadFile (in: hFile=0x98, lpBuffer=0x124c4200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0073.675] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f)) returned 1 [0073.675] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-00BA-0409-1000-0000000FF1CE}-C/GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0073.675] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0073.695] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0073.696] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2080 | out: pbBuffer=0x124e2080) returned 1 [0073.696] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c4302 | out: pbBuffer=0x124c4302) returned 1 [0073.696] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c4345 | out: pbBuffer=0x124c4345) returned 1 [0073.696] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c4376 | out: pbBuffer=0x124c4376) returned 1 [0073.697] SetEvent (hEvent=0x6c) returned 1 [0073.697] ReadFile (in: hFile=0xdc, lpBuffer=0x133e2000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x133e2000*, lpNumberOfBytesRead=0x12429b64*=0x3e7e1f, lpOverlapped=0x0) returned 1 [0073.765] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0073.767] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0073.834] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0074.006] SetEvent (hEvent=0x7c) returned 1 [0074.006] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0074.084] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0074.084] SetEvent (hEvent=0x7c) returned 1 [0074.084] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0074.087] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0074.087] SetEvent (hEvent=0xac) returned 1 [0074.087] SetEvent (hEvent=0x7c) returned 1 [0074.088] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0074.088] SetEvent (hEvent=0x7c) returned 1 [0074.088] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0074.089] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0074.089] SetEvent (hEvent=0xac) returned 1 [0074.090] SetEvent (hEvent=0x7c) returned 1 [0074.134] GetFileType (hFile=0x100) returned 0x1 [0074.134] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.134] WriteFile (in: hFile=0x100, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0074.227] GetFileType (hFile=0x100) returned 0x1 [0074.227] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.228] GetFileType (hFile=0x100) returned 0x1 [0074.228] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.228] WriteFile (in: hFile=0x100, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0074.324] GetFileType (hFile=0x100) returned 0x1 [0074.324] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.324] GetFileType (hFile=0x100) returned 0x1 [0074.324] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.324] WriteFile (in: hFile=0x100, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0074.419] GetFileType (hFile=0x100) returned 0x1 [0074.419] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.419] GetFileType (hFile=0x100) returned 0x1 [0074.419] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.419] WriteFile (in: hFile=0x100, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0074.520] GetFileType (hFile=0x100) returned 0x1 [0074.520] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.520] GetFileType (hFile=0x100) returned 0x1 [0074.520] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.520] WriteFile (in: hFile=0x100, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0074.613] GetFileType (hFile=0x100) returned 0x1 [0074.613] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.613] GetFileType (hFile=0x100) returned 0x1 [0074.613] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.613] WriteFile (in: hFile=0x100, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0074.706] GetFileType (hFile=0x100) returned 0x1 [0074.706] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.706] GetFileType (hFile=0x100) returned 0x1 [0074.706] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.706] WriteFile (in: hFile=0x100, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0074.798] GetFileType (hFile=0x100) returned 0x1 [0074.798] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.798] GetFileType (hFile=0x100) returned 0x1 [0074.798] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.798] WriteFile (in: hFile=0x100, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0074.891] GetFileType (hFile=0x100) returned 0x1 [0074.891] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.892] ReadFile (in: hFile=0x100, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x579282, lpOverlapped=0x0) returned 1 [0074.963] SetEvent (hEvent=0x6c) returned 1 [0074.996] GetFileType (hFile=0x100) returned 0x1 [0074.996] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0074.996] WriteFile (in: hFile=0x100, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x579282, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x579282, lpOverlapped=0x12429b54) returned 1 [0075.064] GetFileType (hFile=0x100) returned 0x1 [0075.064] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0xd79282, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0075.064] ReadFile (in: hFile=0x100, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0075.065] CloseHandle (hObject=0x100) returned 1 [0075.065] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0075.065] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0075.065] WriteFile (in: hFile=0x100, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0075.066] CloseHandle (hObject=0x100) returned 1 [0075.066] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d8000*, nNumberOfCharsToWrite=0x69, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124d8000*, lpNumberOfCharsWritten=0x1242981c*=0x69) returned 1 [0075.067] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00)) returned 1 [0075.067] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5)) returned 1 [0075.067] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1 [0075.067] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1 [0075.067] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488)) returned 1 [0075.067] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0075.067] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975)) returned 1 [0075.067] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760)) returned 1 [0075.067] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0)) returned 1 [0075.068] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200)) returned 1 [0075.068] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80)) returned 1 [0075.068] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b)) returned 1 [0075.068] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0075.068] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0075.068] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1 [0075.069] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c4002 | out: pbBuffer=0x124c4002) returned 1 [0075.069] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c404c | out: pbBuffer=0x124c404c) returned 1 [0075.069] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c40aa | out: pbBuffer=0x124c40aa) returned 1 [0075.070] ReadFile (in: hFile=0x100, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x6a3b, lpOverlapped=0x0) returned 1 [0075.071] VirtualAlloc (lpAddress=0x12bd4000, dwSize=0x14000, flAllocationType=0x1000, flProtect=0x4) returned 0x12bd4000 [0075.072] GetFileType (hFile=0x100) returned 0x1 [0075.072] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0075.072] WriteFile (in: hFile=0x100, lpBuffer=0x12bd4000*, nNumberOfBytesToWrite=0x6a3b, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12bd4000*, lpNumberOfBytesWritten=0x12429b48*=0x6a3b, lpOverlapped=0x12429b54) returned 1 [0075.073] GetFileType (hFile=0x100) returned 0x1 [0075.073] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x6a3b, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0075.073] ReadFile (in: hFile=0x100, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0075.073] CloseHandle (hObject=0x100) returned 1 [0075.073] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0075.073] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0075.074] WriteFile (in: hFile=0x100, lpBuffer=0x12466fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12466fc0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0075.074] CloseHandle (hObject=0x100) returned 1 [0075.074] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d4000*, nNumberOfCharsToWrite=0x67, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124d4000*, lpNumberOfCharsWritten=0x1242981c*=0x67) returned 1 [0075.075] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676)) returned 1 [0075.075] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0075.075] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0075.075] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e320 | out: pbBuffer=0x1240e320) returned 1 [0075.076] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c4202 | out: pbBuffer=0x124c4202) returned 1 [0075.077] SetEvent (hEvent=0xb8) returned 1 [0075.077] ReadFile (in: hFile=0x100, lpBuffer=0x136f4000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x136f4000*, lpNumberOfBytesRead=0x12429b64*=0x10676, lpOverlapped=0x0) returned 1 [0075.078] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0075.078] SetEvent (hEvent=0xb8) returned 1 [0075.078] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0075.078] VirtualAlloc (lpAddress=0x124a8000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0x124a8000 [0075.079] VirtualAlloc (lpAddress=0x126f4000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0x126f4000 [0075.081] GetFileType (hFile=0x100) returned 0x1 [0075.081] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0075.081] WriteFile (in: hFile=0x100, lpBuffer=0x124a8000*, nNumberOfBytesToWrite=0x10676, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124a8000*, lpNumberOfBytesWritten=0x12429b48*=0x10676, lpOverlapped=0x12429b54) returned 1 [0075.082] GetFileType (hFile=0x100) returned 0x1 [0075.082] SetFilePointerEx (in: hFile=0x100, liDistanceToMove=0x10676, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0075.082] ReadFile (in: hFile=0x100, lpBuffer=0x136f4000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x136f4000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0075.082] CloseHandle (hObject=0x100) returned 1 [0075.082] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0075.082] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0075.082] WriteFile (in: hFile=0x100, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0075.082] CloseHandle (hObject=0x100) returned 1 [0075.083] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d8000*, nNumberOfCharsToWrite=0x66, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124d8000*, lpNumberOfCharsWritten=0x1242981c*=0x66) returned 1 [0075.083] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.084] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.084] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0075.084] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0075.084] WriteFile (in: hFile=0x100, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0075.085] CloseHandle (hObject=0x100) returned 1 [0075.085] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\@_read_to_recover_files_@.txt")) returned 0x2020 [0075.085] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0075.086] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.086] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf22c220, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdf22c220, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0075.086] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf22c220, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdf22c220, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.086] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xdf22c220, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xdf22c220, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdf22e930, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0075.086] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0075.086] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.086] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0075.086] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.086] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.086] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0075.086] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0075.087] ReadFile (in: hFile=0x100, lpBuffer=0x124c4000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c4000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0075.090] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588)) returned 1 [0075.092] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.092] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.092] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.092] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.092] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0075.092] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/1033/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0075.092] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0075.092] CloseHandle (hObject=0xdc) returned 1 [0075.092] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.093] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.093] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.093] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.093] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0075.093] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0115-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0075.093] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0075.093] CloseHandle (hObject=0xdc) returned 1 [0075.093] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.094] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.094] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0075.095] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0075.095] WriteFile (in: hFile=0xdc, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0075.096] CloseHandle (hObject=0xdc) returned 1 [0075.096] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0075.096] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0075.096] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.096] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf2448c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdf2448c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0075.096] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf2448c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdf2448c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.097] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xdf2448c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xdf2448c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdf2496e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0075.097] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0075.097] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0075.097] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0075.097] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0075.097] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.097] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0075.097] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.097] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.097] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.097] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0075.099] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0075.100] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0075.100] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0075.100] ReadFile (in: hFile=0xdc, lpBuffer=0x124c4b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4b00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0075.102] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0075.102] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0075.102] ReadFile (in: hFile=0xc0, lpBuffer=0x124c4c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4c00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0075.105] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0075.105] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0075.105] ReadFile (in: hFile=0xbc, lpBuffer=0x124c4d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4d00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0075.107] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1 [0075.107] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1 [0075.107] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0075.107] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.107] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.107] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.107] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.107] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0075.107] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0075.107] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0075.108] CloseHandle (hObject=0xe4) returned 1 [0075.108] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.109] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.109] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0075.109] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0075.109] WriteFile (in: hFile=0xe4, lpBuffer=0x124a2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124a2600*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0075.110] CloseHandle (hObject=0xe4) returned 1 [0075.110] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\@_read_to_recover_files_@.txt")) returned 0x2020 [0075.110] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0075.111] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.111] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf2692b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdf2692b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0075.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf2692b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdf2692b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xdf2692b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xdf2692b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xdf26b9c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0075.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0075.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0075.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0075.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0075.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.111] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0075.111] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0075.111] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0075.111] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0075.112] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0075.112] ReadFile (in: hFile=0xe4, lpBuffer=0x124c5300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c5300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0075.114] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0075.115] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0075.116] ReadFile (in: hFile=0x98, lpBuffer=0x124c5400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c5400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0075.118] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0075.119] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0075.119] ReadFile (in: hFile=0xd0, lpBuffer=0x124c5500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c5500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0075.121] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0075.121] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0075.121] ReadFile (in: hFile=0xc8, lpBuffer=0x124c5600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c5600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0075.123] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94)) returned 1 [0075.123] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0075.123] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0075.123] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e580 | out: pbBuffer=0x1240e580) returned 1 [0075.125] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2284 | out: pbBuffer=0x124e2284) returned 1 [0075.125] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c5702 | out: pbBuffer=0x124c5702) returned 1 [0075.125] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c574c | out: pbBuffer=0x124c574c) returned 1 [0075.126] SetEvent (hEvent=0xb8) returned 1 [0075.126] ReadFile (in: hFile=0xe0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429abc*=0x800000, lpOverlapped=0x0) returned 1 [0075.322] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0075.324] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0075.556] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0076.516] SetEvent (hEvent=0xb8) returned 1 [0076.516] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0076.532] SetEvent (hEvent=0xb8) returned 1 [0076.532] SwitchToThread () returned 1 [0076.612] SetEvent (hEvent=0x7c) returned 1 [0076.612] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0076.955] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0077.088] SetEvent (hEvent=0xb8) returned 1 [0077.088] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0077.094] SetEvent (hEvent=0xb8) returned 1 [0077.094] SwitchToThread () returned 1 [0077.102] SetEvent (hEvent=0x7c) returned 1 [0077.103] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0077.180] SetEvent (hEvent=0x7c) returned 1 [0077.180] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0077.181] SetEvent (hEvent=0x7c) returned 1 [0077.181] SetEvent (hEvent=0x6c) returned 1 [0077.181] CloseHandle (hObject=0xec) returned 1 [0077.181] CloseHandle (hObject=0xe8) returned 1 [0077.181] CloseHandle (hObject=0xcc) returned 1 [0077.181] CloseHandle (hObject=0xd8) returned 1 [0077.181] CloseHandle (hObject=0xc8) returned 1 [0077.181] CloseHandle (hObject=0xd0) returned 1 [0077.181] CloseHandle (hObject=0x98) returned 1 [0077.181] CloseHandle (hObject=0xe4) returned 1 [0077.181] CloseHandle (hObject=0xbc) returned 1 [0077.181] CloseHandle (hObject=0xc0) returned 1 [0077.181] CloseHandle (hObject=0xdc) returned 1 [0077.181] CloseHandle (hObject=0x100) returned 1 [0077.182] CloseHandle (hObject=0xe0) returned 1 [0077.397] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0077.593] SetEvent (hEvent=0x6c) returned 1 [0077.593] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0077.763] SetEvent (hEvent=0x6c) returned 1 [0077.763] SwitchToThread () returned 1 [0077.918] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0078.977] SetEvent (hEvent=0xb8) returned 1 [0078.978] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0078.978] SetEvent (hEvent=0xb8) returned 1 [0078.978] SwitchToThread () returned 1 [0079.065] SetEvent (hEvent=0x6c) returned 1 [0079.065] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0079.422] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0079.541] SetEvent (hEvent=0xb8) returned 1 [0079.541] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0079.606] SetEvent (hEvent=0xb8) returned 1 [0079.606] SwitchToThread () returned 1 [0079.662] SetEvent (hEvent=0x6c) returned 1 [0079.662] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0080.045] SetEvent (hEvent=0x6c) returned 1 [0080.045] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0080.049] SetEvent (hEvent=0x6c) returned 1 [0080.049] SetEvent (hEvent=0xb8) returned 1 [0080.049] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0080.049] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0080.056] WriteFile (in: hFile=0xf0, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0080.056] CloseHandle (hObject=0xf0) returned 1 [0080.057] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124de000*, nNumberOfCharsToWrite=0x69, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124de000*, lpNumberOfCharsWritten=0x1242981c*=0x69) returned 1 [0080.059] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1 [0080.059] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1 [0080.059] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1 [0080.059] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00)) returned 1 [0080.059] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4)) returned 1 [0080.059] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb)) returned 1 [0080.059] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0080.060] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0080.060] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e220 | out: pbBuffer=0x1240e220) returned 1 [0080.061] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0080.061] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c4002 | out: pbBuffer=0x124c4002) returned 1 [0080.061] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c4025 | out: pbBuffer=0x124c4025) returned 1 [0080.063] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0080.269] SetEvent (hEvent=0xb8) returned 1 [0080.270] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0080.270] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0080.270] SetEvent (hEvent=0xb8) returned 1 [0080.270] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0080.317] GetFileType (hFile=0xf0) returned 0x1 [0080.317] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.317] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0080.411] GetFileType (hFile=0xf0) returned 0x1 [0080.411] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.411] GetFileType (hFile=0xf0) returned 0x1 [0080.411] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.411] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0080.505] GetFileType (hFile=0xf0) returned 0x1 [0080.505] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.505] GetFileType (hFile=0xf0) returned 0x1 [0080.505] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.505] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0080.597] GetFileType (hFile=0xf0) returned 0x1 [0080.597] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.598] GetFileType (hFile=0xf0) returned 0x1 [0080.598] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.598] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0080.701] GetFileType (hFile=0xf0) returned 0x1 [0080.701] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.701] GetFileType (hFile=0xf0) returned 0x1 [0080.701] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.701] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0080.795] GetFileType (hFile=0xf0) returned 0x1 [0080.795] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.795] GetFileType (hFile=0xf0) returned 0x1 [0080.795] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.795] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0080.887] GetFileType (hFile=0xf0) returned 0x1 [0080.887] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.887] GetFileType (hFile=0xf0) returned 0x1 [0080.887] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.887] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0080.979] GetFileType (hFile=0xf0) returned 0x1 [0080.979] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.979] GetFileType (hFile=0xf0) returned 0x1 [0080.979] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0080.980] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0081.072] GetFileType (hFile=0xf0) returned 0x1 [0081.072] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0081.072] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0081.231] SetEvent (hEvent=0x6c) returned 1 [0081.232] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0081.232] SetEvent (hEvent=0x6c) returned 1 [0081.232] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0081.280] GetFileType (hFile=0xf0) returned 0x1 [0081.280] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0081.280] WriteFile (in: hFile=0xf0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0081.375] GetFileType (hFile=0xf0) returned 0x1 [0081.375] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0081.376] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0081.522] SetEvent (hEvent=0xb8) returned 1 [0081.523] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0081.523] SetEvent (hEvent=0xb8) returned 1 [0081.523] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0081.524] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0081.525] SetEvent (hEvent=0xac) returned 1 [0081.525] SetEvent (hEvent=0xb8) returned 1 [0081.588] GetFileType (hFile=0xf0) returned 0x1 [0081.589] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0081.589] WriteFile (in: hFile=0xf0, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0081.704] GetFileType (hFile=0xf0) returned 0x1 [0081.704] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x1800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0081.704] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0081.853] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0081.924] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0082.141] SetEvent (hEvent=0x7c) returned 1 [0082.141] SetEvent (hEvent=0x6c) returned 1 [0082.141] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0082.763] SetEvent (hEvent=0x6c) returned 1 [0082.763] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0082.774] SetEvent (hEvent=0x6c) returned 1 [0082.774] SetEvent (hEvent=0x7c) returned 1 [0082.775] VirtualAlloc (lpAddress=0x13c00000, dwSize=0x800000, flAllocationType=0x1000, flProtect=0x4) returned 0x13c00000 [0082.856] SwitchToThread () returned 1 [0082.862] SetEvent (hEvent=0x6c) returned 1 [0082.862] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0082.976] SetEvent (hEvent=0x7c) returned 1 [0082.977] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0083.224] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0083.224] SetEvent (hEvent=0x7c) returned 1 [0083.224] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0083.288] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0083.288] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0083.315] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0083.315] SetEvent (hEvent=0xac) returned 1 [0083.315] SetEvent (hEvent=0x7c) returned 1 [0083.359] GetFileType (hFile=0xf0) returned 0x1 [0083.359] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0083.360] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0083.462] GetFileType (hFile=0xf0) returned 0x1 [0083.462] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x3800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0083.462] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0083.645] SwitchToThread () returned 1 [0083.697] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0084.057] SetEvent (hEvent=0x6c) returned 1 [0084.057] SetEvent (hEvent=0xb8) returned 1 [0084.057] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0084.789] SetEvent (hEvent=0xb8) returned 1 [0084.789] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0084.900] SetEvent (hEvent=0xb8) returned 1 [0084.900] SetEvent (hEvent=0x6c) returned 1 [0084.902] SwitchToThread () returned 1 [0084.941] SetEvent (hEvent=0xb8) returned 1 [0084.941] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0085.049] SetEvent (hEvent=0x6c) returned 1 [0085.049] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0085.214] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0085.214] SetEvent (hEvent=0x6c) returned 1 [0085.214] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0085.241] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0085.241] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0085.242] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0085.242] SetEvent (hEvent=0xac) returned 1 [0085.242] SetEvent (hEvent=0x6c) returned 1 [0085.290] GetFileType (hFile=0xf0) returned 0x1 [0085.290] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0085.290] WriteFile (in: hFile=0xf0, lpBuffer=0x15400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x15400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0085.387] GetFileType (hFile=0xf0) returned 0x1 [0085.387] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x5800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0085.387] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0085.550] SwitchToThread () returned 1 [0085.553] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0085.840] SetEvent (hEvent=0xb8) returned 1 [0085.840] SetEvent (hEvent=0x7c) returned 1 [0085.840] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0086.445] SetEvent (hEvent=0x7c) returned 1 [0086.445] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0086.445] SetEvent (hEvent=0x7c) returned 1 [0086.445] SetEvent (hEvent=0xb8) returned 1 [0086.447] SwitchToThread () returned 1 [0086.448] SetEvent (hEvent=0x7c) returned 1 [0086.448] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0086.543] SetEvent (hEvent=0xb8) returned 1 [0086.544] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0086.704] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0086.704] SetEvent (hEvent=0xb8) returned 1 [0086.704] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0086.733] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0086.733] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0086.741] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0086.741] SetEvent (hEvent=0xac) returned 1 [0086.741] SetEvent (hEvent=0xb8) returned 1 [0086.785] GetFileType (hFile=0xf0) returned 0x1 [0086.785] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0086.785] WriteFile (in: hFile=0xf0, lpBuffer=0x15400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x15400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0086.876] GetFileType (hFile=0xf0) returned 0x1 [0086.877] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x7800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0086.877] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0087.040] SwitchToThread () returned 1 [0087.041] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0087.331] SetEvent (hEvent=0x7c) returned 1 [0087.331] SetEvent (hEvent=0x6c) returned 1 [0087.331] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0087.596] SetEvent (hEvent=0x6c) returned 1 [0087.596] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0087.596] SetEvent (hEvent=0x6c) returned 1 [0087.596] SetEvent (hEvent=0x7c) returned 1 [0087.598] SwitchToThread () returned 1 [0087.599] SetEvent (hEvent=0x6c) returned 1 [0087.599] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0087.694] SetEvent (hEvent=0x7c) returned 1 [0087.694] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0087.931] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0087.931] SetEvent (hEvent=0x7c) returned 1 [0087.931] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0088.038] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0088.038] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0088.055] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0088.055] SetEvent (hEvent=0xac) returned 1 [0088.055] SetEvent (hEvent=0x7c) returned 1 [0088.099] GetFileType (hFile=0xf0) returned 0x1 [0088.099] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0088.099] WriteFile (in: hFile=0xf0, lpBuffer=0x15400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x15400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0088.206] GetFileType (hFile=0xf0) returned 0x1 [0088.206] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x9800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0088.206] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0088.402] SwitchToThread () returned 1 [0088.456] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0088.758] SetEvent (hEvent=0x6c) returned 1 [0088.758] SetEvent (hEvent=0xb8) returned 1 [0088.758] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0125.304] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0125.557] SetEvent (hEvent=0x7c) returned 1 [0125.557] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0125.558] SetEvent (hEvent=0x7c) returned 1 [0125.558] SetEvent (hEvent=0xb8) returned 1 [0125.558] CloseHandle (hObject=0x10c) returned 1 [0125.559] CloseHandle (hObject=0x108) returned 1 [0125.559] CloseHandle (hObject=0x104) returned 1 [0125.559] CloseHandle (hObject=0xfc) returned 1 [0125.559] CloseHandle (hObject=0xf8) returned 1 [0125.559] CloseHandle (hObject=0xf4) returned 1 [0125.559] CloseHandle (hObject=0xec) returned 1 [0125.559] CloseHandle (hObject=0xe0) returned 1 [0125.559] CloseHandle (hObject=0xcc) returned 1 [0125.559] CloseHandle (hObject=0xd8) returned 1 [0125.559] CloseHandle (hObject=0xc8) returned 1 [0125.560] CloseHandle (hObject=0xd0) returned 1 [0125.560] CloseHandle (hObject=0x98) returned 1 [0125.560] CloseHandle (hObject=0xc0) returned 1 [0125.560] CloseHandle (hObject=0x13c) returned 1 [0125.560] CloseHandle (hObject=0x138) returned 1 [0125.560] CloseHandle (hObject=0x134) returned 1 [0125.560] CloseHandle (hObject=0x130) returned 1 [0125.560] CloseHandle (hObject=0x12c) returned 1 [0125.560] CloseHandle (hObject=0x128) returned 1 [0125.560] CloseHandle (hObject=0x124) returned 1 [0125.560] CloseHandle (hObject=0x120) returned 1 [0125.560] CloseHandle (hObject=0x118) returned 1 [0125.560] CloseHandle (hObject=0xf0) returned 1 [0125.560] CloseHandle (hObject=0x114) returned 1 [0125.561] CloseHandle (hObject=0x110) returned 1 [0125.561] SwitchToThread () returned 1 [0125.562] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0125.594] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0125.615] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0125.635] SetEvent (hEvent=0xb8) returned 1 [0125.636] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0125.637] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0125.637] SetEvent (hEvent=0xb8) returned 1 [0125.637] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0125.640] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0125.640] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0126.121] SwitchToThread () returned 1 [0126.122] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0126.124] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0126.128] SetEvent (hEvent=0xb8) returned 1 [0126.128] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0126.129] SetEvent (hEvent=0xb8) returned 1 [0126.129] SwitchToThread () returned 1 [0126.130] SetEvent (hEvent=0x7c) returned 1 [0126.130] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0126.136] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0126.311] SetEvent (hEvent=0x7c) returned 1 [0126.312] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0126.313] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0126.313] SetEvent (hEvent=0x7c) returned 1 [0126.313] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0126.316] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0126.317] CloseHandle (hObject=0x150) returned 1 [0126.317] CloseHandle (hObject=0x14c) returned 1 [0126.317] CloseHandle (hObject=0x148) returned 1 [0126.317] CloseHandle (hObject=0x144) returned 1 [0126.317] CloseHandle (hObject=0x16c) returned 1 [0126.317] CloseHandle (hObject=0x168) returned 1 [0126.317] CloseHandle (hObject=0x164) returned 1 [0126.317] CloseHandle (hObject=0x160) returned 1 [0126.317] CloseHandle (hObject=0x15c) returned 1 [0126.317] CloseHandle (hObject=0x184) returned 1 [0126.317] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0126.498] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0127.102] SetEvent (hEvent=0x6c) returned 1 [0127.102] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0127.104] SetEvent (hEvent=0x6c) returned 1 [0127.104] SetEvent (hEvent=0x7c) returned 1 [0127.104] CloseHandle (hObject=0x12c) returned 1 [0127.104] CloseHandle (hObject=0x128) returned 1 [0127.104] CloseHandle (hObject=0x124) returned 1 [0127.104] CloseHandle (hObject=0x118) returned 1 [0127.104] CloseHandle (hObject=0xc8) returned 1 [0127.104] CloseHandle (hObject=0xd0) returned 1 [0127.104] CloseHandle (hObject=0x98) returned 1 [0127.104] CloseHandle (hObject=0xc0) returned 1 [0127.104] CloseHandle (hObject=0x13c) returned 1 [0127.104] CloseHandle (hObject=0x168) returned 1 [0127.105] CloseHandle (hObject=0x164) returned 1 [0127.105] CloseHandle (hObject=0x160) returned 1 [0127.105] CloseHandle (hObject=0x10c) returned 1 [0127.105] CloseHandle (hObject=0x108) returned 1 [0127.105] CloseHandle (hObject=0x104) returned 1 [0127.105] CloseHandle (hObject=0xfc) returned 1 [0127.105] CloseHandle (hObject=0x150) returned 1 [0127.105] CloseHandle (hObject=0x15c) returned 1 [0127.105] CloseHandle (hObject=0x184) returned 1 [0127.105] CloseHandle (hObject=0x138) returned 1 [0127.105] CloseHandle (hObject=0xf8) returned 1 [0127.105] CloseHandle (hObject=0x158) returned 1 [0127.105] CloseHandle (hObject=0x120) returned 1 [0127.105] CloseHandle (hObject=0x100) returned 1 [0127.106] CloseHandle (hObject=0xe4) returned 1 [0127.106] CloseHandle (hObject=0xf0) returned 1 [0127.106] CloseHandle (hObject=0x114) returned 1 [0127.106] CloseHandle (hObject=0x110) returned 1 [0127.106] CloseHandle (hObject=0xdc) returned 1 [0127.106] CloseHandle (hObject=0xe8) returned 1 [0127.106] CloseHandle (hObject=0xbc) returned 1 [0127.106] CloseHandle (hObject=0x134) returned 1 [0127.106] CloseHandle (hObject=0x130) returned 1 [0127.106] CloseHandle (hObject=0x154) returned 1 [0127.106] CloseHandle (hObject=0xec) returned 1 [0127.106] CloseHandle (hObject=0xe0) returned 1 [0127.106] CloseHandle (hObject=0xcc) returned 1 [0127.107] CloseHandle (hObject=0xd8) returned 1 [0127.107] CloseHandle (hObject=0x140) returned 1 [0127.107] CloseHandle (hObject=0x14c) returned 1 [0127.107] CloseHandle (hObject=0x148) returned 1 [0127.107] CloseHandle (hObject=0x144) returned 1 [0127.107] CloseHandle (hObject=0x16c) returned 1 [0127.107] CloseHandle (hObject=0xf4) returned 1 [0127.107] CloseHandle (hObject=0x174) returned 1 [0127.107] CloseHandle (hObject=0x170) returned 1 [0127.107] CloseHandle (hObject=0x11c) returned 1 [0127.107] SwitchToThread () returned 1 [0127.109] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0127.389] SetEvent (hEvent=0x7c) returned 1 [0127.389] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0127.390] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0127.390] SetEvent (hEvent=0x7c) returned 1 [0127.390] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0127.396] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0127.397] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0127.397] SetEvent (hEvent=0x7c) returned 1 [0127.397] ReadFile (in: hFile=0x124, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x9d, lpOverlapped=0x0) returned 1 [0127.397] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0127.397] SetEvent (hEvent=0x7c) returned 1 [0127.397] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0127.398] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0127.398] GetFileType (hFile=0x124) returned 0x1 [0127.398] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0127.398] WriteFile (in: hFile=0x124, lpBuffer=0x12512000*, nNumberOfBytesToWrite=0x9d, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x12512000*, lpNumberOfBytesWritten=0x12429608*=0x9d, lpOverlapped=0x12429614) returned 1 [0127.398] GetFileType (hFile=0x124) returned 0x1 [0127.398] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x9d, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0127.398] ReadFile (in: hFile=0x124, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0127.398] CloseHandle (hObject=0x124) returned 1 [0127.398] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.399] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0127.399] WriteFile (in: hFile=0x124, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0127.399] CloseHandle (hObject=0x124) returned 1 [0127.399] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa7, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124292dc*=0xa7) returned 1 [0127.400] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8423be80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8423e590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0127.400] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.400] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0127.400] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e240 | out: pbBuffer=0x1240e240) returned 1 [0127.401] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0127.401] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1276e102 | out: pbBuffer=0x1276e102) returned 1 [0127.402] SetEvent (hEvent=0xb8) returned 1 [0127.402] ReadFile (in: hFile=0x124, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x5c, lpOverlapped=0x0) returned 1 [0127.403] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0127.403] SetEvent (hEvent=0xb8) returned 1 [0127.403] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0127.403] GetFileType (hFile=0x124) returned 0x1 [0127.403] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0127.403] WriteFile (in: hFile=0x124, lpBuffer=0x124d6000*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x124d6000*, lpNumberOfBytesWritten=0x12429608*=0x5c, lpOverlapped=0x12429614) returned 1 [0127.403] GetFileType (hFile=0x124) returned 0x1 [0127.403] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x5c, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0127.404] ReadFile (in: hFile=0x124, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0127.404] CloseHandle (hObject=0x124) returned 1 [0127.410] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.410] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0127.410] WriteFile (in: hFile=0x124, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0127.410] CloseHandle (hObject=0x124) returned 1 [0127.410] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa5, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124292dc*=0xa5) returned 1 [0127.411] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84240ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84240ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1 [0127.411] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.411] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0127.412] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e220 | out: pbBuffer=0x1240e220) returned 1 [0127.412] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1276e002 | out: pbBuffer=0x1276e002) returned 1 [0127.414] SetEvent (hEvent=0x7c) returned 1 [0127.414] ReadFile (in: hFile=0x124, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x5f, lpOverlapped=0x0) returned 1 [0127.414] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0127.414] SetEvent (hEvent=0x7c) returned 1 [0127.414] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0127.414] GetFileType (hFile=0x124) returned 0x1 [0127.414] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0127.415] WriteFile (in: hFile=0x124, lpBuffer=0x124d6000*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x124d6000*, lpNumberOfBytesWritten=0x12429608*=0x5f, lpOverlapped=0x12429614) returned 1 [0127.415] GetFileType (hFile=0x124) returned 0x1 [0127.415] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0127.415] ReadFile (in: hFile=0x124, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0127.415] CloseHandle (hObject=0x124) returned 1 [0127.415] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.415] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0127.415] WriteFile (in: hFile=0x124, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0127.416] CloseHandle (hObject=0x124) returned 1 [0127.416] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa3, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124292dc*=0xa3) returned 1 [0127.417] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x840205b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84245ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844aa770, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d6)) returned 1 [0127.417] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.417] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.417] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.417] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.417] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.417] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.417] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0127.417] CloseHandle (hObject=0x124) returned 1 [0127.418] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.418] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.418] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.419] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429728 | out: lpMode=0x12429728) returned 0 [0127.419] WriteFile (in: hFile=0x124, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242972c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242972c*=0x1033, lpOverlapped=0x0) returned 1 [0127.420] CloseHandle (hObject=0x124) returned 1 [0127.420] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.420] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.421] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.421] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales\\*", lpFindFileData=0x1242939c | out: lpFindFileData=0x1242939c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd8cd480, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd8cd480, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd8cd480, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd8cd480, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd8cad70, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd8cad70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd8cfb90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.422] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.423] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.423] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.423] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.423] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.423] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.423] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.423] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.424] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.424] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.424] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.425] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.425] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.425] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.426] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.426] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.426] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.426] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.426] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.426] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.427] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.427] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.427] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.428] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.428] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.428] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.429] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.429] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.429] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.429] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.429] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.429] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.430] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.430] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.430] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.431] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.431] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.431] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.432] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.432] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.432] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.432] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.432] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.432] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.433] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.433] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.433] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.434] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.434] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.434] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.435] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.435] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.435] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.435] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.435] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.435] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.438] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.438] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.438] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.438] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.438] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.438] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.441] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.441] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.441] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.441] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.441] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.442] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.443] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.443] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.443] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.443] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.443] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.443] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.444] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.444] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.444] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ms\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.444] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.445] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.445] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/nl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.445] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.446] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.446] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/no\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.446] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.446] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.446] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/pl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.447] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.447] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.447] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/pt_BR\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.447] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.448] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.448] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/pt_PT\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.448] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.448] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.449] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ro\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.449] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.449] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.449] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ru\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.450] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.450] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.450] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/sk\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.450] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.450] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.450] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/sl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.451] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.451] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.451] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/sr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.452] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.452] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.452] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/sv\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.453] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.453] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.453] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/th\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.453] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.454] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.454] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/tr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.454] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.455] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.455] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/uk\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.455] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.455] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.455] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/vi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.456] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.456] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.456] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/zh_CN\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.456] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.456] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.456] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/zh_TW\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.456] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.457] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.457] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.457] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.457] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293b8 | out: lpFindFileData=0x124293b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.457] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.457] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.457] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124295bc | out: lpMode=0x124295bc) returned 0 [0127.457] CloseHandle (hObject=0x124) returned 1 [0127.457] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.457] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.458] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.458] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.458] WriteFile (in: hFile=0x124, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.459] CloseHandle (hObject=0x124) returned 1 [0127.459] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.459] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.460] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.460] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd92a0e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd92a0e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.460] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd92a0e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd92a0e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.460] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd92a0e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd92a0e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd92c7f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.460] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8403b360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.460] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.460] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.460] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.460] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.460] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.460] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.461] ReadFile (in: hFile=0x124, lpBuffer=0x1276e100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e100*, lpNumberOfBytesRead=0x124295f0*=0xfe, lpOverlapped=0x0) returned 1 [0127.462] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8403b360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1 [0127.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.462] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.462] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.462] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0127.462] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.462] CloseHandle (hObject=0xc0) returned 1 [0127.462] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.462] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.463] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0127.463] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.463] WriteFile (in: hFile=0xc0, lpBuffer=0x12454600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12454600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.464] CloseHandle (hObject=0xc0) returned 1 [0127.464] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.464] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.465] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.465] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd936430, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd936430, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.465] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd936430, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd936430, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.465] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd936430, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd936430, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd938b40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.465] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84056110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84058820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.465] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.465] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.465] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.465] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.465] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0127.466] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.466] ReadFile (in: hFile=0xc0, lpBuffer=0x1276e200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e200*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0127.467] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84056110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84058820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f)) returned 1 [0127.467] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.467] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.467] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.467] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.467] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.467] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0127.468] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.468] CloseHandle (hObject=0x98) returned 1 [0127.468] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.468] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.468] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0127.468] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.468] WriteFile (in: hFile=0x98, lpBuffer=0x12456c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12456c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.469] CloseHandle (hObject=0x98) returned 1 [0127.470] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.470] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.470] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.470] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd942780, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd942780, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.470] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd942780, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd942780, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.470] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd942780, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd942780, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9475a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.470] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84067280, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.470] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.470] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.470] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.471] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.471] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0127.471] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.471] ReadFile (in: hFile=0x98, lpBuffer=0x1276e300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e300*, lpNumberOfBytesRead=0x124295f0*=0xe5, lpOverlapped=0x0) returned 1 [0127.472] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84067280, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1 [0127.472] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.472] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.473] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.473] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.473] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.473] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0127.473] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.473] CloseHandle (hObject=0xd0) returned 1 [0127.473] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.473] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.473] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0127.474] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.474] WriteFile (in: hFile=0xd0, lpBuffer=0x12741300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12741300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.475] CloseHandle (hObject=0xd0) returned 1 [0127.475] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.475] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.475] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.475] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd94ead0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd94ead0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.476] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd94ead0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd94ead0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.476] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd94ead0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd94ead0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9538f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.476] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.476] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.476] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.476] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.476] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.476] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0127.476] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.476] ReadFile (in: hFile=0xd0, lpBuffer=0x1276e400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e400*, lpNumberOfBytesRead=0x124295f0*=0xda, lpOverlapped=0x0) returned 1 [0127.477] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0127.478] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.478] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.478] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.478] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.478] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.478] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0127.478] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.478] CloseHandle (hObject=0xc8) returned 1 [0127.478] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.478] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.478] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0127.479] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.479] WriteFile (in: hFile=0xc8, lpBuffer=0x12743900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12743900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.480] CloseHandle (hObject=0xc8) returned 1 [0127.480] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.480] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.481] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.481] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd95d530, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd95d530, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd95d530, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd95d530, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd95d530, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd95d530, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd95fc40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.481] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.481] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.481] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.481] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0127.482] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.482] ReadFile (in: hFile=0xc8, lpBuffer=0x1276e500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e500*, lpNumberOfBytesRead=0x124295f0*=0xcf, lpOverlapped=0x0) returned 1 [0127.483] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1 [0127.483] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.483] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.483] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.483] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.483] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.483] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0127.483] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.484] CloseHandle (hObject=0x118) returned 1 [0127.484] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.484] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.484] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0127.484] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.485] WriteFile (in: hFile=0x118, lpBuffer=0x12520000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12520000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.486] CloseHandle (hObject=0x118) returned 1 [0127.486] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.486] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.486] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.486] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd967170, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd967170, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.486] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd967170, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd967170, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.487] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd967170, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd967170, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd96bf90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.487] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.487] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.487] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.487] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.487] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.487] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0127.487] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.487] ReadFile (in: hFile=0x118, lpBuffer=0x1276e600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e600*, lpNumberOfBytesRead=0x124295f0*=0xdc, lpOverlapped=0x0) returned 1 [0127.488] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1 [0127.489] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.489] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.489] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.489] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.489] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.489] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0127.489] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.489] CloseHandle (hObject=0x108) returned 1 [0127.489] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.489] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.490] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0127.490] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.490] WriteFile (in: hFile=0x108, lpBuffer=0x12522600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12522600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.491] CloseHandle (hObject=0x108) returned 1 [0127.491] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.491] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.492] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.492] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd975bd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd975bd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.492] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd975bd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd975bd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.492] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd975bd0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd975bd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9782e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.492] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.492] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.492] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.492] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.492] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.492] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0127.492] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.493] ReadFile (in: hFile=0x108, lpBuffer=0x1276e700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e700*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0127.494] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0127.494] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.494] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.494] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.494] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.494] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.494] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0127.495] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.495] CloseHandle (hObject=0x10c) returned 1 [0127.495] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.495] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.495] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0127.495] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.496] WriteFile (in: hFile=0x10c, lpBuffer=0x12524c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12524c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.497] CloseHandle (hObject=0x10c) returned 1 [0127.497] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.497] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.497] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.497] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd981f20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd981f20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.498] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd981f20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd981f20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.498] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd981f20, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd981f20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd986d40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.498] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.498] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.498] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.498] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.498] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.498] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0127.498] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.498] ReadFile (in: hFile=0x10c, lpBuffer=0x1276e800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e800*, lpNumberOfBytesRead=0x124295f0*=0xd5, lpOverlapped=0x0) returned 1 [0127.499] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0127.500] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.500] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.500] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.500] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.500] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.500] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0127.500] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.500] CloseHandle (hObject=0x160) returned 1 [0127.500] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.501] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.501] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0127.501] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.501] WriteFile (in: hFile=0x160, lpBuffer=0x1257d300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1257d300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.502] CloseHandle (hObject=0x160) returned 1 [0127.502] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.502] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.503] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.503] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd990980, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd990980, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.503] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd990980, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd990980, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.503] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd990980, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd990980, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd993090, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.503] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.503] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.503] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.503] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.503] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.503] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0127.504] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.504] ReadFile (in: hFile=0x160, lpBuffer=0x1276e900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e900*, lpNumberOfBytesRead=0x124295f0*=0xd5, lpOverlapped=0x0) returned 1 [0127.505] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0127.505] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.505] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.505] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.505] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.505] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.505] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0127.505] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.506] CloseHandle (hObject=0x164) returned 1 [0127.506] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.506] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.506] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0127.506] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.506] WriteFile (in: hFile=0x164, lpBuffer=0x1257f900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1257f900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.508] CloseHandle (hObject=0x164) returned 1 [0127.508] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.508] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.508] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.508] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd99ccd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd99ccd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.508] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd99ccd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd99ccd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.509] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd99ccd0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd99ccd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9a1af0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.509] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.509] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.509] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.509] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.509] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.509] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0127.509] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.509] ReadFile (in: hFile=0x164, lpBuffer=0x1276ea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276ea00*, lpNumberOfBytesRead=0x124295f0*=0xe5, lpOverlapped=0x0) returned 1 [0127.510] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1 [0127.510] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.510] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.511] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.511] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.511] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.511] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0127.511] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.511] CloseHandle (hObject=0x168) returned 1 [0127.511] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.511] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.511] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0127.512] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.512] WriteFile (in: hFile=0x168, lpBuffer=0x1258e000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1258e000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.513] CloseHandle (hObject=0x168) returned 1 [0127.513] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.513] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.513] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.513] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd9a9020, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9a9020, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.513] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd9a9020, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9a9020, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.514] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd9a9020, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd9a9020, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9ade40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.514] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.514] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.514] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.514] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.514] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.514] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0127.514] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.514] ReadFile (in: hFile=0x168, lpBuffer=0x1276eb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276eb00*, lpNumberOfBytesRead=0x124295f0*=0xe5, lpOverlapped=0x0) returned 1 [0127.516] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1 [0127.516] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.516] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.516] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.516] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.516] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.516] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0127.516] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.516] CloseHandle (hObject=0x13c) returned 1 [0127.516] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.516] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.517] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0127.517] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.517] WriteFile (in: hFile=0x13c, lpBuffer=0x12590600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12590600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.518] CloseHandle (hObject=0x13c) returned 1 [0127.518] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.518] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.519] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.519] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd9b7a80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9b7a80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.519] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd9b7a80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9b7a80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.519] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd9b7a80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd9b7a80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9ba190, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.519] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.519] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.519] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.519] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.519] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.519] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0127.519] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.520] ReadFile (in: hFile=0x13c, lpBuffer=0x1276ec00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276ec00*, lpNumberOfBytesRead=0x124295f0*=0xe2, lpOverlapped=0x0) returned 1 [0127.521] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0127.521] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.521] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.521] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.521] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.521] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.521] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0127.521] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.521] CloseHandle (hObject=0x178) returned 1 [0127.522] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.522] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.522] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0127.522] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.522] WriteFile (in: hFile=0x178, lpBuffer=0x12592c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12592c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.523] CloseHandle (hObject=0x178) returned 1 [0127.523] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.523] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.524] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.524] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd9c3dd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9c3dd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.524] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd9c3dd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9c3dd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.524] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd9c3dd0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd9c3dd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9c64e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.524] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.524] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.524] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.524] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.524] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.524] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0127.525] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.525] ReadFile (in: hFile=0x178, lpBuffer=0x1276ed00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276ed00*, lpNumberOfBytesRead=0x124295f0*=0xdc, lpOverlapped=0x0) returned 1 [0127.526] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1 [0127.526] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.526] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.526] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.526] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.526] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.526] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0127.526] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.527] CloseHandle (hObject=0x11c) returned 1 [0127.527] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.527] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.527] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0127.527] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.527] WriteFile (in: hFile=0x11c, lpBuffer=0x124f3300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124f3300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.528] CloseHandle (hObject=0x11c) returned 1 [0127.529] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.529] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.529] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.529] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd9d0120, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9d0120, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.529] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd9d0120, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9d0120, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.529] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd9d0120, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd9d0120, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9d2830, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.529] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.529] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.529] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.529] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.529] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.529] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0127.530] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.530] ReadFile (in: hFile=0x11c, lpBuffer=0x1276ee00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276ee00*, lpNumberOfBytesRead=0x124295f0*=0xdf, lpOverlapped=0x0) returned 1 [0127.531] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0127.531] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.531] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.531] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.531] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.531] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.531] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0127.532] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.532] CloseHandle (hObject=0x170) returned 1 [0127.532] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.532] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.532] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0127.532] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.533] WriteFile (in: hFile=0x170, lpBuffer=0x124f5900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124f5900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.534] CloseHandle (hObject=0x170) returned 1 [0127.534] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.534] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.534] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.534] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd9d9d60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9d9d60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.535] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd9d9d60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9d9d60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.535] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd9d9d60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd9d9d60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9deb80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.535] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.535] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.535] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.535] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.535] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.535] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0127.535] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.535] ReadFile (in: hFile=0x170, lpBuffer=0x1276ef00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276ef00*, lpNumberOfBytesRead=0x124295f0*=0xe2, lpOverlapped=0x0) returned 1 [0127.537] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0127.537] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.537] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.537] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.537] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.537] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.537] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0127.537] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.537] CloseHandle (hObject=0x174) returned 1 [0127.537] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.538] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.538] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0127.538] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.538] WriteFile (in: hFile=0x174, lpBuffer=0x12508000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12508000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.539] CloseHandle (hObject=0x174) returned 1 [0127.539] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.539] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.540] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.540] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd9e87c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9e87c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.540] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd9e87c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9e87c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.540] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd9e87c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd9e87c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9eaed0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.540] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.540] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.540] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.540] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.540] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.540] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0127.541] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.541] ReadFile (in: hFile=0x174, lpBuffer=0x1276f000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f000*, lpNumberOfBytesRead=0x124295f0*=0xee, lpOverlapped=0x0) returned 1 [0127.542] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee)) returned 1 [0127.542] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.542] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.542] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.542] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.542] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.542] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0127.542] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.542] CloseHandle (hObject=0xf4) returned 1 [0127.543] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.543] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.543] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0127.543] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.543] WriteFile (in: hFile=0xf4, lpBuffer=0x1250a600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1250a600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.544] CloseHandle (hObject=0xf4) returned 1 [0127.545] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.545] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.545] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.545] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd9f4b10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9f4b10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.545] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd9f4b10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9f4b10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.545] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd9f4b10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd9f4b10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd9f7220, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.545] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.545] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.545] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.546] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.546] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.546] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0127.546] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.546] ReadFile (in: hFile=0xf4, lpBuffer=0x1276f100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f100*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0127.547] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0127.547] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.547] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.547] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.547] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.547] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.548] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.548] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.548] CloseHandle (hObject=0x16c) returned 1 [0127.548] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.548] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.548] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.548] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.549] WriteFile (in: hFile=0x16c, lpBuffer=0x1250cc00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1250cc00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.550] CloseHandle (hObject=0x16c) returned 1 [0127.550] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.550] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.550] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.550] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda00e60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda00e60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda00e60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda00e60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda00e60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda00e60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda05c80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.550] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.551] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.551] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.551] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.551] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.551] ReadFile (in: hFile=0x16c, lpBuffer=0x1276f200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f200*, lpNumberOfBytesRead=0x124295f0*=0xeb, lpOverlapped=0x0) returned 1 [0127.552] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0127.552] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.552] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.552] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.552] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.553] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.553] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0127.553] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.553] CloseHandle (hObject=0x144) returned 1 [0127.553] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.553] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.553] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0127.553] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.554] WriteFile (in: hFile=0x144, lpBuffer=0x1275b300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1275b300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.555] CloseHandle (hObject=0x144) returned 1 [0127.555] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.555] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.555] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.555] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda0d1b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda0d1b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.555] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda0d1b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda0d1b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.556] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda0d1b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda0d1b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda11fd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.556] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.556] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.556] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.556] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.556] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.556] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0127.556] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.556] ReadFile (in: hFile=0x144, lpBuffer=0x1276f300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f300*, lpNumberOfBytesRead=0x124295f0*=0xd8, lpOverlapped=0x0) returned 1 [0127.558] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0127.558] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.558] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.558] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.558] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.558] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.558] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0127.558] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.558] CloseHandle (hObject=0x148) returned 1 [0127.558] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.559] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.559] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0127.559] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.559] WriteFile (in: hFile=0x148, lpBuffer=0x1275d900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1275d900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.560] CloseHandle (hObject=0x148) returned 1 [0127.560] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.560] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.561] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda1bc10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda1bc10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.561] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda1bc10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda1bc10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.561] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda1bc10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda1bc10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda1e320, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.561] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.561] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.561] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.561] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0127.562] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.562] ReadFile (in: hFile=0x148, lpBuffer=0x1276f400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f400*, lpNumberOfBytesRead=0x124295f0*=0xd7, lpOverlapped=0x0) returned 1 [0127.563] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0127.563] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.563] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.563] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.563] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.563] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.563] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0127.563] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.564] CloseHandle (hObject=0x14c) returned 1 [0127.564] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.564] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.564] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0127.564] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.564] WriteFile (in: hFile=0x14c, lpBuffer=0x12784000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12784000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.565] CloseHandle (hObject=0x14c) returned 1 [0127.566] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.566] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.566] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.566] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.566] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.566] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda2a670, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.566] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.566] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.566] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.567] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.567] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.567] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0127.567] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.567] ReadFile (in: hFile=0x14c, lpBuffer=0x1276f500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f500*, lpNumberOfBytesRead=0x124295f0*=0xf5, lpOverlapped=0x0) returned 1 [0127.568] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5)) returned 1 [0127.568] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.568] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.568] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.569] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.569] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.569] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0127.569] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.569] CloseHandle (hObject=0x140) returned 1 [0127.569] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.569] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.569] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0127.570] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.570] WriteFile (in: hFile=0x140, lpBuffer=0x12786600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12786600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.571] CloseHandle (hObject=0x140) returned 1 [0127.571] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.571] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.571] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.572] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda342b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda342b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.572] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda342b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda342b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.572] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda342b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda342b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda390d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.572] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.572] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.572] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.572] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.572] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.572] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0127.572] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.573] ReadFile (in: hFile=0x140, lpBuffer=0x1276f600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f600*, lpNumberOfBytesRead=0x124295f0*=0xe0, lpOverlapped=0x0) returned 1 [0127.574] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0127.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.574] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.574] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.574] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0127.574] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.574] CloseHandle (hObject=0xd8) returned 1 [0127.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.575] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.575] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0127.575] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.575] WriteFile (in: hFile=0xd8, lpBuffer=0x12788c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12788c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.576] CloseHandle (hObject=0xd8) returned 1 [0127.576] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.576] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.577] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.577] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda42d10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda42d10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda42d10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda42d10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda42d10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda42d10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda45420, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.577] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.577] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.577] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.577] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.577] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0127.578] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.578] ReadFile (in: hFile=0xd8, lpBuffer=0x1276f700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f700*, lpNumberOfBytesRead=0x124295f0*=0xeb, lpOverlapped=0x0) returned 1 [0127.579] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0127.579] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.579] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.579] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.579] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.579] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.579] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0127.580] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.580] CloseHandle (hObject=0xcc) returned 1 [0127.580] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.580] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.580] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0127.580] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.580] WriteFile (in: hFile=0xcc, lpBuffer=0x1279b300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1279b300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.582] CloseHandle (hObject=0xcc) returned 1 [0127.582] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.582] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.582] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.582] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda4c950, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda4c950, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.582] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda4c950, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda4c950, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.582] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda4c950, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda4c950, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda51770, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.582] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.582] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.582] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.582] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.583] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.583] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0127.583] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.583] ReadFile (in: hFile=0xcc, lpBuffer=0x1276f800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f800*, lpNumberOfBytesRead=0x124295f0*=0xe5, lpOverlapped=0x0) returned 1 [0127.584] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1 [0127.584] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.584] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.584] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.584] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.585] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.585] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0127.585] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.585] CloseHandle (hObject=0xe0) returned 1 [0127.585] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.585] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.585] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0127.585] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.586] WriteFile (in: hFile=0xe0, lpBuffer=0x1279d900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1279d900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.587] CloseHandle (hObject=0xe0) returned 1 [0127.587] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.587] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.587] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.587] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ms\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda58ca0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda58ca0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.587] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda58ca0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda58ca0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.587] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda58ca0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda58ca0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda5dac0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.587] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a96c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.587] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.587] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.588] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ms/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.588] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ms/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.591] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda64ff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda64ff0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda64ff0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda64ff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda67700, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b0bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.591] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.594] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.595] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda6c520, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda6c520, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.595] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda6c520, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda6c520, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda6ec30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.595] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b8120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.595] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.595] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.598] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.598] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda76160, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda76160, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.598] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda76160, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda76160, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda78870, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.598] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841bf650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.598] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.598] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.602] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/pt_BR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.603] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda7d690, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda7d690, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.603] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda7d690, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda7d690, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda7fda0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.603] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841c9290, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.603] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.603] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.606] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/pt_PT\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.606] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda899e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda899e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.606] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda899e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda899e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda8c0f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.606] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d07c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.606] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.607] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.609] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ro\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.610] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda90f10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda90f10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.610] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda90f10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda90f10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda93620, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.610] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d7cf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.610] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.610] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.613] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/ru\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.614] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfda9ab50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda9ab50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.614] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfda9ab50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfda9ab50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfda9d260, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.614] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841df220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.614] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.614] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.620] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/sk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.620] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdaa95b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdaa95b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.620] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdaa95b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdaa95b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdaae3d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.620] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f0390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.620] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.620] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.623] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/sl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.624] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdab31f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdab31f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.624] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdab31f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdab31f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdab5900, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.624] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f78c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.624] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.624] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.627] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/sr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.635] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdaba720, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdaba720, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.635] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdaba720, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdaba720, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdaba720, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.635] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841fedf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.635] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.635] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.638] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/sv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.638] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdad54d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdad54d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.639] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdad54d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdad54d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdad7be0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.639] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84206320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.639] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.639] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.642] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/th\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.642] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdadca00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdadca00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.642] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdadca00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdadca00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdae1820, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.642] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8420d850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.642] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.642] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.645] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/tr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.645] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdae6640, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdae6640, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.645] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdae6640, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdae6640, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdae8d50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.645] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84214d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.645] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.645] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.649] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/uk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.649] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdaedb70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdaedb70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.650] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdaedb70, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdaedb70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdaf2990, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.650] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8421c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.650] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.650] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.653] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/vi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdaf9ec0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdaf9ec0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdaf9ec0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdaf9ec0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdafc5d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x842237e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.653] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.656] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/zh_CN\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.657] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdb013f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdb013f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.657] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdb013f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdb013f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdb03b00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.657] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8422ad10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.657] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.657] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.660] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_locales/zh_TW\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.660] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdb08920, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdb08920, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.660] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdb08920, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdb08920, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdb0d740, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.660] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84232240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.660] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.660] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.665] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/_metadata\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.665] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdb14c70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdb14c70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.665] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdb12560, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdb12560, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdb19a90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.665] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x844eed30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0127.665] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8424a8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8424a8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0127.665] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.665] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.672] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.672] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdb284f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdb284f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.672] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 1 [0127.672] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdb284f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdb284f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdb2ac00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.672] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.672] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.676] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfdb32130, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdb32130, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0127.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfdb32130, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfdb32130, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfdb32130, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="contentscript_bin_prod.js", cAlternateFileName="CONTEN~1.JS")) returned 1 [0127.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="dasherSettingSchema.json", cAlternateFileName="DASHER~1.JSO")) returned 1 [0127.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventpage_bin_prod.js", cAlternateFileName="EVENTP~1.JS")) returned 1 [0127.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0127.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="page_embed_script.js", cAlternateFileName="PAGE_E~1.JS")) returned 1 [0127.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0127.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0127.677] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.677] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.692] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249eea0 | out: pbBuffer=0x1249eea0) returned 1 [0127.692] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e25e0 | out: pbBuffer=0x124e25e0) returned 1 [0127.692] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127df802 | out: pbBuffer=0x127df802) returned 1 [0127.692] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127df808 | out: pbBuffer=0x127df808) returned 1 [0127.692] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127df842 | out: pbBuffer=0x127df842) returned 1 [0127.694] SetEvent (hEvent=0x7c) returned 1 [0127.694] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x1378, lpOverlapped=0x0) returned 1 [0127.694] GetFileType (hFile=0x16c) returned 0x1 [0127.694] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0127.694] WriteFile (in: hFile=0x16c, lpBuffer=0x1245c000*, nNumberOfBytesToWrite=0x1378, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x1245c000*, lpNumberOfBytesWritten=0x12429608*=0x1378, lpOverlapped=0x12429614) returned 1 [0127.695] GetFileType (hFile=0x16c) returned 0x1 [0127.695] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x1378, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0127.695] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0127.695] CloseHandle (hObject=0x16c) returned 1 [0127.695] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.695] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0127.695] WriteFile (in: hFile=0x16c, lpBuffer=0x12455440*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x12455440*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0127.696] CloseHandle (hObject=0x16c) returned 1 [0127.696] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127378c0*, nNumberOfCharsToWrite=0xa3, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x127378c0*, lpNumberOfCharsWritten=0x124292dc*=0xa3) returned 1 [0127.697] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1103)) returned 1 [0127.697] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/ghbmnnjooekpmoecnnnilnnbdlolhkhi/1.4_0/contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.697] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0127.697] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0127.698] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12524002 | out: pbBuffer=0x12524002) returned 1 [0127.700] CloseHandle (hObject=0xd0) returned 1 [0127.700] CloseHandle (hObject=0x98) returned 1 [0127.700] CloseHandle (hObject=0xc0) returned 1 [0127.700] CloseHandle (hObject=0x124) returned 1 [0127.700] CloseHandle (hObject=0x110) returned 1 [0127.700] CloseHandle (hObject=0xdc) returned 1 [0127.700] CloseHandle (hObject=0xf4) returned 1 [0127.700] CloseHandle (hObject=0x174) returned 1 [0127.701] CloseHandle (hObject=0x170) returned 1 [0127.701] CloseHandle (hObject=0x11c) returned 1 [0127.701] CloseHandle (hObject=0x178) returned 1 [0127.701] CloseHandle (hObject=0x13c) returned 1 [0127.701] CloseHandle (hObject=0x168) returned 1 [0127.701] CloseHandle (hObject=0x164) returned 1 [0127.701] CloseHandle (hObject=0x160) returned 1 [0127.701] CloseHandle (hObject=0x10c) returned 1 [0127.701] CloseHandle (hObject=0x108) returned 1 [0127.701] CloseHandle (hObject=0x118) returned 1 [0127.701] CloseHandle (hObject=0xc8) returned 1 [0127.702] SwitchToThread () returned 1 [0127.702] SetEvent (hEvent=0x7c) returned 1 [0127.702] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0127.703] SetEvent (hEvent=0x7c) returned 1 [0127.703] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0127.703] SetEvent (hEvent=0x7c) returned 1 [0127.703] SwitchToThread () returned 1 [0127.704] SetEvent (hEvent=0x6c) returned 1 [0127.704] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0127.711] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0127.714] SetEvent (hEvent=0x7c) returned 1 [0127.714] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0127.714] SetEvent (hEvent=0x7c) returned 1 [0127.714] SwitchToThread () returned 1 [0127.715] SetEvent (hEvent=0x6c) returned 1 [0127.715] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0127.879] SetEvent (hEvent=0x6c) returned 1 [0127.879] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0127.884] SetEvent (hEvent=0x6c) returned 1 [0127.884] SetEvent (hEvent=0xb8) returned 1 [0127.884] CloseHandle (hObject=0x98) returned 1 [0127.884] CloseHandle (hObject=0xc0) returned 1 [0127.884] CloseHandle (hObject=0x124) returned 1 [0127.884] CloseHandle (hObject=0x110) returned 1 [0127.884] CloseHandle (hObject=0xdc) returned 1 [0127.884] CloseHandle (hObject=0xf4) returned 1 [0127.884] CloseHandle (hObject=0x174) returned 1 [0127.884] CloseHandle (hObject=0x170) returned 1 [0127.885] CloseHandle (hObject=0x11c) returned 1 [0127.885] CloseHandle (hObject=0x178) returned 1 [0127.885] SwitchToThread () returned 1 [0127.886] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.114] SetEvent (hEvent=0xb8) returned 1 [0128.114] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0128.115] SetEvent (hEvent=0x7c) returned 1 [0128.115] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0128.119] CloseHandle (hObject=0x108) returned 1 [0128.119] CloseHandle (hObject=0x118) returned 1 [0128.119] CloseHandle (hObject=0xc8) returned 1 [0128.119] CloseHandle (hObject=0x16c) returned 1 [0128.119] CloseHandle (hObject=0x144) returned 1 [0128.119] CloseHandle (hObject=0xd0) returned 1 [0128.119] CloseHandle (hObject=0x154) returned 1 [0128.119] CloseHandle (hObject=0xec) returned 1 [0128.119] CloseHandle (hObject=0xe0) returned 1 [0128.120] CloseHandle (hObject=0xcc) returned 1 [0128.120] CloseHandle (hObject=0xd8) returned 1 [0128.120] CloseHandle (hObject=0x140) returned 1 [0128.120] CloseHandle (hObject=0x14c) returned 1 [0128.120] CloseHandle (hObject=0x148) returned 1 [0128.120] CloseHandle (hObject=0x98) returned 1 [0128.120] CloseHandle (hObject=0xc0) returned 1 [0128.120] CloseHandle (hObject=0x124) returned 1 [0128.120] CloseHandle (hObject=0x110) returned 1 [0128.120] CloseHandle (hObject=0xdc) returned 1 [0128.120] CloseHandle (hObject=0xf4) returned 1 [0128.121] CloseHandle (hObject=0x174) returned 1 [0128.121] CloseHandle (hObject=0x170) returned 1 [0128.121] CloseHandle (hObject=0x11c) returned 1 [0128.121] CloseHandle (hObject=0x178) returned 1 [0128.121] CloseHandle (hObject=0x13c) returned 1 [0128.121] CloseHandle (hObject=0x168) returned 1 [0128.121] CloseHandle (hObject=0x164) returned 1 [0128.121] CloseHandle (hObject=0x160) returned 1 [0128.121] CloseHandle (hObject=0x10c) returned 1 [0128.121] CloseHandle (hObject=0x114) returned 1 [0128.122] CloseHandle (hObject=0xe8) returned 1 [0128.122] CloseHandle (hObject=0xbc) returned 1 [0128.122] CloseHandle (hObject=0x134) returned 1 [0128.122] CloseHandle (hObject=0x130) returned 1 [0128.122] CloseHandle (hObject=0xf8) returned 1 [0128.122] CloseHandle (hObject=0x158) returned 1 [0128.122] CloseHandle (hObject=0x120) returned 1 [0128.122] CloseHandle (hObject=0x100) returned 1 [0128.122] CloseHandle (hObject=0xe4) returned 1 [0128.122] CloseHandle (hObject=0xf0) returned 1 [0128.122] CloseHandle (hObject=0x104) returned 1 [0128.123] CloseHandle (hObject=0xfc) returned 1 [0128.123] CloseHandle (hObject=0x150) returned 1 [0128.123] CloseHandle (hObject=0x15c) returned 1 [0128.123] CloseHandle (hObject=0x184) returned 1 [0128.123] CloseHandle (hObject=0x138) returned 1 [0128.123] CloseHandle (hObject=0x18c) returned 1 [0128.123] CloseHandle (hObject=0x188) returned 1 [0128.123] CloseHandle (hObject=0x180) returned 1 [0128.123] CloseHandle (hObject=0x17c) returned 1 [0128.123] CloseHandle (hObject=0x12c) returned 1 [0128.123] CloseHandle (hObject=0x128) returned 1 [0128.124] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.129] SetEvent (hEvent=0xb8) returned 1 [0128.129] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.134] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.201] SetEvent (hEvent=0xb8) returned 1 [0128.201] SetEvent (hEvent=0x6c) returned 1 [0128.201] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0128.205] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.205] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0128.207] SetEvent (hEvent=0xb8) returned 1 [0128.207] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0128.209] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.209] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.467] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.471] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.474] SetEvent (hEvent=0x7c) returned 1 [0128.474] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.474] SetEvent (hEvent=0x7c) returned 1 [0128.474] SwitchToThread () returned 1 [0128.475] SetEvent (hEvent=0xb8) returned 1 [0128.475] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.481] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.484] SetEvent (hEvent=0x7c) returned 1 [0128.484] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.484] SetEvent (hEvent=0x7c) returned 1 [0128.484] SwitchToThread () returned 1 [0128.485] SetEvent (hEvent=0xb8) returned 1 [0128.485] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.491] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.494] SetEvent (hEvent=0x7c) returned 1 [0128.494] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.494] SetEvent (hEvent=0x7c) returned 1 [0128.494] SwitchToThread () returned 1 [0128.495] SetEvent (hEvent=0xb8) returned 1 [0128.495] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.501] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.523] SetEvent (hEvent=0x7c) returned 1 [0128.523] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0128.523] SetEvent (hEvent=0x7c) returned 1 [0128.523] SetEvent (hEvent=0xb8) returned 1 [0128.523] CloseHandle (hObject=0x98) returned 1 [0128.524] CloseHandle (hObject=0x150) returned 1 [0128.524] SwitchToThread () returned 1 [0128.525] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.170] SetEvent (hEvent=0xb8) returned 1 [0129.171] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0129.176] SetEvent (hEvent=0x7c) returned 1 [0129.176] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0129.182] CloseHandle (hObject=0x184) returned 1 [0129.182] CloseHandle (hObject=0x138) returned 1 [0129.182] CloseHandle (hObject=0x18c) returned 1 [0129.182] CloseHandle (hObject=0xe4) returned 1 [0129.182] CloseHandle (hObject=0xf0) returned 1 [0129.182] CloseHandle (hObject=0x104) returned 1 [0129.182] CloseHandle (hObject=0xfc) returned 1 [0129.182] CloseHandle (hObject=0x134) returned 1 [0129.182] CloseHandle (hObject=0x130) returned 1 [0129.182] CloseHandle (hObject=0xf8) returned 1 [0129.182] CloseHandle (hObject=0x158) returned 1 [0129.183] CloseHandle (hObject=0x164) returned 1 [0129.183] CloseHandle (hObject=0x160) returned 1 [0129.183] CloseHandle (hObject=0x10c) returned 1 [0129.183] CloseHandle (hObject=0x114) returned 1 [0129.183] CloseHandle (hObject=0xe8) returned 1 [0129.183] CloseHandle (hObject=0xbc) returned 1 [0129.183] CloseHandle (hObject=0x180) returned 1 [0129.183] CloseHandle (hObject=0x17c) returned 1 [0129.183] CloseHandle (hObject=0x12c) returned 1 [0129.183] CloseHandle (hObject=0x128) returned 1 [0129.183] CloseHandle (hObject=0x19c) returned 1 [0129.183] CloseHandle (hObject=0x15c) returned 1 [0129.183] CloseHandle (hObject=0x120) returned 1 [0129.183] CloseHandle (hObject=0x100) returned 1 [0129.184] CloseHandle (hObject=0x98) returned 1 [0129.184] CloseHandle (hObject=0x150) returned 1 [0129.184] CloseHandle (hObject=0x188) returned 1 [0129.184] CloseHandle (hObject=0x190) returned 1 [0129.184] CloseHandle (hObject=0x108) returned 1 [0129.184] CloseHandle (hObject=0x118) returned 1 [0129.184] CloseHandle (hObject=0xc8) returned 1 [0129.184] CloseHandle (hObject=0x16c) returned 1 [0129.184] CloseHandle (hObject=0x144) returned 1 [0129.184] CloseHandle (hObject=0xd0) returned 1 [0129.184] CloseHandle (hObject=0x154) returned 1 [0129.185] CloseHandle (hObject=0xec) returned 1 [0129.185] CloseHandle (hObject=0xe0) returned 1 [0129.185] CloseHandle (hObject=0xcc) returned 1 [0129.185] CloseHandle (hObject=0xd8) returned 1 [0129.185] CloseHandle (hObject=0x140) returned 1 [0129.185] CloseHandle (hObject=0x14c) returned 1 [0129.185] CloseHandle (hObject=0x148) returned 1 [0129.185] CloseHandle (hObject=0xc0) returned 1 [0129.185] CloseHandle (hObject=0x124) returned 1 [0129.185] CloseHandle (hObject=0x110) returned 1 [0129.186] CloseHandle (hObject=0xdc) returned 1 [0129.186] CloseHandle (hObject=0xf4) returned 1 [0129.186] CloseHandle (hObject=0x174) returned 1 [0129.186] CloseHandle (hObject=0x170) returned 1 [0129.186] CloseHandle (hObject=0x11c) returned 1 [0129.186] CloseHandle (hObject=0x178) returned 1 [0129.186] CloseHandle (hObject=0x13c) returned 1 [0129.186] CloseHandle (hObject=0x168) returned 1 [0129.186] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.193] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.196] SetEvent (hEvent=0x7c) returned 1 [0129.197] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.197] SetEvent (hEvent=0x7c) returned 1 [0129.197] SwitchToThread () returned 1 [0129.199] SetEvent (hEvent=0xb8) returned 1 [0129.199] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.206] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.210] SetEvent (hEvent=0xb8) returned 1 [0129.210] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0129.210] SetEvent (hEvent=0xb8) returned 1 [0129.210] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0129.214] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.214] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.221] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.223] SetEvent (hEvent=0x7c) returned 1 [0129.223] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.224] SetEvent (hEvent=0x7c) returned 1 [0129.224] SwitchToThread () returned 1 [0129.225] SetEvent (hEvent=0xb8) returned 1 [0129.225] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.231] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.234] SetEvent (hEvent=0x7c) returned 1 [0129.234] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.234] SetEvent (hEvent=0x7c) returned 1 [0129.235] SwitchToThread () returned 1 [0129.236] SetEvent (hEvent=0xb8) returned 1 [0129.236] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.242] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.245] SetEvent (hEvent=0xb8) returned 1 [0129.245] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0129.245] SetEvent (hEvent=0xb8) returned 1 [0129.245] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0129.249] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.254] SetEvent (hEvent=0xb8) returned 1 [0129.254] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.255] SetEvent (hEvent=0xb8) returned 1 [0129.255] SwitchToThread () returned 1 [0129.255] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.270] SetEvent (hEvent=0x7c) returned 1 [0129.270] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.271] SetEvent (hEvent=0x7c) returned 1 [0129.271] SwitchToThread () returned 1 [0129.272] SetEvent (hEvent=0xb8) returned 1 [0129.272] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.697] SetEvent (hEvent=0xb8) returned 1 [0129.697] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.702] SetEvent (hEvent=0xb8) returned 1 [0129.702] SetEvent (hEvent=0x6c) returned 1 [0129.702] CloseHandle (hObject=0x1b4) returned 1 [0129.702] CloseHandle (hObject=0x1b0) returned 1 [0129.702] CloseHandle (hObject=0x1ac) returned 1 [0129.702] CloseHandle (hObject=0x1a8) returned 1 [0129.703] CloseHandle (hObject=0x1a4) returned 1 [0129.703] CloseHandle (hObject=0x1a0) returned 1 [0129.703] CloseHandle (hObject=0x194) returned 1 [0129.703] CloseHandle (hObject=0x184) returned 1 [0129.703] CloseHandle (hObject=0xec) returned 1 [0129.703] CloseHandle (hObject=0xe0) returned 1 [0129.703] CloseHandle (hObject=0xcc) returned 1 [0129.703] CloseHandle (hObject=0xd8) returned 1 [0129.703] CloseHandle (hObject=0x140) returned 1 [0129.703] CloseHandle (hObject=0x14c) returned 1 [0129.704] CloseHandle (hObject=0xf4) returned 1 [0129.704] CloseHandle (hObject=0x174) returned 1 [0129.704] CloseHandle (hObject=0x170) returned 1 [0129.704] CloseHandle (hObject=0x11c) returned 1 [0129.704] CloseHandle (hObject=0x178) returned 1 [0129.704] CloseHandle (hObject=0x13c) returned 1 [0129.704] CloseHandle (hObject=0x100) returned 1 [0129.704] CloseHandle (hObject=0x98) returned 1 [0129.704] CloseHandle (hObject=0x150) returned 1 [0129.704] CloseHandle (hObject=0x188) returned 1 [0129.704] CloseHandle (hObject=0x190) returned 1 [0129.705] CloseHandle (hObject=0x108) returned 1 [0129.705] CloseHandle (hObject=0x138) returned 1 [0129.705] CloseHandle (hObject=0x18c) returned 1 [0129.705] CloseHandle (hObject=0xe4) returned 1 [0129.705] CloseHandle (hObject=0xf0) returned 1 [0129.705] CloseHandle (hObject=0x104) returned 1 [0129.705] CloseHandle (hObject=0xfc) returned 1 [0129.705] CloseHandle (hObject=0x134) returned 1 [0129.705] CloseHandle (hObject=0x130) returned 1 [0129.705] CloseHandle (hObject=0xf8) returned 1 [0129.706] CloseHandle (hObject=0x158) returned 1 [0129.706] CloseHandle (hObject=0x164) returned 1 [0129.706] CloseHandle (hObject=0x160) returned 1 [0129.706] CloseHandle (hObject=0x10c) returned 1 [0129.706] CloseHandle (hObject=0x114) returned 1 [0129.706] CloseHandle (hObject=0xe8) returned 1 [0129.706] CloseHandle (hObject=0xbc) returned 1 [0129.706] CloseHandle (hObject=0x180) returned 1 [0129.706] CloseHandle (hObject=0x17c) returned 1 [0129.707] CloseHandle (hObject=0x118) returned 1 [0129.707] CloseHandle (hObject=0xc8) returned 1 [0129.707] CloseHandle (hObject=0x16c) returned 1 [0129.707] CloseHandle (hObject=0x144) returned 1 [0129.707] CloseHandle (hObject=0xd0) returned 1 [0129.707] CloseHandle (hObject=0x154) returned 1 [0129.707] CloseHandle (hObject=0x168) returned 1 [0129.707] CloseHandle (hObject=0x198) returned 1 [0129.707] CloseHandle (hObject=0x12c) returned 1 [0129.707] CloseHandle (hObject=0x128) returned 1 [0129.707] CloseHandle (hObject=0x19c) returned 1 [0129.707] CloseHandle (hObject=0x15c) returned 1 [0129.708] CloseHandle (hObject=0x120) returned 1 [0129.708] CloseHandle (hObject=0x148) returned 1 [0129.708] CloseHandle (hObject=0xc0) returned 1 [0129.708] CloseHandle (hObject=0x124) returned 1 [0129.708] CloseHandle (hObject=0x110) returned 1 [0129.708] CloseHandle (hObject=0xdc) returned 1 [0129.708] SwitchToThread () returned 1 [0129.709] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.712] SetEvent (hEvent=0x7c) returned 1 [0129.712] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.712] SetEvent (hEvent=0x7c) returned 1 [0129.712] SwitchToThread () returned 1 [0129.713] SetEvent (hEvent=0x6c) returned 1 [0129.713] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.719] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.723] SetEvent (hEvent=0x7c) returned 1 [0129.723] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.723] SetEvent (hEvent=0x7c) returned 1 [0129.723] SwitchToThread () returned 1 [0129.724] SetEvent (hEvent=0x6c) returned 1 [0129.724] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.730] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.733] SetEvent (hEvent=0x7c) returned 1 [0129.733] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.733] SetEvent (hEvent=0x7c) returned 1 [0129.733] SwitchToThread () returned 1 [0129.734] SetEvent (hEvent=0x6c) returned 1 [0129.734] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.742] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.755] SetEvent (hEvent=0x7c) returned 1 [0129.755] SetEvent (hEvent=0x6c) returned 1 [0129.755] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.757] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.763] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.949] SetEvent (hEvent=0x6c) returned 1 [0129.949] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0129.954] SetEvent (hEvent=0x6c) returned 1 [0129.954] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0129.957] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0129.957] CloseHandle (hObject=0xc0) returned 1 [0129.957] CloseHandle (hObject=0x110) returned 1 [0129.957] CloseHandle (hObject=0xdc) returned 1 [0129.957] CloseHandle (hObject=0x124) returned 1 [0129.957] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.018] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.087] SetEvent (hEvent=0xb8) returned 1 [0130.087] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.087] SetEvent (hEvent=0xb8) returned 1 [0130.088] SetEvent (hEvent=0x6c) returned 1 [0130.088] CloseHandle (hObject=0x168) returned 1 [0130.088] CloseHandle (hObject=0x198) returned 1 [0130.088] CloseHandle (hObject=0x12c) returned 1 [0130.088] CloseHandle (hObject=0x128) returned 1 [0130.088] SwitchToThread () returned 1 [0130.102] SwitchToThread () returned 1 [0130.103] SetEvent (hEvent=0xb8) returned 1 [0130.103] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.103] SetEvent (hEvent=0xb8) returned 1 [0130.103] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.104] SetEvent (hEvent=0xb8) returned 1 [0130.104] SwitchToThread () returned 1 [0130.104] SetEvent (hEvent=0x6c) returned 1 [0130.105] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.111] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.113] SetEvent (hEvent=0xb8) returned 1 [0130.114] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.114] SetEvent (hEvent=0xb8) returned 1 [0130.114] SwitchToThread () returned 1 [0130.115] SetEvent (hEvent=0x6c) returned 1 [0130.115] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.129] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.177] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.178] SetEvent (hEvent=0x6c) returned 1 [0130.178] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.181] SetEvent (hEvent=0x6c) returned 1 [0130.181] CloseHandle (hObject=0x15c) returned 1 [0130.181] CloseHandle (hObject=0x120) returned 1 [0130.181] CloseHandle (hObject=0x148) returned 1 [0130.181] CloseHandle (hObject=0x154) returned 1 [0130.181] SwitchToThread () returned 1 [0130.181] SetEvent (hEvent=0x6c) returned 1 [0130.181] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.182] SetEvent (hEvent=0x6c) returned 1 [0130.182] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.182] SetEvent (hEvent=0x6c) returned 1 [0130.182] SwitchToThread () returned 1 [0130.183] SetEvent (hEvent=0xb8) returned 1 [0130.183] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.189] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.192] SetEvent (hEvent=0x6c) returned 1 [0130.192] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.192] SetEvent (hEvent=0x6c) returned 1 [0130.192] SwitchToThread () returned 1 [0130.194] SetEvent (hEvent=0xb8) returned 1 [0130.194] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.370] SetEvent (hEvent=0xb8) returned 1 [0130.370] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.371] SetEvent (hEvent=0xb8) returned 1 [0130.371] SetEvent (hEvent=0x7c) returned 1 [0130.371] CloseHandle (hObject=0xe4) returned 1 [0130.371] SwitchToThread () returned 1 [0130.374] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.392] SetEvent (hEvent=0x6c) returned 1 [0130.392] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.393] SetEvent (hEvent=0x6c) returned 1 [0130.393] SetEvent (hEvent=0x7c) returned 1 [0130.393] CloseHandle (hObject=0x19c) returned 1 [0130.393] CloseHandle (hObject=0x18c) returned 1 [0130.393] SwitchToThread () returned 1 [0130.395] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.399] SetEvent (hEvent=0x6c) returned 1 [0130.399] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.399] SetEvent (hEvent=0x6c) returned 1 [0130.399] SwitchToThread () returned 1 [0130.401] SetEvent (hEvent=0x7c) returned 1 [0130.401] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.454] SetEvent (hEvent=0x7c) returned 1 [0130.454] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.477] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.517] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.532] SetEvent (hEvent=0x6c) returned 1 [0130.533] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0130.556] SetEvent (hEvent=0x7c) returned 1 [0130.556] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0130.576] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.576] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.629] SetEvent (hEvent=0x7c) returned 1 [0130.629] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.629] SetEvent (hEvent=0x7c) returned 1 [0130.629] SetEvent (hEvent=0x6c) returned 1 [0130.629] CloseHandle (hObject=0x18c) returned 1 [0130.629] CloseHandle (hObject=0x154) returned 1 [0130.629] CloseHandle (hObject=0x128) returned 1 [0130.629] SwitchToThread () returned 1 [0130.630] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.647] SetEvent (hEvent=0x6c) returned 1 [0130.648] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0130.668] SetEvent (hEvent=0x7c) returned 1 [0130.668] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0130.669] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0130.669] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0130.669] SetEvent (hEvent=0x7c) returned 1 [0130.681] GetFileType (hFile=0x19c) returned 0x1 [0130.681] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0130.681] WriteFile (in: hFile=0x19c, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x200000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429800*=0x200000, lpOverlapped=0x1242980c) returned 1 [0130.689] GetFileType (hFile=0x19c) returned 0x1 [0130.689] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x200000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0130.689] ReadFile (in: hFile=0x19c, lpBuffer=0x1320a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1320a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0130.689] CloseHandle (hObject=0x19c) returned 1 [0130.689] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0130.689] SetEvent (hEvent=0x7c) returned 1 [0130.690] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0130.690] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/edb00001.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\edb00001.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.690] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0130.690] WriteFile (in: hFile=0x19c, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0130.708] CloseHandle (hObject=0x19c) returned 1 [0130.708] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1244a000*, nNumberOfCharsToWrite=0x78, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x1244a000*, lpNumberOfCharsWritten=0x124294d4*=0x78) returned 1 [0130.709] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.709] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.709] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.709] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.709] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.709] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Backup/old/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.709] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0130.710] CloseHandle (hObject=0x19c) returned 1 [0130.710] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.711] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.711] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.711] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0130.712] WriteFile (in: hFile=0x19c, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0130.713] CloseHandle (hObject=0x19c) returned 1 [0130.713] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.713] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.714] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.714] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff76ba90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff76ba90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xff76ba90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff76ba90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff76ba90, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff76ba90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff772fc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="GREENB~1.HTM")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="GREENB~1.JPG")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="HANDPR~1.HTM")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="HANDPR~1.JPG")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="ORANGE~1.HTM")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="ORANGE~1.JPG")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="SHADES~1.HTM")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="SHADES~1.JPG")) returned 1 [0130.714] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="SOFTBL~1.HTM")) returned 1 [0130.715] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0130.715] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0130.715] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0130.715] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.715] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.715] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.715] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.715] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.715] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.716] ReadFile (in: hFile=0x19c, lpBuffer=0x12466200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466200*, lpNumberOfBytesRead=0x124299e0*=0xff, lpOverlapped=0x0) returned 1 [0130.717] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0130.718] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.718] ReadFile (in: hFile=0x128, lpBuffer=0x12466300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466300*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0130.719] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.720] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.720] ReadFile (in: hFile=0x154, lpBuffer=0x12466400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466400*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0130.721] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0130.721] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.721] ReadFile (in: hFile=0x18c, lpBuffer=0x12466500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466500*, lpNumberOfBytesRead=0x124299e0*=0xe7, lpOverlapped=0x0) returned 1 [0130.722] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0130.722] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.722] ReadFile (in: hFile=0x148, lpBuffer=0x12466600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0130.724] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Green Bubbles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0130.725] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.725] ReadFile (in: hFile=0x120, lpBuffer=0x12466700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466700*, lpNumberOfBytesRead=0x124299e0*=0xed, lpOverlapped=0x0) returned 1 [0130.726] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0130.726] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.726] ReadFile (in: hFile=0x15c, lpBuffer=0x12466800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466800*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0130.728] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Hand Prints.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0130.729] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.729] ReadFile (in: hFile=0x10c, lpBuffer=0x12466900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466900*, lpNumberOfBytesRead=0x124299e0*=0xeb, lpOverlapped=0x0) returned 1 [0130.730] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0130.730] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.730] ReadFile (in: hFile=0x124, lpBuffer=0x12466a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466a00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0130.732] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Orange Circles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0130.733] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.733] ReadFile (in: hFile=0xdc, lpBuffer=0x12466b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466b00*, lpNumberOfBytesRead=0x124299e0*=0xed, lpOverlapped=0x0) returned 1 [0130.734] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0130.735] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.735] ReadFile (in: hFile=0x110, lpBuffer=0x12466c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466c00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0130.736] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0130.737] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.737] ReadFile (in: hFile=0xc0, lpBuffer=0x12466d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466d00*, lpNumberOfBytesRead=0x124299e0*=0xe8, lpOverlapped=0x0) returned 1 [0130.738] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0130.738] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.738] ReadFile (in: hFile=0x12c, lpBuffer=0x12466e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466e00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0130.740] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0130.741] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.741] ReadFile (in: hFile=0x198, lpBuffer=0x12466f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12466f00*, lpNumberOfBytesRead=0x124299e0*=0xe9, lpOverlapped=0x0) returned 1 [0130.742] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0130.742] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.742] ReadFile (in: hFile=0x168, lpBuffer=0x12467000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12467000*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0130.858] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Shades of Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0130.858] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.866] ReadFile (in: hFile=0xd0, lpBuffer=0x12467100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12467100*, lpNumberOfBytesRead=0x124299e0*=0xed, lpOverlapped=0x0) returned 1 [0130.867] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0130.867] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.880] ReadFile (in: hFile=0x144, lpBuffer=0x12467200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12467200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0130.887] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Soft Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0130.888] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.897] ReadFile (in: hFile=0x16c, lpBuffer=0x12467300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12467300*, lpNumberOfBytesRead=0x124299e0*=0xe8, lpOverlapped=0x0) returned 1 [0130.899] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0130.899] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.900] ReadFile (in: hFile=0xc8, lpBuffer=0x12467400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12467400*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0130.913] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0130.914] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.927] ReadFile (in: hFile=0x118, lpBuffer=0x12467500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12467500*, lpNumberOfBytesRead=0x124299e0*=0xe6, lpOverlapped=0x0) returned 1 [0130.928] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0130.928] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.929] ReadFile (in: hFile=0x17c, lpBuffer=0x12467600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12467600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0130.935] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1 [0130.936] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0130.936] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0130.943] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e220 | out: pbBuffer=0x1249e220) returned 1 [0130.944] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2270 | out: pbBuffer=0x124e2270) returned 1 [0130.944] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12467702 | out: pbBuffer=0x12467702) returned 1 [0130.944] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12467729 | out: pbBuffer=0x12467729) returned 1 [0130.944] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12467729 | out: pbBuffer=0x12467729) returned 1 [0130.945] SetEvent (hEvent=0x6c) returned 1 [0130.945] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0xff, lpOverlapped=0x0) returned 1 [0130.946] GetFileType (hFile=0x180) returned 0x1 [0130.946] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0130.946] WriteFile (in: hFile=0x180, lpBuffer=0x12467900*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x12467900*, lpNumberOfBytesWritten=0x124298a8*=0xff, lpOverlapped=0x124298b4) returned 1 [0130.946] GetFileType (hFile=0x180) returned 0x1 [0130.946] SetFilePointerEx (in: hFile=0x180, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0130.946] ReadFile (in: hFile=0x180, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0130.946] CloseHandle (hObject=0x180) returned 1 [0130.946] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0130.946] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0130.962] WriteFile (in: hFile=0x180, lpBuffer=0x1248db00*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1248db00*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0130.962] CloseHandle (hObject=0x180) returned 1 [0130.962] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1244a0f0*, nNumberOfCharsToWrite=0x75, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x1244a0f0*, lpNumberOfCharsWritten=0x1242957c*=0x75) returned 1 [0130.969] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0130.969] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0130.969] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0130.977] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0130.977] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466002 | out: pbBuffer=0x12466002) returned 1 [0130.977] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1246604e | out: pbBuffer=0x1246604e) returned 1 [0130.979] CloseHandle (hObject=0xd0) returned 1 [0130.979] CloseHandle (hObject=0x168) returned 1 [0130.979] CloseHandle (hObject=0x198) returned 1 [0130.979] CloseHandle (hObject=0x12c) returned 1 [0130.979] CloseHandle (hObject=0xc0) returned 1 [0130.979] CloseHandle (hObject=0x110) returned 1 [0130.979] CloseHandle (hObject=0xdc) returned 1 [0130.979] CloseHandle (hObject=0x124) returned 1 [0130.979] CloseHandle (hObject=0x10c) returned 1 [0130.979] CloseHandle (hObject=0x15c) returned 1 [0130.979] CloseHandle (hObject=0x120) returned 1 [0130.979] CloseHandle (hObject=0x148) returned 1 [0130.979] CloseHandle (hObject=0x18c) returned 1 [0130.979] CloseHandle (hObject=0x154) returned 1 [0130.979] CloseHandle (hObject=0x128) returned 1 [0130.979] CloseHandle (hObject=0x19c) returned 1 [0131.006] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.472] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.543] SetEvent (hEvent=0x7c) returned 1 [0131.543] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.548] SetEvent (hEvent=0x7c) returned 1 [0131.548] SetEvent (hEvent=0xb8) returned 1 [0131.548] CloseHandle (hObject=0x154) returned 1 [0131.548] CloseHandle (hObject=0x19c) returned 1 [0131.548] CloseHandle (hObject=0x180) returned 1 [0131.549] CloseHandle (hObject=0xc0) returned 1 [0131.549] CloseHandle (hObject=0x10c) returned 1 [0131.549] CloseHandle (hObject=0x15c) returned 1 [0131.549] CloseHandle (hObject=0x120) returned 1 [0131.549] CloseHandle (hObject=0x148) returned 1 [0131.549] CloseHandle (hObject=0x18c) returned 1 [0131.549] CloseHandle (hObject=0x124) returned 1 [0131.549] SwitchToThread () returned 1 [0131.550] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.592] SetEvent (hEvent=0xb8) returned 1 [0131.592] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.593] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.593] SetEvent (hEvent=0xb8) returned 1 [0131.593] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.596] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.596] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.597] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.597] SetEvent (hEvent=0xac) returned 1 [0131.597] SetEvent (hEvent=0xb8) returned 1 [0131.597] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429774, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429774*=0x40b0, lpOverlapped=0x0) returned 1 [0131.597] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.597] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.597] SetEvent (hEvent=0xb8) returned 1 [0131.597] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.598] GetFileType (hFile=0xdc) returned 0x1 [0131.598] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242973c | out: lpNewFilePointer=0x0) returned 1 [0131.598] WriteFile (in: hFile=0xdc, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0x40b0, lpNumberOfBytesWritten=0x12429758, lpOverlapped=0x12429764 | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x12429758*=0x40b0, lpOverlapped=0x12429764) returned 1 [0131.598] GetFileType (hFile=0xdc) returned 0x1 [0131.598] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x40b0, lpNewFilePointer=0x0, dwMoveMethod=0x1242973c | out: lpNewFilePointer=0x0) returned 1 [0131.598] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429774, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429774*=0x0, lpOverlapped=0x0) returned 1 [0131.598] CloseHandle (hObject=0xdc) returned 1 [0131.598] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.598] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429764 | out: lpMode=0x12429764) returned 0 [0131.599] WriteFile (in: hFile=0xdc, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429768, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429768*=0x108, lpOverlapped=0x0) returned 1 [0131.599] CloseHandle (hObject=0xdc) returned 1 [0131.599] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa3, lpNumberOfCharsWritten=0x1242942c, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x1242942c*=0xa3) returned 1 [0131.599] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb97ade50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1c362)) returned 1 [0131.599] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.599] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429764 | out: lpMode=0x12429764) returned 0 [0131.600] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e040 | out: pbBuffer=0x1249e040) returned 1 [0131.600] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c102 | out: pbBuffer=0x1248c102) returned 1 [0131.600] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c10c | out: pbBuffer=0x1248c10c) returned 1 [0131.602] SetEvent (hEvent=0x6c) returned 1 [0131.603] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429774, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429774*=0x1c362, lpOverlapped=0x0) returned 1 [0131.603] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.603] SetEvent (hEvent=0x6c) returned 1 [0131.603] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.604] GetFileType (hFile=0xdc) returned 0x1 [0131.604] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242973c | out: lpNewFilePointer=0x0) returned 1 [0131.604] WriteFile (in: hFile=0xdc, lpBuffer=0x12596000*, nNumberOfBytesToWrite=0x1c362, lpNumberOfBytesWritten=0x12429758, lpOverlapped=0x12429764 | out: lpBuffer=0x12596000*, lpNumberOfBytesWritten=0x12429758*=0x1c362, lpOverlapped=0x12429764) returned 1 [0131.605] GetFileType (hFile=0xdc) returned 0x1 [0131.605] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x1c362, lpNewFilePointer=0x0, dwMoveMethod=0x1242973c | out: lpNewFilePointer=0x0) returned 1 [0131.605] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429774, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429774*=0x0, lpOverlapped=0x0) returned 1 [0131.605] CloseHandle (hObject=0xdc) returned 1 [0131.605] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.605] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429764 | out: lpMode=0x12429764) returned 0 [0131.605] WriteFile (in: hFile=0xdc, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429768, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429768*=0x108, lpOverlapped=0x0) returned 1 [0131.605] CloseHandle (hObject=0xdc) returned 1 [0131.606] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa3, lpNumberOfCharsWritten=0x1242942c, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x1242942c*=0xa3) returned 1 [0131.606] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.606] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.606] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.606] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.606] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.606] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/Firefox/Profiles/silmbjec.default/thumbnails/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.606] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0131.607] CloseHandle (hObject=0xdc) returned 1 [0131.607] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.607] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.607] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.607] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0131.608] WriteFile (in: hFile=0xdc, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0131.609] CloseHandle (hObject=0xdc) returned 1 [0131.609] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.609] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.610] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.610] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfffae680, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfffae680, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.610] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfffae680, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfffae680, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.610] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfffae680, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfffae680, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfffae680, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.610] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E7CF176E110C211B", cAlternateFileName="E7CF17~1")) returned 1 [0131.610] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.610] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.610] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.610] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.610] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.610] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.615] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.616] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.616] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.616] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.616] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.616] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.616] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.616] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0131.616] CloseHandle (hObject=0xdc) returned 1 [0131.616] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.617] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.617] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.618] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0131.618] WriteFile (in: hFile=0xdc, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0131.619] CloseHandle (hObject=0xdc) returned 1 [0131.619] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.620] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.620] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.620] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfffdbd10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfffdbd10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.620] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xfffdbd10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfffdbd10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.620] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfffdbd10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfffdbd10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfffe0b30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.620] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="active-update.xml", cAlternateFileName="ACTIVE~1.XML")) returned 1 [0131.620] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0131.620] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates.xml", cAlternateFileName="")) returned 1 [0131.620] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.621] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.621] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.621] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.621] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0131.622] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0131.622] ReadFile (in: hFile=0xdc, lpBuffer=0x1248c500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1248c500*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0131.624] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.624] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.625] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.625] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0131.626] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0131.626] ReadFile (in: hFile=0x154, lpBuffer=0x1248c600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1248c600*, lpNumberOfBytesRead=0x124299e0*=0x39, lpOverlapped=0x0) returned 1 [0131.627] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464)) returned 1 [0131.627] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39)) returned 1 [0131.627] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.627] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.627] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.627] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.627] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.627] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0131.628] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0131.628] CloseHandle (hObject=0x124) returned 1 [0131.628] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.628] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.628] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0131.629] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0131.629] WriteFile (in: hFile=0x124, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0131.630] CloseHandle (hObject=0x124) returned 1 [0131.630] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.630] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.631] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.631] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffff6ac0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffff6ac0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.631] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xffff6ac0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffff6ac0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.631] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0131.631] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xffff6ac0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xffff6ac0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xffffb8e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.631] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.631] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.631] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.631] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.632] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.632] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.632] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.632] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.632] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.632] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0131.633] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0131.633] WriteFile (in: hFile=0x124, lpBuffer=0x124d3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x124d3900*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0131.634] CloseHandle (hObject=0x124) returned 1 [0131.634] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.635] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.635] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.635] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x700, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x700, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.635] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x700, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x700, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.636] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x700, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x700, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5520, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.636] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.mar", cAlternateFileName="")) returned 1 [0131.636] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 1 [0131.636] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.636] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.636] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.636] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.636] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0/update.mar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0131.636] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.636] ReadFile (in: hFile=0x124, lpBuffer=0x1248c700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1248c700*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0131.639] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0/update.status" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0131.640] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0131.640] ReadFile (in: hFile=0x18c, lpBuffer=0x1248c800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1248c800*, lpNumberOfBytesRead=0x12429890*=0xc, lpOverlapped=0x0) returned 1 [0131.641] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0/update.mar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0)) returned 1 [0131.641] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0/update.status" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc)) returned 1 [0131.641] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.641] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.642] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.642] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.642] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.642] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0131.642] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0131.642] CloseHandle (hObject=0x148) returned 1 [0131.642] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.642] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.642] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.642] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.643] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0131.643] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Mozilla/updates/E7CF176E110C211B/updates/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0131.643] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0131.643] CloseHandle (hObject=0x148) returned 1 [0131.643] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.643] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.643] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0131.644] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0131.644] WriteFile (in: hFile=0x148, lpBuffer=0x12459300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12459300*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0131.645] CloseHandle (hObject=0x148) returned 1 [0131.645] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\@_read_to_recover_files_@.txt")) returned 0x2020 [0131.646] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0131.646] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.646] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1b4b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1b4b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.646] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1b4b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1b4b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.646] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xba21a7a0, ftCreationTime.dwHighDateTime=0x1d4d288, ftLastAccessTime.dwLowDateTime=0x9de9ae80, ftLastAccessTime.dwHighDateTime=0x1d4c8aa, ftLastWriteTime.dwLowDateTime=0x9de9ae80, ftLastWriteTime.dwHighDateTime=0x1d4c8aa, nFileSizeHigh=0x0, nFileSizeLow=0xf50c, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 6yp8s.m4a", cAlternateFileName="16YP8S~1.M4A")) returned 1 [0131.646] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9bb45830, ftCreationTime.dwHighDateTime=0x1d4d1cf, ftLastAccessTime.dwLowDateTime=0x8db18130, ftLastAccessTime.dwHighDateTime=0x1d4ca28, ftLastWriteTime.dwLowDateTime=0x8db18130, ftLastWriteTime.dwHighDateTime=0x1d4ca28, nFileSizeHigh=0x0, nFileSizeLow=0xe857, dwReserved0=0x0, dwReserved1=0x0, cFileName="2NJzPqZUSghYT7j9_F.m4a", cAlternateFileName="2NJZPQ~1.M4A")) returned 1 [0131.646] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1ab2490, ftCreationTime.dwHighDateTime=0x1d4d4f8, ftLastAccessTime.dwLowDateTime=0xa9a00590, ftLastAccessTime.dwHighDateTime=0x1d4c71e, ftLastWriteTime.dwLowDateTime=0xa9a00590, ftLastWriteTime.dwHighDateTime=0x1d4c71e, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="5CZCd.png", cAlternateFileName="")) returned 1 [0131.646] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1ce790, ftCreationTime.dwHighDateTime=0x1d4ca3a, ftLastAccessTime.dwLowDateTime=0xe6d6fc0, ftLastAccessTime.dwHighDateTime=0x1d4cee6, ftLastWriteTime.dwLowDateTime=0xe6d6fc0, ftLastWriteTime.dwHighDateTime=0x1d4cee6, nFileSizeHigh=0x0, nFileSizeLow=0x149e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="74aFFMv4VT.gif", cAlternateFileName="74AFFM~1.GIF")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb29709f0, ftCreationTime.dwHighDateTime=0x1d4d024, ftLastAccessTime.dwLowDateTime=0x820edd60, ftLastAccessTime.dwHighDateTime=0x1d4d08f, ftLastWriteTime.dwLowDateTime=0x820edd60, ftLastWriteTime.dwHighDateTime=0x1d4d08f, nFileSizeHigh=0x0, nFileSizeLow=0x14ffd, dwReserved0=0x0, dwReserved1=0x0, cFileName="8dR6MmO9tdiDlfvF3x.wav", cAlternateFileName="8DR6MM~1.WAV")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ca659b0, ftCreationTime.dwHighDateTime=0x1d4d352, ftLastAccessTime.dwLowDateTime=0xa5de6200, ftLastAccessTime.dwHighDateTime=0x1d4caf5, ftLastWriteTime.dwLowDateTime=0xa5de6200, ftLastWriteTime.dwHighDateTime=0x1d4caf5, nFileSizeHigh=0x0, nFileSizeLow=0x53f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9hz-IaJQtsVd7ebuZj2.gif", cAlternateFileName="9HZ-IA~1.GIF")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1b4b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1b4b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x202d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7394e00, ftCreationTime.dwHighDateTime=0x1d4d284, ftLastAccessTime.dwLowDateTime=0x2846ffd0, ftLastAccessTime.dwHighDateTime=0x1d4cdea, ftLastWriteTime.dwLowDateTime=0x2846ffd0, ftLastWriteTime.dwHighDateTime=0x1d4cdea, nFileSizeHigh=0x0, nFileSizeLow=0x12c76, dwReserved0=0x0, dwReserved1=0x0, cFileName="a8UAorzF.flv", cAlternateFileName="")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8426eba0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0x8426eba0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0x842e0fc0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.log", cAlternateFileName="")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84e8fac0, ftCreationTime.dwHighDateTime=0x1d4cf63, ftLastAccessTime.dwLowDateTime=0x9758e760, ftLastAccessTime.dwHighDateTime=0x1d4c789, ftLastWriteTime.dwLowDateTime=0x9758e760, ftLastWriteTime.dwHighDateTime=0x1d4c789, nFileSizeHigh=0x0, nFileSizeLow=0xe927, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3x3kc X9Kv-.mp3", cAlternateFileName="C3X3KC~1.MP3")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x67029ef0, ftCreationTime.dwHighDateTime=0x1d4d597, ftLastAccessTime.dwLowDateTime=0x92ff880, ftLastAccessTime.dwHighDateTime=0x1d4c602, ftLastWriteTime.dwLowDateTime=0x92ff880, ftLastWriteTime.dwHighDateTime=0x1d4c602, nFileSizeHigh=0x0, nFileSizeLow=0xa282, dwReserved0=0x0, dwReserved1=0x0, cFileName="cFnPlE0QTPSaKbbZ.swf", cAlternateFileName="CFNPLE~1.SWF")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48b2fe30, ftCreationTime.dwHighDateTime=0x1d4caad, ftLastAccessTime.dwLowDateTime=0xe02aa7d0, ftLastAccessTime.dwHighDateTime=0x1d4cdba, ftLastWriteTime.dwLowDateTime=0xe02aa7d0, ftLastWriteTime.dwHighDateTime=0x1d4cdba, nFileSizeHigh=0x0, nFileSizeLow=0xa82b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EhAjZjZ2Lf3jG.mp4", cAlternateFileName="EHAJZJ~1.MP4")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33d9ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x33d9ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0e94bc0, ftCreationTime.dwHighDateTime=0x1d4d072, ftLastAccessTime.dwLowDateTime=0x84c9a230, ftLastAccessTime.dwHighDateTime=0x1d4c5bb, ftLastWriteTime.dwLowDateTime=0x84c9a230, ftLastWriteTime.dwHighDateTime=0x1d4c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x6b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="g4itO Fs.mp4", cAlternateFileName="G4ITOF~1.MP4")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa561a9d0, ftCreationTime.dwHighDateTime=0x1d4cf88, ftLastAccessTime.dwLowDateTime=0xbf9ce4f0, ftLastAccessTime.dwHighDateTime=0x1d4d018, ftLastWriteTime.dwLowDateTime=0xbf9ce4f0, ftLastWriteTime.dwHighDateTime=0x1d4d018, nFileSizeHigh=0x0, nFileSizeLow=0x16943, dwReserved0=0x0, dwReserved1=0x0, cFileName="gPmgSN2p_OsI nUds.mp4", cAlternateFileName="GPMGSN~1.MP4")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3eacb4d0, ftCreationTime.dwHighDateTime=0x1d4d34f, ftLastAccessTime.dwLowDateTime=0x1e0fd210, ftLastAccessTime.dwHighDateTime=0x1d4d210, ftLastWriteTime.dwLowDateTime=0x1e0fd210, ftLastWriteTime.dwHighDateTime=0x1d4d210, nFileSizeHigh=0x0, nFileSizeLow=0x7b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HAqWtRQ.avi", cAlternateFileName="")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5bb13150, ftCreationTime.dwHighDateTime=0x1d4d29b, ftLastAccessTime.dwLowDateTime=0xf8866760, ftLastAccessTime.dwHighDateTime=0x1d4ceb4, ftLastWriteTime.dwLowDateTime=0xf8866760, ftLastWriteTime.dwHighDateTime=0x1d4ceb4, nFileSizeHigh=0x0, nFileSizeLow=0x117f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="iIOMq4DfIO nhu.swf", cAlternateFileName="IIOMQ4~1.SWF")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc6950a0, ftCreationTime.dwHighDateTime=0x1d4cc74, ftLastAccessTime.dwLowDateTime=0xf386b550, ftLastAccessTime.dwHighDateTime=0x1d4ca16, ftLastWriteTime.dwLowDateTime=0xf386b550, ftLastWriteTime.dwHighDateTime=0x1d4ca16, nFileSizeHigh=0x0, nFileSizeLow=0x1092, dwReserved0=0x0, dwReserved1=0x0, cFileName="kRcK7dHEC138B.png", cAlternateFileName="KRCK7D~1.PNG")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55b88f10, ftCreationTime.dwHighDateTime=0x1d4c593, ftLastAccessTime.dwLowDateTime=0xf6dfae00, ftLastAccessTime.dwHighDateTime=0x1d4cb0b, ftLastWriteTime.dwLowDateTime=0xf6dfae00, ftLastWriteTime.dwHighDateTime=0x1d4cb0b, nFileSizeHigh=0x0, nFileSizeLow=0xed57, dwReserved0=0x0, dwReserved1=0x0, cFileName="ldoSssq5DiXZ.m4a", cAlternateFileName="LDOSSS~1.M4A")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9cc7dc60, ftCreationTime.dwHighDateTime=0x1d4c74d, ftLastAccessTime.dwLowDateTime=0xcdba9ac0, ftLastAccessTime.dwHighDateTime=0x1d4d28c, ftLastWriteTime.dwLowDateTime=0xcdba9ac0, ftLastWriteTime.dwHighDateTime=0x1d4d28c, nFileSizeHigh=0x0, nFileSizeLow=0xf096, dwReserved0=0x0, dwReserved1=0x0, cFileName="LgaTEX4.mkv", cAlternateFileName="")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eeedcf0, ftCreationTime.dwHighDateTime=0x1d4cc90, ftLastAccessTime.dwLowDateTime=0xe992e9f0, ftLastAccessTime.dwHighDateTime=0x1d4d1f1, ftLastWriteTime.dwLowDateTime=0xe992e9f0, ftLastWriteTime.dwHighDateTime=0x1d4d1f1, nFileSizeHigh=0x0, nFileSizeLow=0x11ea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MBSH.png", cAlternateFileName="")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11f8be40, ftCreationTime.dwHighDateTime=0x1d4c673, ftLastAccessTime.dwLowDateTime=0x9d71a080, ftLastAccessTime.dwHighDateTime=0x1d4c606, ftLastWriteTime.dwLowDateTime=0x9d71a080, ftLastWriteTime.dwHighDateTime=0x1d4c606, nFileSizeHigh=0x0, nFileSizeLow=0x10a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MohgSuHcsjOAcL.mp3", cAlternateFileName="MOHGSU~1.MP3")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x287321a0, ftCreationTime.dwHighDateTime=0x1d4c6d3, ftLastAccessTime.dwLowDateTime=0x5c3e0490, ftLastAccessTime.dwHighDateTime=0x1d4d0c5, ftLastWriteTime.dwLowDateTime=0x5c3e0490, ftLastWriteTime.dwHighDateTime=0x1d4d0c5, nFileSizeHigh=0x0, nFileSizeLow=0x631f, dwReserved0=0x0, dwReserved1=0x0, cFileName="nskSWSOdZtuYlPSX.ots", cAlternateFileName="NSKSWS~1.OTS")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9f6b8b0, ftCreationTime.dwHighDateTime=0x1d4ce6b, ftLastAccessTime.dwLowDateTime=0x2b44b8f0, ftLastAccessTime.dwHighDateTime=0x1d4c9d8, ftLastWriteTime.dwLowDateTime=0x2b44b8f0, ftLastWriteTime.dwHighDateTime=0x1d4c9d8, nFileSizeHigh=0x0, nFileSizeLow=0x1877e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NzzDuZD.ots", cAlternateFileName="")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50900590, ftCreationTime.dwHighDateTime=0x1d4cda9, ftLastAccessTime.dwLowDateTime=0xd7c07900, ftLastAccessTime.dwHighDateTime=0x1d4d00b, ftLastWriteTime.dwLowDateTime=0xd7c07900, ftLastWriteTime.dwHighDateTime=0x1d4d00b, nFileSizeHigh=0x0, nFileSizeLow=0xd041, dwReserved0=0x0, dwReserved1=0x0, cFileName="P0PPkomdGEEJS.mp4", cAlternateFileName="P0PPKO~1.MP4")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0036950, ftCreationTime.dwHighDateTime=0x1d4c903, ftLastAccessTime.dwLowDateTime=0xe1bf4f80, ftLastAccessTime.dwHighDateTime=0x1d4c741, ftLastWriteTime.dwLowDateTime=0xe1bf4f80, ftLastWriteTime.dwHighDateTime=0x1d4c741, nFileSizeHigh=0x0, nFileSizeLow=0xa6fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="pk3r.csv", cAlternateFileName="")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca086a50, ftCreationTime.dwHighDateTime=0x1d4cc0c, ftLastAccessTime.dwLowDateTime=0xeab5be50, ftLastAccessTime.dwHighDateTime=0x1d4d3ce, ftLastWriteTime.dwLowDateTime=0xeab5be50, ftLastWriteTime.dwHighDateTime=0x1d4d3ce, nFileSizeHigh=0x0, nFileSizeLow=0x35e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PtpMZNH1.mp4", cAlternateFileName="")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x246f3480, ftCreationTime.dwHighDateTime=0x1d4c963, ftLastAccessTime.dwLowDateTime=0xa9575e40, ftLastAccessTime.dwHighDateTime=0x1d4c6e6, ftLastWriteTime.dwLowDateTime=0xa9575e40, ftLastWriteTime.dwHighDateTime=0x1d4c6e6, nFileSizeHigh=0x0, nFileSizeLow=0x17ef1, dwReserved0=0x0, dwReserved1=0x0, cFileName="pwncDXcaRAivjYgzsA9q.m4a", cAlternateFileName="PWNCDX~1.M4A")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2457fd20, ftCreationTime.dwHighDateTime=0x1d4ccff, ftLastAccessTime.dwLowDateTime=0x980ff7a0, ftLastAccessTime.dwHighDateTime=0x1d4c9d4, ftLastWriteTime.dwLowDateTime=0x980ff7a0, ftLastWriteTime.dwHighDateTime=0x1d4c9d4, nFileSizeHigh=0x0, nFileSizeLow=0x503d, dwReserved0=0x0, dwReserved1=0x0, cFileName="qAKzI51Ja.wav", cAlternateFileName="QAKZI5~1.WAV")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4df8ea30, ftCreationTime.dwHighDateTime=0x1d4cc9c, ftLastAccessTime.dwLowDateTime=0x93ceb1e0, ftLastAccessTime.dwHighDateTime=0x1d4c8cb, ftLastWriteTime.dwLowDateTime=0x93ceb1e0, ftLastWriteTime.dwHighDateTime=0x1d4c8cb, nFileSizeHigh=0x0, nFileSizeLow=0x70c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="rbP3q.bmp", cAlternateFileName="")) returned 1 [0131.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb90d3ff0, ftCreationTime.dwHighDateTime=0x1d4c84c, ftLastAccessTime.dwLowDateTime=0x52290000, ftLastAccessTime.dwHighDateTime=0x1d4d547, ftLastWriteTime.dwLowDateTime=0x52290000, ftLastWriteTime.dwHighDateTime=0x1d4d547, nFileSizeHigh=0x0, nFileSizeLow=0xed8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="S4UR.gif", cAlternateFileName="")) returned 1 [0131.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fa2b2f0, ftCreationTime.dwHighDateTime=0x1d4ce59, ftLastAccessTime.dwLowDateTime=0xdaa0c580, ftLastAccessTime.dwHighDateTime=0x1d4d501, ftLastWriteTime.dwLowDateTime=0xdaa0c580, ftLastWriteTime.dwHighDateTime=0x1d4d501, nFileSizeHigh=0x0, nFileSizeLow=0xeed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SnuxYSlMsArS.xls", cAlternateFileName="SNUXYS~1.XLS")) returned 1 [0131.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0131.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6bb1230, ftCreationTime.dwHighDateTime=0x1d4c829, ftLastAccessTime.dwLowDateTime=0x75f66fe0, ftLastAccessTime.dwHighDateTime=0x1d4cb1a, ftLastWriteTime.dwLowDateTime=0x75f66fe0, ftLastWriteTime.dwHighDateTime=0x1d4cb1a, nFileSizeHigh=0x0, nFileSizeLow=0x9ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="tGk_Hwpb.m4a", cAlternateFileName="")) returned 1 [0131.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84299200, ftCreationTime.dwHighDateTime=0x1d4c605, ftLastAccessTime.dwLowDateTime=0xee3f99f0, ftLastAccessTime.dwHighDateTime=0x1d4c8ad, ftLastWriteTime.dwLowDateTime=0xee3f99f0, ftLastWriteTime.dwHighDateTime=0x1d4c8ad, nFileSizeHigh=0x0, nFileSizeLow=0xbf43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uk-jgesxr.m4a", cAlternateFileName="UK-JGE~1.M4A")) returned 1 [0131.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46b855d0, ftCreationTime.dwHighDateTime=0x1d4c76f, ftLastAccessTime.dwLowDateTime=0x582a2ab0, ftLastAccessTime.dwHighDateTime=0x1d4c859, ftLastWriteTime.dwLowDateTime=0x582a2ab0, ftLastWriteTime.dwHighDateTime=0x1d4c859, nFileSizeHigh=0x0, nFileSizeLow=0x2a52, dwReserved0=0x0, dwReserved1=0x0, cFileName="vs2UHXIy6u.avi", cAlternateFileName="VS2UHX~1.AVI")) returned 1 [0131.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x874c95a0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0x874c95a0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0x874c95a0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPDNSE", cAlternateFileName="")) returned 1 [0131.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdf978e90, ftCreationTime.dwHighDateTime=0x1d4c672, ftLastAccessTime.dwLowDateTime=0x365c9ba0, ftLastAccessTime.dwHighDateTime=0x1d4cf27, ftLastWriteTime.dwLowDateTime=0x365c9ba0, ftLastWriteTime.dwHighDateTime=0x1d4cf27, nFileSizeHigh=0x0, nFileSizeLow=0x66aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="xjcSEqVI.gif", cAlternateFileName="")) returned 1 [0131.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xae06a660, ftCreationTime.dwHighDateTime=0x1d4d066, ftLastAccessTime.dwLowDateTime=0xd4b09de0, ftLastAccessTime.dwHighDateTime=0x1d4cc0e, ftLastWriteTime.dwLowDateTime=0xd4b09de0, ftLastWriteTime.dwHighDateTime=0x1d4cc0e, nFileSizeHigh=0x0, nFileSizeLow=0x81c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YoxF71BIQ70bZq8l.mkv", cAlternateFileName="YOXF71~1.MKV")) returned 1 [0131.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6f6a400, ftCreationTime.dwHighDateTime=0x1d4c7a7, ftLastAccessTime.dwLowDateTime=0xe29bc430, ftLastAccessTime.dwHighDateTime=0x1d4d423, ftLastWriteTime.dwLowDateTime=0xe29bc430, ftLastWriteTime.dwHighDateTime=0x1d4d423, nFileSizeHigh=0x0, nFileSizeLow=0x196c, dwReserved0=0x0, dwReserved1=0x0, cFileName="z9dJHJ0z4vQH.m4a", cAlternateFileName="Z9DJHJ~1.M4A")) returned 1 [0131.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3055f230, ftCreationTime.dwHighDateTime=0x1d4d11e, ftLastAccessTime.dwLowDateTime=0xd271d500, ftLastAccessTime.dwHighDateTime=0x1d4c9eb, ftLastWriteTime.dwLowDateTime=0xd271d500, ftLastWriteTime.dwHighDateTime=0x1d4c9eb, nFileSizeHigh=0x0, nFileSizeLow=0x1043c, dwReserved0=0x0, dwReserved1=0x0, cFileName="_1A46z36B4gblnYSfw.flv", cAlternateFileName="_1A46Z~1.FLV")) returned 1 [0131.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7db2190, ftCreationTime.dwHighDateTime=0x1d4c64f, ftLastAccessTime.dwLowDateTime=0xcb7b2640, ftLastAccessTime.dwHighDateTime=0x1d4d0c4, ftLastWriteTime.dwLowDateTime=0xcb7b2640, ftLastWriteTime.dwHighDateTime=0x1d4d0c4, nFileSizeHigh=0x0, nFileSizeLow=0x57ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="_g65j9qi3rKIQ.swf", cAlternateFileName="_G65J9~1.SWF")) returned 1 [0131.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.648] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.648] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/1 6yp8s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1 6yp8s.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0131.648] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.648] ReadFile (in: hFile=0x148, lpBuffer=0x1248ca00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248ca00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.649] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/2NJzPqZUSghYT7j9_F.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2njzpqzusghyt7j9_f.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0131.649] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.649] ReadFile (in: hFile=0x120, lpBuffer=0x1248cb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248cb00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.650] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/5CZCd.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\5czcd.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0131.650] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.651] ReadFile (in: hFile=0x15c, lpBuffer=0x1248cc00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248cc00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.651] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/74aFFMv4VT.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\74affmv4vt.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0131.652] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.652] ReadFile (in: hFile=0x10c, lpBuffer=0x1248ce00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248ce00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.652] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/8dR6MmO9tdiDlfvF3x.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\8dr6mmo9tdidlfvf3x.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0131.653] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.653] ReadFile (in: hFile=0xc0, lpBuffer=0x1248cf00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248cf00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.653] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/9hz-IaJQtsVd7ebuZj2.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\9hz-iajqtsvd7ebuzj2.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0131.654] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.654] ReadFile (in: hFile=0x180, lpBuffer=0x1248d000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248d000*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.655] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.655] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0131.655] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0131.655] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.655] ReadFile (in: hFile=0x19c, lpBuffer=0x1248d200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248d200*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.656] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/C3x3kc X9Kv-.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\c3x3kc x9kv-.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0131.656] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.656] ReadFile (in: hFile=0x110, lpBuffer=0x1248d300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248d300*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.657] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.657] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.658] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.658] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/EhAjZjZ2Lf3jG.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ehajzjz2lf3jg.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0131.658] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.658] ReadFile (in: hFile=0x128, lpBuffer=0x1248d400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248d400*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.659] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0131.659] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.660] ReadFile (in: hFile=0x12c, lpBuffer=0x1248d500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248d500*, lpNumberOfBytesRead=0x12429b30*=0x0, lpOverlapped=0x0) returned 1 [0131.660] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/HAqWtRQ.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\haqwtrq.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0131.660] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.660] ReadFile (in: hFile=0x198, lpBuffer=0x1248d700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248d700*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.661] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.661] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.662] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.662] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/LgaTEX4.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lgatex4.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0131.662] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.662] ReadFile (in: hFile=0x168, lpBuffer=0x1248d900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248d900*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.663] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/MBSH.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mbsh.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0131.663] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.663] ReadFile (in: hFile=0xd0, lpBuffer=0x1248da00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248da00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.664] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/MohgSuHcsjOAcL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mohgsuhcsjoacl.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0131.664] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.664] ReadFile (in: hFile=0x144, lpBuffer=0x1248db00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248db00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.665] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/NzzDuZD.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\nzzduzd.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0131.665] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.665] ReadFile (in: hFile=0x16c, lpBuffer=0x1248dd00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248dd00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.666] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/P0PPkomdGEEJS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\p0ppkomdgeejs.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0131.666] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.666] ReadFile (in: hFile=0xc8, lpBuffer=0x1248de00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1248de00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.667] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/PtpMZNH1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ptpmznh1.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0131.667] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.667] ReadFile (in: hFile=0x118, lpBuffer=0x12800000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12800000*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.668] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/S4UR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\s4ur.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0131.668] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.668] ReadFile (in: hFile=0x17c, lpBuffer=0x12800100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12800100*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.669] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/SnuxYSlMsArS.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\snuxyslmsars.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0131.669] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.670] ReadFile (in: hFile=0xbc, lpBuffer=0x12800200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12800200*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.670] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.670] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.671] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.671] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Uk-jgesxr.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\uk-jgesxr.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0131.671] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.671] ReadFile (in: hFile=0xe8, lpBuffer=0x12800400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12800400*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.672] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.672] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x874c95a0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0x874c95a0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0x874c95a0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0131.672] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0131.673] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/YoxF71BIQ70bZq8l.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\yoxf71biq70bzq8l.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0131.673] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.673] ReadFile (in: hFile=0x114, lpBuffer=0x12800500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12800500*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.674] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/_1A46z36B4gblnYSfw.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\_1a46z36b4gblnysfw.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0131.674] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.674] ReadFile (in: hFile=0x160, lpBuffer=0x12800600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12800600*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.675] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/_g65j9qi3rKIQ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\_g65j9qi3rkiq.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0131.675] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.675] ReadFile (in: hFile=0x164, lpBuffer=0x12800700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12800700*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.676] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/a8UAorzF.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\a8uaorzf.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0131.676] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.676] ReadFile (in: hFile=0x158, lpBuffer=0x12800900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12800900*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/cFnPlE0QTPSaKbbZ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cfnple0qtpsakbbz.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0131.677] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.677] ReadFile (in: hFile=0xf8, lpBuffer=0x12800a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12800a00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.678] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/g4itO Fs.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\g4ito fs.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0131.678] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.678] ReadFile (in: hFile=0x130, lpBuffer=0x12800c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12800c00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.679] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/gPmgSN2p_OsI nUds.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gpmgsn2p_osi nuds.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0131.679] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.679] ReadFile (in: hFile=0x134, lpBuffer=0x12800d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12800d00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.680] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/iIOMq4DfIO nhu.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\iiomq4dfio nhu.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0131.680] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.680] ReadFile (in: hFile=0xfc, lpBuffer=0x12800e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12800e00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.681] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/kRcK7dHEC138B.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\krck7dhec138b.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0131.681] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.681] ReadFile (in: hFile=0x104, lpBuffer=0x12800f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12800f00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.682] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/ldoSssq5DiXZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ldosssq5dixz.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0131.682] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.682] ReadFile (in: hFile=0xf0, lpBuffer=0x12801000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12801000*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.683] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/nskSWSOdZtuYlPSX.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\nskswsodztuylpsx.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0131.683] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.683] ReadFile (in: hFile=0xe4, lpBuffer=0x12801100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12801100*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.686] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/pk3r.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\pk3r.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0131.686] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.686] ReadFile (in: hFile=0x138, lpBuffer=0x12801200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12801200*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.687] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/pwncDXcaRAivjYgzsA9q.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\pwncdxcaraivjygzsa9q.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0131.687] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.687] ReadFile (in: hFile=0x108, lpBuffer=0x12801300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12801300*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.688] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/qAKzI51Ja.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qakzi51ja.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0131.688] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.688] ReadFile (in: hFile=0x190, lpBuffer=0x12801500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12801500*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.689] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/rbP3q.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\rbp3q.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0131.689] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.689] ReadFile (in: hFile=0x188, lpBuffer=0x12801600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12801600*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.690] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/tGk_Hwpb.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tgk_hwpb.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0131.690] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.691] ReadFile (in: hFile=0x150, lpBuffer=0x12801800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12801800*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.691] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/vs2UHXIy6u.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vs2uhxiy6u.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0131.692] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.692] ReadFile (in: hFile=0x98, lpBuffer=0x12801a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12801a00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.692] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/xjcSEqVI.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xjcseqvi.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0131.693] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.693] ReadFile (in: hFile=0x100, lpBuffer=0x12801c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12801c00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.693] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/z9dJHJ0z4vQH.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\z9djhj0z4vqh.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0131.694] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0131.694] ReadFile (in: hFile=0x13c, lpBuffer=0x12801d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x12801d00*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0131.695] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/1 6yp8s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1 6yp8s.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xba21a7a0, ftCreationTime.dwHighDateTime=0x1d4d288, ftLastAccessTime.dwLowDateTime=0x9de9ae80, ftLastAccessTime.dwHighDateTime=0x1d4c8aa, ftLastWriteTime.dwLowDateTime=0x9de9ae80, ftLastWriteTime.dwHighDateTime=0x1d4c8aa, nFileSizeHigh=0x0, nFileSizeLow=0xf50c)) returned 1 [0131.695] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/2NJzPqZUSghYT7j9_F.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2njzpqzusghyt7j9_f.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9bb45830, ftCreationTime.dwHighDateTime=0x1d4d1cf, ftLastAccessTime.dwLowDateTime=0x8db18130, ftLastAccessTime.dwHighDateTime=0x1d4ca28, ftLastWriteTime.dwLowDateTime=0x8db18130, ftLastWriteTime.dwHighDateTime=0x1d4ca28, nFileSizeHigh=0x0, nFileSizeLow=0xe857)) returned 1 [0131.695] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/5CZCd.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\5czcd.png"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1ab2490, ftCreationTime.dwHighDateTime=0x1d4d4f8, ftLastAccessTime.dwLowDateTime=0xa9a00590, ftLastAccessTime.dwHighDateTime=0x1d4c71e, ftLastWriteTime.dwLowDateTime=0xa9a00590, ftLastWriteTime.dwHighDateTime=0x1d4c71e, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d)) returned 1 [0131.695] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/5CZCd.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\5czcd.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.695] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.695] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e9a0 | out: pbBuffer=0x1249e9a0) returned 1 [0131.696] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410514 | out: pbBuffer=0x12410514) returned 1 [0131.696] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12801f02 | out: pbBuffer=0x12801f02) returned 1 [0131.697] SetEvent (hEvent=0xb8) returned 1 [0131.697] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x1f6d, lpOverlapped=0x0) returned 1 [0131.698] GetFileType (hFile=0x178) returned 0x1 [0131.698] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.698] WriteFile (in: hFile=0x178, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0x1f6d, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x124299f8*=0x1f6d, lpOverlapped=0x12429a04) returned 1 [0131.698] GetFileType (hFile=0x178) returned 0x1 [0131.698] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1f6d, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.698] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0131.698] CloseHandle (hObject=0x178) returned 1 [0131.698] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/5CZCd.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\5czcd.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.699] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.699] WriteFile (in: hFile=0x178, lpBuffer=0x1247dd40*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247dd40*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0131.699] CloseHandle (hObject=0x178) returned 1 [0131.699] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x125646e0*, nNumberOfCharsToWrite=0x58, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x125646e0*, lpNumberOfCharsWritten=0x124296cc*=0x58) returned 1 [0131.700] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/74aFFMv4VT.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\74affmv4vt.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1ce790, ftCreationTime.dwHighDateTime=0x1d4ca3a, ftLastAccessTime.dwLowDateTime=0xe6d6fc0, ftLastAccessTime.dwHighDateTime=0x1d4cee6, ftLastWriteTime.dwLowDateTime=0xe6d6fc0, ftLastWriteTime.dwHighDateTime=0x1d4cee6, nFileSizeHigh=0x0, nFileSizeLow=0x149e2)) returned 1 [0131.700] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/74aFFMv4VT.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\74affmv4vt.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.700] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.703] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0131.703] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410084 | out: pbBuffer=0x12410084) returned 1 [0131.703] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c202 | out: pbBuffer=0x1248c202) returned 1 [0131.705] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.705] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.705] SetEvent (hEvent=0xac) returned 1 [0131.705] SetEvent (hEvent=0x6c) returned 1 [0131.705] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x149e2, lpOverlapped=0x0) returned 1 [0131.706] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.706] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.707] SetEvent (hEvent=0x7c) returned 1 [0131.707] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.707] GetFileType (hFile=0x178) returned 0x1 [0131.707] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.708] WriteFile (in: hFile=0x178, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x149e2, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x124299f8*=0x149e2, lpOverlapped=0x12429a04) returned 1 [0131.708] GetFileType (hFile=0x178) returned 0x1 [0131.708] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x149e2, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.708] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0131.708] CloseHandle (hObject=0x178) returned 1 [0131.708] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/74aFFMv4VT.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\74affmv4vt.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.708] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.709] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0131.709] CloseHandle (hObject=0x178) returned 1 [0131.709] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x124296cc*=0x5d) returned 1 [0131.709] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/8dR6MmO9tdiDlfvF3x.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\8dr6mmo9tdidlfvf3x.wav"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb29709f0, ftCreationTime.dwHighDateTime=0x1d4d024, ftLastAccessTime.dwLowDateTime=0x820edd60, ftLastAccessTime.dwHighDateTime=0x1d4d08f, ftLastWriteTime.dwLowDateTime=0x820edd60, ftLastWriteTime.dwHighDateTime=0x1d4d08f, nFileSizeHigh=0x0, nFileSizeLow=0x14ffd)) returned 1 [0131.709] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/8dR6MmO9tdiDlfvF3x.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\8dr6mmo9tdidlfvf3x.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.709] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.709] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e040 | out: pbBuffer=0x1249e040) returned 1 [0131.710] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0131.710] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c102 | out: pbBuffer=0x1248c102) returned 1 [0131.710] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c194 | out: pbBuffer=0x1248c194) returned 1 [0131.711] SetEvent (hEvent=0x7c) returned 1 [0131.711] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x14ffd, lpOverlapped=0x0) returned 1 [0131.712] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.712] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.713] SetEvent (hEvent=0x6c) returned 1 [0131.713] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.713] GetFileType (hFile=0x178) returned 0x1 [0131.713] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.713] WriteFile (in: hFile=0x178, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x14ffd, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x124299f8*=0x14ffd, lpOverlapped=0x12429a04) returned 1 [0131.714] GetFileType (hFile=0x178) returned 0x1 [0131.714] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x14ffd, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.714] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0131.714] CloseHandle (hObject=0x178) returned 1 [0131.714] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/8dR6MmO9tdiDlfvF3x.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\8dr6mmo9tdidlfvf3x.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.714] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.714] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0131.715] CloseHandle (hObject=0x178) returned 1 [0131.715] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x65, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x124296cc*=0x65) returned 1 [0131.715] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/9hz-IaJQtsVd7ebuZj2.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\9hz-iajqtsvd7ebuzj2.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ca659b0, ftCreationTime.dwHighDateTime=0x1d4d352, ftLastAccessTime.dwLowDateTime=0xa5de6200, ftLastAccessTime.dwHighDateTime=0x1d4caf5, ftLastWriteTime.dwLowDateTime=0xa5de6200, ftLastWriteTime.dwHighDateTime=0x1d4caf5, nFileSizeHigh=0x0, nFileSizeLow=0x53f3)) returned 1 [0131.715] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/9hz-IaJQtsVd7ebuZj2.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\9hz-iajqtsvd7ebuzj2.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.715] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.715] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.716] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0131.716] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0131.716] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c07a | out: pbBuffer=0x1248c07a) returned 1 [0131.717] SetEvent (hEvent=0x6c) returned 1 [0131.717] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x53f3, lpOverlapped=0x0) returned 1 [0131.718] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.718] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.718] SetEvent (hEvent=0x7c) returned 1 [0131.718] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.718] GetFileType (hFile=0x178) returned 0x1 [0131.719] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.719] WriteFile (in: hFile=0x178, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x53f3, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x124299f8*=0x53f3, lpOverlapped=0x12429a04) returned 1 [0131.719] GetFileType (hFile=0x178) returned 0x1 [0131.719] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x53f3, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.719] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0131.719] CloseHandle (hObject=0x178) returned 1 [0131.719] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/9hz-IaJQtsVd7ebuZj2.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\9hz-iajqtsvd7ebuzj2.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.719] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.719] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0131.720] CloseHandle (hObject=0x178) returned 1 [0131.720] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x66, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x124296cc*=0x66) returned 1 [0131.720] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8426eba0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0x8426eba0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0x842e0fc0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x2fc)) returned 1 [0131.720] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.720] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.720] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.721] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0131.721] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c302 | out: pbBuffer=0x1248c302) returned 1 [0131.721] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c343 | out: pbBuffer=0x1248c343) returned 1 [0131.721] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c399 | out: pbBuffer=0x1248c399) returned 1 [0131.722] SetEvent (hEvent=0x7c) returned 1 [0131.722] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x2fc, lpOverlapped=0x0) returned 1 [0131.723] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.723] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.723] SetEvent (hEvent=0x6c) returned 1 [0131.723] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.724] GetFileType (hFile=0x178) returned 0x1 [0131.724] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.724] WriteFile (in: hFile=0x178, lpBuffer=0x12466000*, nNumberOfBytesToWrite=0x2fc, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12466000*, lpNumberOfBytesWritten=0x124299f8*=0x2fc, lpOverlapped=0x12429a04) returned 1 [0131.724] GetFileType (hFile=0x178) returned 0x1 [0131.724] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x2fc, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.724] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0131.724] CloseHandle (hObject=0x178) returned 1 [0131.724] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.724] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.725] WriteFile (in: hFile=0x178, lpBuffer=0x124bc240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x124bc240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0131.725] CloseHandle (hObject=0x178) returned 1 [0131.725] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x124296cc*=0x5b) returned 1 [0131.725] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/C3x3kc X9Kv-.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\c3x3kc x9kv-.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84e8fac0, ftCreationTime.dwHighDateTime=0x1d4cf63, ftLastAccessTime.dwLowDateTime=0x9758e760, ftLastAccessTime.dwHighDateTime=0x1d4c789, ftLastWriteTime.dwLowDateTime=0x9758e760, ftLastWriteTime.dwHighDateTime=0x1d4c789, nFileSizeHigh=0x0, nFileSizeLow=0xe927)) returned 1 [0131.725] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/C3x3kc X9Kv-.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\c3x3kc x9kv-.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.725] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.725] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.726] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0131.726] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c102 | out: pbBuffer=0x1248c102) returned 1 [0131.726] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c186 | out: pbBuffer=0x1248c186) returned 1 [0131.727] SetEvent (hEvent=0x6c) returned 1 [0131.727] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0xe927, lpOverlapped=0x0) returned 1 [0131.728] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.728] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.729] SetEvent (hEvent=0x7c) returned 1 [0131.729] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.729] GetFileType (hFile=0x178) returned 0x1 [0131.729] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.729] WriteFile (in: hFile=0x178, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0xe927, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x124299f8*=0xe927, lpOverlapped=0x12429a04) returned 1 [0131.730] GetFileType (hFile=0x178) returned 0x1 [0131.730] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xe927, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.730] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0131.730] CloseHandle (hObject=0x178) returned 1 [0131.730] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/C3x3kc X9Kv-.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\c3x3kc x9kv-.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.730] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.730] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0131.730] CloseHandle (hObject=0x178) returned 1 [0131.730] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x124296cc*=0x5f) returned 1 [0131.731] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/EhAjZjZ2Lf3jG.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ehajzjz2lf3jg.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48b2fe30, ftCreationTime.dwHighDateTime=0x1d4caad, ftLastAccessTime.dwLowDateTime=0xe02aa7d0, ftLastAccessTime.dwHighDateTime=0x1d4cdba, ftLastWriteTime.dwLowDateTime=0xe02aa7d0, ftLastWriteTime.dwHighDateTime=0x1d4cdba, nFileSizeHigh=0x0, nFileSizeLow=0xa82b)) returned 1 [0131.731] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/EhAjZjZ2Lf3jG.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ehajzjz2lf3jg.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.731] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.731] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.732] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0131.732] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c044 | out: pbBuffer=0x1248c044) returned 1 [0131.732] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c072 | out: pbBuffer=0x1248c072) returned 1 [0131.733] SetEvent (hEvent=0x7c) returned 1 [0131.733] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0xa82b, lpOverlapped=0x0) returned 1 [0131.734] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.734] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.734] SetEvent (hEvent=0x6c) returned 1 [0131.734] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.735] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.735] GetFileType (hFile=0x178) returned 0x1 [0131.735] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.735] WriteFile (in: hFile=0x178, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0xa82b, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x124299f8*=0xa82b, lpOverlapped=0x12429a04) returned 1 [0131.735] GetFileType (hFile=0x178) returned 0x1 [0131.735] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xa82b, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.735] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0131.735] CloseHandle (hObject=0x178) returned 1 [0131.736] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/EhAjZjZ2Lf3jG.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ehajzjz2lf3jg.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.736] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.736] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0131.736] CloseHandle (hObject=0x178) returned 1 [0131.736] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x124296cc*=0x60) returned 1 [0131.737] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/HAqWtRQ.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\haqwtrq.avi"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3eacb4d0, ftCreationTime.dwHighDateTime=0x1d4d34f, ftLastAccessTime.dwLowDateTime=0x1e0fd210, ftLastAccessTime.dwHighDateTime=0x1d4d210, ftLastWriteTime.dwLowDateTime=0x1e0fd210, ftLastWriteTime.dwHighDateTime=0x1d4d210, nFileSizeHigh=0x0, nFileSizeLow=0x7b2e)) returned 1 [0131.737] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/HAqWtRQ.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\haqwtrq.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.737] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.737] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.738] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c302 | out: pbBuffer=0x1248c302) returned 1 [0131.738] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c3b3 | out: pbBuffer=0x1248c3b3) returned 1 [0131.739] SetEvent (hEvent=0x6c) returned 1 [0131.739] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x7b2e, lpOverlapped=0x0) returned 1 [0131.739] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.740] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.740] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.740] SetEvent (hEvent=0x7c) returned 1 [0131.740] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.740] GetFileType (hFile=0x178) returned 0x1 [0131.740] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.740] WriteFile (in: hFile=0x178, lpBuffer=0x12490000*, nNumberOfBytesToWrite=0x7b2e, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12490000*, lpNumberOfBytesWritten=0x124299f8*=0x7b2e, lpOverlapped=0x12429a04) returned 1 [0131.741] GetFileType (hFile=0x178) returned 0x1 [0131.741] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x7b2e, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.741] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0131.741] CloseHandle (hObject=0x178) returned 1 [0131.741] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/HAqWtRQ.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\haqwtrq.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.741] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.741] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0131.742] CloseHandle (hObject=0x178) returned 1 [0131.742] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x5a, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x124296cc*=0x5a) returned 1 [0131.742] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/LgaTEX4.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lgatex4.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9cc7dc60, ftCreationTime.dwHighDateTime=0x1d4c74d, ftLastAccessTime.dwLowDateTime=0xcdba9ac0, ftLastAccessTime.dwHighDateTime=0x1d4d28c, ftLastWriteTime.dwLowDateTime=0xcdba9ac0, ftLastWriteTime.dwHighDateTime=0x1d4d28c, nFileSizeHigh=0x0, nFileSizeLow=0xf096)) returned 1 [0131.742] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/MBSH.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mbsh.png"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eeedcf0, ftCreationTime.dwHighDateTime=0x1d4cc90, ftLastAccessTime.dwLowDateTime=0xe992e9f0, ftLastAccessTime.dwHighDateTime=0x1d4d1f1, ftLastWriteTime.dwLowDateTime=0xe992e9f0, ftLastWriteTime.dwHighDateTime=0x1d4d1f1, nFileSizeHigh=0x0, nFileSizeLow=0x11ea6)) returned 1 [0131.742] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/MBSH.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mbsh.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.742] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.742] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.743] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0131.743] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c202 | out: pbBuffer=0x1248c202) returned 1 [0131.744] SetEvent (hEvent=0x7c) returned 1 [0131.744] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x11ea6, lpOverlapped=0x0) returned 1 [0131.745] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.745] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.745] SetEvent (hEvent=0x6c) returned 1 [0131.745] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.746] GetFileType (hFile=0x178) returned 0x1 [0131.746] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.746] WriteFile (in: hFile=0x178, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x11ea6, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x124299f8*=0x11ea6, lpOverlapped=0x12429a04) returned 1 [0131.747] GetFileType (hFile=0x178) returned 0x1 [0131.747] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x11ea6, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.747] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0131.747] CloseHandle (hObject=0x178) returned 1 [0131.747] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/MBSH.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mbsh.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.747] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.747] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0131.747] CloseHandle (hObject=0x178) returned 1 [0131.747] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12564000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x12564000*, lpNumberOfCharsWritten=0x124296cc*=0x57) returned 1 [0131.748] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/MohgSuHcsjOAcL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mohgsuhcsjoacl.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11f8be40, ftCreationTime.dwHighDateTime=0x1d4c673, ftLastAccessTime.dwLowDateTime=0x9d71a080, ftLastAccessTime.dwHighDateTime=0x1d4c606, ftLastWriteTime.dwLowDateTime=0x9d71a080, ftLastWriteTime.dwHighDateTime=0x1d4c606, nFileSizeHigh=0x0, nFileSizeLow=0x10a4e)) returned 1 [0131.748] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/MohgSuHcsjOAcL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mohgsuhcsjoacl.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.748] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.748] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.749] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0131.749] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c039 | out: pbBuffer=0x1248c039) returned 1 [0131.749] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c04a | out: pbBuffer=0x1248c04a) returned 1 [0131.750] SetEvent (hEvent=0x6c) returned 1 [0131.750] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x10a4e, lpOverlapped=0x0) returned 1 [0131.751] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.751] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.751] SetEvent (hEvent=0x7c) returned 1 [0131.751] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.752] GetFileType (hFile=0x178) returned 0x1 [0131.752] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.752] WriteFile (in: hFile=0x178, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x10a4e, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x124299f8*=0x10a4e, lpOverlapped=0x12429a04) returned 1 [0131.752] GetFileType (hFile=0x178) returned 0x1 [0131.752] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x10a4e, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.752] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0131.752] CloseHandle (hObject=0x178) returned 1 [0131.756] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/MohgSuHcsjOAcL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mohgsuhcsjoacl.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.756] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.757] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0131.757] CloseHandle (hObject=0x178) returned 1 [0131.757] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x61, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x124296cc*=0x61) returned 1 [0131.757] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/NzzDuZD.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\nzzduzd.ots"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9f6b8b0, ftCreationTime.dwHighDateTime=0x1d4ce6b, ftLastAccessTime.dwLowDateTime=0x2b44b8f0, ftLastAccessTime.dwHighDateTime=0x1d4c9d8, ftLastWriteTime.dwLowDateTime=0x2b44b8f0, ftLastWriteTime.dwHighDateTime=0x1d4c9d8, nFileSizeHigh=0x0, nFileSizeLow=0x1877e)) returned 1 [0131.757] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/NzzDuZD.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\nzzduzd.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.757] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.758] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.758] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0131.758] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c302 | out: pbBuffer=0x1248c302) returned 1 [0131.760] SetEvent (hEvent=0x7c) returned 1 [0131.760] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x1877e, lpOverlapped=0x0) returned 1 [0131.761] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.761] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.761] SetEvent (hEvent=0x6c) returned 1 [0131.761] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0131.762] GetFileType (hFile=0x178) returned 0x1 [0131.762] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.762] WriteFile (in: hFile=0x178, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x1877e, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x124299f8*=0x1877e, lpOverlapped=0x12429a04) returned 1 [0131.763] GetFileType (hFile=0x178) returned 0x1 [0131.763] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1877e, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.763] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0131.763] CloseHandle (hObject=0x178) returned 1 [0131.763] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/NzzDuZD.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\nzzduzd.ots"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.764] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.764] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0131.764] CloseHandle (hObject=0x178) returned 1 [0131.783] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x5a, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x124296cc*=0x5a) returned 1 [0131.830] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/P0PPkomdGEEJS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\p0ppkomdgeejs.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50900590, ftCreationTime.dwHighDateTime=0x1d4cda9, ftLastAccessTime.dwLowDateTime=0xd7c07900, ftLastAccessTime.dwHighDateTime=0x1d4d00b, ftLastWriteTime.dwLowDateTime=0xd7c07900, ftLastWriteTime.dwHighDateTime=0x1d4d00b, nFileSizeHigh=0x0, nFileSizeLow=0xd041)) returned 1 [0131.830] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/P0PPkomdGEEJS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\p0ppkomdgeejs.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.831] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.838] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.839] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c102 | out: pbBuffer=0x1248c102) returned 1 [0131.840] SetEvent (hEvent=0x6c) returned 1 [0131.841] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0xd041, lpOverlapped=0x0) returned 1 [0131.842] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.847] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.848] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.855] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.855] SetEvent (hEvent=0x7c) returned 1 [0131.855] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.868] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.869] GetFileType (hFile=0x178) returned 0x1 [0131.869] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.869] WriteFile (in: hFile=0x178, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0xd041, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x124299f8*=0xd041, lpOverlapped=0x12429a04) returned 1 [0131.869] GetFileType (hFile=0x178) returned 0x1 [0131.869] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xd041, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.869] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0131.869] CloseHandle (hObject=0x178) returned 1 [0131.870] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/P0PPkomdGEEJS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\p0ppkomdgeejs.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.870] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.878] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0131.878] CloseHandle (hObject=0x178) returned 1 [0131.878] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x124296cc*=0x60) returned 1 [0131.887] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/PtpMZNH1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ptpmznh1.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca086a50, ftCreationTime.dwHighDateTime=0x1d4cc0c, ftLastAccessTime.dwLowDateTime=0xeab5be50, ftLastAccessTime.dwHighDateTime=0x1d4d3ce, ftLastWriteTime.dwLowDateTime=0xeab5be50, ftLastWriteTime.dwHighDateTime=0x1d4d3ce, nFileSizeHigh=0x0, nFileSizeLow=0x35e6)) returned 1 [0131.887] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/PtpMZNH1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ptpmznh1.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.887] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.900] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.901] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0131.901] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c302 | out: pbBuffer=0x1248c302) returned 1 [0131.901] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c331 | out: pbBuffer=0x1248c331) returned 1 [0131.902] SetEvent (hEvent=0x7c) returned 1 [0131.902] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x35e6, lpOverlapped=0x0) returned 1 [0131.903] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.904] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.904] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.910] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.910] SetEvent (hEvent=0x6c) returned 1 [0131.910] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.917] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.917] GetFileType (hFile=0x178) returned 0x1 [0131.917] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.917] WriteFile (in: hFile=0x178, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x35e6, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x124299f8*=0x35e6, lpOverlapped=0x12429a04) returned 1 [0131.918] GetFileType (hFile=0x178) returned 0x1 [0131.918] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x35e6, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.918] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0131.918] CloseHandle (hObject=0x178) returned 1 [0131.918] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/PtpMZNH1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ptpmznh1.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.918] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.919] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0131.919] CloseHandle (hObject=0x178) returned 1 [0131.919] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x124296cc*=0x5b) returned 1 [0131.925] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/S4UR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\s4ur.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb90d3ff0, ftCreationTime.dwHighDateTime=0x1d4c84c, ftLastAccessTime.dwLowDateTime=0x52290000, ftLastAccessTime.dwHighDateTime=0x1d4d547, ftLastWriteTime.dwLowDateTime=0x52290000, ftLastWriteTime.dwHighDateTime=0x1d4d547, nFileSizeHigh=0x0, nFileSizeLow=0xed8f)) returned 1 [0131.925] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/S4UR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\s4ur.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.925] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.933] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0131.934] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c102 | out: pbBuffer=0x1248c102) returned 1 [0131.934] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c10f | out: pbBuffer=0x1248c10f) returned 1 [0131.935] SetEvent (hEvent=0x6c) returned 1 [0131.935] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0xed8f, lpOverlapped=0x0) returned 1 [0131.936] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.952] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.952] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.965] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.966] SetEvent (hEvent=0x7c) returned 1 [0131.966] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0131.977] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0131.978] GetFileType (hFile=0x178) returned 0x1 [0131.978] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.978] WriteFile (in: hFile=0x178, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0xed8f, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x124299f8*=0xed8f, lpOverlapped=0x12429a04) returned 1 [0131.978] GetFileType (hFile=0x178) returned 0x1 [0131.978] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xed8f, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0131.978] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0131.978] CloseHandle (hObject=0x178) returned 1 [0131.978] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/S4UR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\s4ur.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.979] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0131.981] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0131.981] CloseHandle (hObject=0x178) returned 1 [0131.981] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12564000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x12564000*, lpNumberOfCharsWritten=0x124296cc*=0x57) returned 1 [0131.994] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/SnuxYSlMsArS.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\snuxyslmsars.xls"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fa2b2f0, ftCreationTime.dwHighDateTime=0x1d4ce59, ftLastAccessTime.dwLowDateTime=0xdaa0c580, ftLastAccessTime.dwHighDateTime=0x1d4d501, ftLastWriteTime.dwLowDateTime=0xdaa0c580, ftLastWriteTime.dwHighDateTime=0x1d4d501, nFileSizeHigh=0x0, nFileSizeLow=0xeed6)) returned 1 [0131.994] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/SnuxYSlMsArS.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\snuxyslmsars.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0131.994] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.008] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0132.009] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0132.009] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c018 | out: pbBuffer=0x1248c018) returned 1 [0132.010] SetEvent (hEvent=0x7c) returned 1 [0132.010] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0xeed6, lpOverlapped=0x0) returned 1 [0132.011] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0132.016] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0132.016] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.016] SetEvent (hEvent=0x6c) returned 1 [0132.016] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.017] GetFileType (hFile=0x178) returned 0x1 [0132.017] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.017] WriteFile (in: hFile=0x178, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0xeed6, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x124299f8*=0xeed6, lpOverlapped=0x12429a04) returned 1 [0132.017] GetFileType (hFile=0x178) returned 0x1 [0132.017] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xeed6, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.017] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0132.017] CloseHandle (hObject=0x178) returned 1 [0132.017] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/SnuxYSlMsArS.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\snuxyslmsars.xls"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.017] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.018] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0132.018] CloseHandle (hObject=0x178) returned 1 [0132.018] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x124296cc*=0x5f) returned 1 [0132.018] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Uk-jgesxr.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\uk-jgesxr.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84299200, ftCreationTime.dwHighDateTime=0x1d4c605, ftLastAccessTime.dwLowDateTime=0xee3f99f0, ftLastAccessTime.dwHighDateTime=0x1d4c8ad, ftLastWriteTime.dwLowDateTime=0xee3f99f0, ftLastWriteTime.dwHighDateTime=0x1d4c8ad, nFileSizeHigh=0x0, nFileSizeLow=0xbf43)) returned 1 [0132.018] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/YoxF71BIQ70bZq8l.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\yoxf71biq70bzq8l.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xae06a660, ftCreationTime.dwHighDateTime=0x1d4d066, ftLastAccessTime.dwLowDateTime=0xd4b09de0, ftLastAccessTime.dwHighDateTime=0x1d4cc0e, ftLastWriteTime.dwLowDateTime=0xd4b09de0, ftLastWriteTime.dwHighDateTime=0x1d4cc0e, nFileSizeHigh=0x0, nFileSizeLow=0x81c)) returned 1 [0132.019] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/_1A46z36B4gblnYSfw.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\_1a46z36b4gblnysfw.flv"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3055f230, ftCreationTime.dwHighDateTime=0x1d4d11e, ftLastAccessTime.dwLowDateTime=0xd271d500, ftLastAccessTime.dwHighDateTime=0x1d4c9eb, ftLastWriteTime.dwLowDateTime=0xd271d500, ftLastWriteTime.dwHighDateTime=0x1d4c9eb, nFileSizeHigh=0x0, nFileSizeLow=0x1043c)) returned 1 [0132.019] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/_1A46z36B4gblnYSfw.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\_1a46z36b4gblnysfw.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.019] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.019] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0132.020] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c202 | out: pbBuffer=0x1248c202) returned 1 [0132.020] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c202 | out: pbBuffer=0x1248c202) returned 1 [0132.020] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c208 | out: pbBuffer=0x1248c208) returned 1 [0132.020] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c27f | out: pbBuffer=0x1248c27f) returned 1 [0132.021] SetEvent (hEvent=0x6c) returned 1 [0132.021] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x1043c, lpOverlapped=0x0) returned 1 [0132.023] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.023] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.023] SetEvent (hEvent=0x7c) returned 1 [0132.023] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.024] GetFileType (hFile=0x178) returned 0x1 [0132.024] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.024] WriteFile (in: hFile=0x178, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x1043c, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x124299f8*=0x1043c, lpOverlapped=0x12429a04) returned 1 [0132.024] GetFileType (hFile=0x178) returned 0x1 [0132.024] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1043c, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.024] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0132.024] CloseHandle (hObject=0x178) returned 1 [0132.024] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/_1A46z36B4gblnYSfw.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\_1a46z36b4gblnysfw.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.025] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.025] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0132.026] CloseHandle (hObject=0x178) returned 1 [0132.026] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x65, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x124296cc*=0x65) returned 1 [0132.026] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/_g65j9qi3rKIQ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\_g65j9qi3rkiq.swf"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7db2190, ftCreationTime.dwHighDateTime=0x1d4c64f, ftLastAccessTime.dwLowDateTime=0xcb7b2640, ftLastAccessTime.dwHighDateTime=0x1d4d0c4, ftLastWriteTime.dwLowDateTime=0xcb7b2640, ftLastWriteTime.dwHighDateTime=0x1d4d0c4, nFileSizeHigh=0x0, nFileSizeLow=0x57ef)) returned 1 [0132.026] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/_g65j9qi3rKIQ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\_g65j9qi3rkiq.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.026] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.026] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0132.027] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0132.027] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0132.027] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c016 | out: pbBuffer=0x1248c016) returned 1 [0132.029] SetEvent (hEvent=0x7c) returned 1 [0132.029] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x57ef, lpOverlapped=0x0) returned 1 [0132.030] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.030] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.030] SetEvent (hEvent=0x6c) returned 1 [0132.030] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.031] GetFileType (hFile=0x178) returned 0x1 [0132.031] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.031] WriteFile (in: hFile=0x178, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x57ef, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x124299f8*=0x57ef, lpOverlapped=0x12429a04) returned 1 [0132.031] GetFileType (hFile=0x178) returned 0x1 [0132.031] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x57ef, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.031] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0132.031] CloseHandle (hObject=0x178) returned 1 [0132.031] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/_g65j9qi3rKIQ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\_g65j9qi3rkiq.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.031] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.032] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0132.032] CloseHandle (hObject=0x178) returned 1 [0132.032] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x124296cc*=0x60) returned 1 [0132.032] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/a8UAorzF.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\a8uaorzf.flv"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7394e00, ftCreationTime.dwHighDateTime=0x1d4d284, ftLastAccessTime.dwLowDateTime=0x2846ffd0, ftLastAccessTime.dwHighDateTime=0x1d4cdea, ftLastWriteTime.dwLowDateTime=0x2846ffd0, ftLastWriteTime.dwHighDateTime=0x1d4cdea, nFileSizeHigh=0x0, nFileSizeLow=0x12c76)) returned 1 [0132.032] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/a8UAorzF.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\a8uaorzf.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.032] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.032] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0132.033] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c302 | out: pbBuffer=0x1248c302) returned 1 [0132.034] SetEvent (hEvent=0x6c) returned 1 [0132.034] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x12c76, lpOverlapped=0x0) returned 1 [0132.036] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.036] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.036] SetEvent (hEvent=0x7c) returned 1 [0132.036] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.037] GetFileType (hFile=0x178) returned 0x1 [0132.037] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.037] WriteFile (in: hFile=0x178, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x12c76, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x124299f8*=0x12c76, lpOverlapped=0x12429a04) returned 1 [0132.037] GetFileType (hFile=0x178) returned 0x1 [0132.037] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x12c76, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.038] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0132.038] CloseHandle (hObject=0x178) returned 1 [0132.038] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/a8UAorzF.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\a8uaorzf.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.038] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.038] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0132.038] CloseHandle (hObject=0x178) returned 1 [0132.038] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x124296cc*=0x5b) returned 1 [0132.039] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/cFnPlE0QTPSaKbbZ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cfnple0qtpsakbbz.swf"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x67029ef0, ftCreationTime.dwHighDateTime=0x1d4d597, ftLastAccessTime.dwLowDateTime=0x92ff880, ftLastAccessTime.dwHighDateTime=0x1d4c602, ftLastWriteTime.dwLowDateTime=0x92ff880, ftLastWriteTime.dwHighDateTime=0x1d4c602, nFileSizeHigh=0x0, nFileSizeLow=0xa282)) returned 1 [0132.039] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/cFnPlE0QTPSaKbbZ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cfnple0qtpsakbbz.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.039] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.039] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0132.040] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c102 | out: pbBuffer=0x1248c102) returned 1 [0132.041] SetEvent (hEvent=0x7c) returned 1 [0132.041] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0xa282, lpOverlapped=0x0) returned 1 [0132.042] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.042] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0132.043] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0132.043] SetEvent (hEvent=0x6c) returned 1 [0132.043] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.043] GetFileType (hFile=0x178) returned 0x1 [0132.043] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.043] WriteFile (in: hFile=0x178, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0xa282, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x124299f8*=0xa282, lpOverlapped=0x12429a04) returned 1 [0132.044] GetFileType (hFile=0x178) returned 0x1 [0132.044] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xa282, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.044] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0132.044] CloseHandle (hObject=0x178) returned 1 [0132.044] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/cFnPlE0QTPSaKbbZ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cfnple0qtpsakbbz.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.044] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.044] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0132.044] CloseHandle (hObject=0x178) returned 1 [0132.044] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x63, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x124296cc*=0x63) returned 1 [0132.045] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/g4itO Fs.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\g4ito fs.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0e94bc0, ftCreationTime.dwHighDateTime=0x1d4d072, ftLastAccessTime.dwLowDateTime=0x84c9a230, ftLastAccessTime.dwHighDateTime=0x1d4c5bb, ftLastWriteTime.dwLowDateTime=0x84c9a230, ftLastWriteTime.dwHighDateTime=0x1d4c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x6b56)) returned 1 [0132.045] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/g4itO Fs.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\g4ito fs.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.045] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.045] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0132.046] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0132.046] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c302 | out: pbBuffer=0x1248c302) returned 1 [0132.046] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c302 | out: pbBuffer=0x1248c302) returned 1 [0132.047] SetEvent (hEvent=0x6c) returned 1 [0132.047] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x6b56, lpOverlapped=0x0) returned 1 [0132.048] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.048] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0132.049] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0132.049] SetEvent (hEvent=0x7c) returned 1 [0132.049] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.049] GetFileType (hFile=0x178) returned 0x1 [0132.049] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.049] WriteFile (in: hFile=0x178, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x6b56, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x124299f8*=0x6b56, lpOverlapped=0x12429a04) returned 1 [0132.049] GetFileType (hFile=0x178) returned 0x1 [0132.049] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x6b56, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.049] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0132.050] CloseHandle (hObject=0x178) returned 1 [0132.050] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/g4itO Fs.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\g4ito fs.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.050] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.050] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0132.050] CloseHandle (hObject=0x178) returned 1 [0132.050] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x124296cc*=0x5b) returned 1 [0132.051] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/gPmgSN2p_OsI nUds.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gpmgsn2p_osi nuds.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa561a9d0, ftCreationTime.dwHighDateTime=0x1d4cf88, ftLastAccessTime.dwLowDateTime=0xbf9ce4f0, ftLastAccessTime.dwHighDateTime=0x1d4d018, ftLastWriteTime.dwLowDateTime=0xbf9ce4f0, ftLastWriteTime.dwHighDateTime=0x1d4d018, nFileSizeHigh=0x0, nFileSizeLow=0x16943)) returned 1 [0132.051] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/gPmgSN2p_OsI nUds.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gpmgsn2p_osi nuds.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.051] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.051] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0132.052] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c102 | out: pbBuffer=0x1248c102) returned 1 [0132.052] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c14e | out: pbBuffer=0x1248c14e) returned 1 [0132.052] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c184 | out: pbBuffer=0x1248c184) returned 1 [0132.053] SetEvent (hEvent=0x7c) returned 1 [0132.053] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x16943, lpOverlapped=0x0) returned 1 [0132.054] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.055] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.055] SetEvent (hEvent=0x6c) returned 1 [0132.055] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.056] GetFileType (hFile=0x178) returned 0x1 [0132.056] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.056] WriteFile (in: hFile=0x178, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x16943, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x124299f8*=0x16943, lpOverlapped=0x12429a04) returned 1 [0132.056] GetFileType (hFile=0x178) returned 0x1 [0132.056] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x16943, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.056] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0132.056] CloseHandle (hObject=0x178) returned 1 [0132.056] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/gPmgSN2p_OsI nUds.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gpmgsn2p_osi nuds.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.056] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.057] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0132.057] CloseHandle (hObject=0x178) returned 1 [0132.057] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x64, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x124296cc*=0x64) returned 1 [0132.057] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/iIOMq4DfIO nhu.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\iiomq4dfio nhu.swf"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5bb13150, ftCreationTime.dwHighDateTime=0x1d4d29b, ftLastAccessTime.dwLowDateTime=0xf8866760, ftLastAccessTime.dwHighDateTime=0x1d4ceb4, ftLastWriteTime.dwLowDateTime=0xf8866760, ftLastWriteTime.dwHighDateTime=0x1d4ceb4, nFileSizeHigh=0x0, nFileSizeLow=0x117f7)) returned 1 [0132.057] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/iIOMq4DfIO nhu.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\iiomq4dfio nhu.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.057] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.057] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0132.058] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0132.058] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0132.058] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c033 | out: pbBuffer=0x1248c033) returned 1 [0132.060] SetEvent (hEvent=0x6c) returned 1 [0132.060] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x117f7, lpOverlapped=0x0) returned 1 [0132.061] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.061] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.061] SetEvent (hEvent=0x7c) returned 1 [0132.061] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0132.062] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0132.062] GetFileType (hFile=0x178) returned 0x1 [0132.062] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.062] WriteFile (in: hFile=0x178, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x117f7, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x124299f8*=0x117f7, lpOverlapped=0x12429a04) returned 1 [0132.062] GetFileType (hFile=0x178) returned 0x1 [0132.063] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x117f7, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.063] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0132.063] CloseHandle (hObject=0x178) returned 1 [0132.063] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/iIOMq4DfIO nhu.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\iiomq4dfio nhu.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.063] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.063] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0132.063] CloseHandle (hObject=0x178) returned 1 [0132.063] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x61, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x124296cc*=0x61) returned 1 [0132.064] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/kRcK7dHEC138B.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\krck7dhec138b.png"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc6950a0, ftCreationTime.dwHighDateTime=0x1d4cc74, ftLastAccessTime.dwLowDateTime=0xf386b550, ftLastAccessTime.dwHighDateTime=0x1d4ca16, ftLastWriteTime.dwLowDateTime=0xf386b550, ftLastWriteTime.dwHighDateTime=0x1d4ca16, nFileSizeHigh=0x0, nFileSizeLow=0x1092)) returned 1 [0132.064] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/kRcK7dHEC138B.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\krck7dhec138b.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.064] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.064] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0132.065] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c102 | out: pbBuffer=0x1248c102) returned 1 [0132.066] SetEvent (hEvent=0x7c) returned 1 [0132.066] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x1092, lpOverlapped=0x0) returned 1 [0132.067] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.067] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.067] SetEvent (hEvent=0x6c) returned 1 [0132.067] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.068] GetFileType (hFile=0x178) returned 0x1 [0132.068] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.068] WriteFile (in: hFile=0x178, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1092, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x124299f8*=0x1092, lpOverlapped=0x12429a04) returned 1 [0132.068] GetFileType (hFile=0x178) returned 0x1 [0132.068] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x1092, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.068] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0132.068] CloseHandle (hObject=0x178) returned 1 [0132.068] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/kRcK7dHEC138B.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\krck7dhec138b.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.068] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.069] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0132.069] CloseHandle (hObject=0x178) returned 1 [0132.069] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x124296cc*=0x60) returned 1 [0132.069] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/ldoSssq5DiXZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ldosssq5dixz.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55b88f10, ftCreationTime.dwHighDateTime=0x1d4c593, ftLastAccessTime.dwLowDateTime=0xf6dfae00, ftLastAccessTime.dwHighDateTime=0x1d4cb0b, ftLastWriteTime.dwLowDateTime=0xf6dfae00, ftLastWriteTime.dwHighDateTime=0x1d4cb0b, nFileSizeHigh=0x0, nFileSizeLow=0xed57)) returned 1 [0132.069] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/nskSWSOdZtuYlPSX.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\nskswsodztuylpsx.ots"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x287321a0, ftCreationTime.dwHighDateTime=0x1d4c6d3, ftLastAccessTime.dwLowDateTime=0x5c3e0490, ftLastAccessTime.dwHighDateTime=0x1d4d0c5, ftLastWriteTime.dwLowDateTime=0x5c3e0490, ftLastWriteTime.dwHighDateTime=0x1d4d0c5, nFileSizeHigh=0x0, nFileSizeLow=0x631f)) returned 1 [0132.069] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/nskSWSOdZtuYlPSX.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\nskswsodztuylpsx.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.069] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.070] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0132.070] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0132.070] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0132.072] SetEvent (hEvent=0x6c) returned 1 [0132.072] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x631f, lpOverlapped=0x0) returned 1 [0132.073] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.073] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.073] SetEvent (hEvent=0x7c) returned 1 [0132.074] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.074] GetFileType (hFile=0x178) returned 0x1 [0132.074] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.074] WriteFile (in: hFile=0x178, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x631f, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x124299f8*=0x631f, lpOverlapped=0x12429a04) returned 1 [0132.074] GetFileType (hFile=0x178) returned 0x1 [0132.074] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x631f, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.074] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0132.074] CloseHandle (hObject=0x178) returned 1 [0132.075] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/nskSWSOdZtuYlPSX.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\nskswsodztuylpsx.ots"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.075] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.075] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0132.075] CloseHandle (hObject=0x178) returned 1 [0132.075] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x63, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x124296cc*=0x63) returned 1 [0132.075] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/pk3r.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\pk3r.csv"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0036950, ftCreationTime.dwHighDateTime=0x1d4c903, ftLastAccessTime.dwLowDateTime=0xe1bf4f80, ftLastAccessTime.dwHighDateTime=0x1d4c741, ftLastWriteTime.dwLowDateTime=0xe1bf4f80, ftLastWriteTime.dwHighDateTime=0x1d4c741, nFileSizeHigh=0x0, nFileSizeLow=0xa6fd)) returned 1 [0132.076] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/pk3r.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\pk3r.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.076] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.076] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0132.077] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c102 | out: pbBuffer=0x1248c102) returned 1 [0132.078] SetEvent (hEvent=0x7c) returned 1 [0132.078] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0xa6fd, lpOverlapped=0x0) returned 1 [0132.079] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.079] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0132.080] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0132.080] SetEvent (hEvent=0x6c) returned 1 [0132.080] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.080] GetFileType (hFile=0x178) returned 0x1 [0132.080] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.080] WriteFile (in: hFile=0x178, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0xa6fd, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x124299f8*=0xa6fd, lpOverlapped=0x12429a04) returned 1 [0132.081] GetFileType (hFile=0x178) returned 0x1 [0132.081] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xa6fd, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.081] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0132.081] CloseHandle (hObject=0x178) returned 1 [0132.081] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/pk3r.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\pk3r.csv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.081] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.081] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0132.081] CloseHandle (hObject=0x178) returned 1 [0132.081] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12564000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x12564000*, lpNumberOfCharsWritten=0x124296cc*=0x57) returned 1 [0132.082] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/pwncDXcaRAivjYgzsA9q.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\pwncdxcaraivjygzsa9q.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x246f3480, ftCreationTime.dwHighDateTime=0x1d4c963, ftLastAccessTime.dwLowDateTime=0xa9575e40, ftLastAccessTime.dwHighDateTime=0x1d4c6e6, ftLastWriteTime.dwLowDateTime=0xa9575e40, ftLastWriteTime.dwHighDateTime=0x1d4c6e6, nFileSizeHigh=0x0, nFileSizeLow=0x17ef1)) returned 1 [0132.082] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/qAKzI51Ja.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qakzi51ja.wav"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2457fd20, ftCreationTime.dwHighDateTime=0x1d4ccff, ftLastAccessTime.dwLowDateTime=0x980ff7a0, ftLastAccessTime.dwHighDateTime=0x1d4c9d4, ftLastWriteTime.dwLowDateTime=0x980ff7a0, ftLastWriteTime.dwHighDateTime=0x1d4c9d4, nFileSizeHigh=0x0, nFileSizeLow=0x503d)) returned 1 [0132.082] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/qAKzI51Ja.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qakzi51ja.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.082] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.082] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0132.083] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0132.083] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c302 | out: pbBuffer=0x1248c302) returned 1 [0132.083] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c39e | out: pbBuffer=0x1248c39e) returned 1 [0132.084] SetEvent (hEvent=0x6c) returned 1 [0132.084] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x503d, lpOverlapped=0x0) returned 1 [0132.085] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0132.086] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0132.086] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.086] SetEvent (hEvent=0x7c) returned 1 [0132.086] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.086] GetFileType (hFile=0x178) returned 0x1 [0132.086] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.087] WriteFile (in: hFile=0x178, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x503d, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x124299f8*=0x503d, lpOverlapped=0x12429a04) returned 1 [0132.087] GetFileType (hFile=0x178) returned 0x1 [0132.087] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x503d, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.087] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0132.087] CloseHandle (hObject=0x178) returned 1 [0132.087] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/qAKzI51Ja.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qakzi51ja.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.087] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.087] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0132.087] CloseHandle (hObject=0x178) returned 1 [0132.088] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x124296cc*=0x5c) returned 1 [0132.088] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/rbP3q.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\rbp3q.bmp"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4df8ea30, ftCreationTime.dwHighDateTime=0x1d4cc9c, ftLastAccessTime.dwLowDateTime=0x93ceb1e0, ftLastAccessTime.dwHighDateTime=0x1d4c8cb, ftLastWriteTime.dwLowDateTime=0x93ceb1e0, ftLastWriteTime.dwHighDateTime=0x1d4c8cb, nFileSizeHigh=0x0, nFileSizeLow=0x70c3)) returned 1 [0132.088] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/tGk_Hwpb.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tgk_hwpb.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6bb1230, ftCreationTime.dwHighDateTime=0x1d4c829, ftLastAccessTime.dwLowDateTime=0x75f66fe0, ftLastAccessTime.dwHighDateTime=0x1d4cb1a, ftLastWriteTime.dwLowDateTime=0x75f66fe0, ftLastWriteTime.dwHighDateTime=0x1d4cb1a, nFileSizeHigh=0x0, nFileSizeLow=0x9ba2)) returned 1 [0132.088] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/vs2UHXIy6u.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vs2uhxiy6u.avi"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46b855d0, ftCreationTime.dwHighDateTime=0x1d4c76f, ftLastAccessTime.dwLowDateTime=0x582a2ab0, ftLastAccessTime.dwHighDateTime=0x1d4c859, ftLastWriteTime.dwLowDateTime=0x582a2ab0, ftLastWriteTime.dwHighDateTime=0x1d4c859, nFileSizeHigh=0x0, nFileSizeLow=0x2a52)) returned 1 [0132.088] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/vs2UHXIy6u.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vs2uhxiy6u.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.088] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.088] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0132.089] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0132.089] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c502 | out: pbBuffer=0x1248c502) returned 1 [0132.090] SetEvent (hEvent=0x7c) returned 1 [0132.094] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x2a52, lpOverlapped=0x0) returned 1 [0132.095] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.109] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.109] SetEvent (hEvent=0x6c) returned 1 [0132.109] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.110] GetFileType (hFile=0x178) returned 0x1 [0132.110] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.110] WriteFile (in: hFile=0x178, lpBuffer=0x12490000*, nNumberOfBytesToWrite=0x2a52, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12490000*, lpNumberOfBytesWritten=0x124299f8*=0x2a52, lpOverlapped=0x12429a04) returned 1 [0132.111] GetFileType (hFile=0x178) returned 0x1 [0132.111] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x2a52, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.111] ReadFile (in: hFile=0x178, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0132.112] CloseHandle (hObject=0x178) returned 1 [0132.113] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/vs2UHXIy6u.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vs2uhxiy6u.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.114] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.114] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0132.114] CloseHandle (hObject=0x178) returned 1 [0132.114] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x124296cc*=0x5d) returned 1 [0132.115] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/xjcSEqVI.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xjcseqvi.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdf978e90, ftCreationTime.dwHighDateTime=0x1d4c672, ftLastAccessTime.dwLowDateTime=0x365c9ba0, ftLastAccessTime.dwHighDateTime=0x1d4cf27, ftLastWriteTime.dwLowDateTime=0x365c9ba0, ftLastWriteTime.dwHighDateTime=0x1d4cf27, nFileSizeHigh=0x0, nFileSizeLow=0x66aa)) returned 1 [0132.115] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/xjcSEqVI.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xjcseqvi.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.115] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.115] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0132.116] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0132.116] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c302 | out: pbBuffer=0x1248c302) returned 1 [0132.117] SetEvent (hEvent=0x6c) returned 1 [0132.117] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x66aa, lpOverlapped=0x0) returned 1 [0132.119] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.119] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.119] SetEvent (hEvent=0x7c) returned 1 [0132.119] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0132.120] GetFileType (hFile=0x178) returned 0x1 [0132.120] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.120] WriteFile (in: hFile=0x178, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x66aa, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x124299f8*=0x66aa, lpOverlapped=0x12429a04) returned 1 [0132.120] GetFileType (hFile=0x178) returned 0x1 [0132.120] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x66aa, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0132.120] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0132.120] CloseHandle (hObject=0x178) returned 1 [0132.120] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/xjcSEqVI.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xjcseqvi.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.120] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0132.121] WriteFile (in: hFile=0x178, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0132.121] CloseHandle (hObject=0x178) returned 1 [0132.121] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x124296cc*=0x5b) returned 1 [0132.121] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/z9dJHJ0z4vQH.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\z9djhj0z4vqh.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6f6a400, ftCreationTime.dwHighDateTime=0x1d4c7a7, ftLastAccessTime.dwLowDateTime=0xe29bc430, ftLastAccessTime.dwHighDateTime=0x1d4d423, ftLastWriteTime.dwLowDateTime=0xe29bc430, ftLastWriteTime.dwHighDateTime=0x1d4d423, nFileSizeHigh=0x0, nFileSizeLow=0x196c)) returned 1 [0132.121] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.121] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.122] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.122] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.122] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.122] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.122] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0132.122] CloseHandle (hObject=0x178) returned 1 [0132.122] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.122] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.122] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.123] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0132.124] WriteFile (in: hFile=0x178, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0132.125] CloseHandle (hObject=0x178) returned 1 [0132.125] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.125] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.126] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.126] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x47d5d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x47d5d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x47d5d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x47d5d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x47d5d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x47d5d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4823f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0132.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.126] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.126] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.126] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.126] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.127] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0132.127] ReadFile (in: hFile=0x178, lpBuffer=0x1248c100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1248c100*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0132.135] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0132.136] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.136] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0132.136] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e140 | out: pbBuffer=0x1249e140) returned 1 [0132.137] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c202 | out: pbBuffer=0x1248c202) returned 1 [0132.137] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c222 | out: pbBuffer=0x1248c222) returned 1 [0132.138] SetEvent (hEvent=0x7c) returned 1 [0132.138] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242996c*=0x4000, lpOverlapped=0x0) returned 1 [0132.139] GetFileType (hFile=0xdc) returned 0x1 [0132.139] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0132.139] WriteFile (in: hFile=0xdc, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x12429950*=0x4000, lpOverlapped=0x1242995c) returned 1 [0132.139] GetFileType (hFile=0xdc) returned 0x1 [0132.139] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0132.139] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0132.139] CloseHandle (hObject=0xdc) returned 1 [0132.139] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.140] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0132.140] WriteFile (in: hFile=0xdc, lpBuffer=0x1247cfc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1247cfc0*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0132.140] CloseHandle (hObject=0xdc) returned 1 [0132.140] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d4000*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124d4000*, lpNumberOfCharsWritten=0x12429624*=0x60) returned 1 [0132.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.141] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.141] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.141] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Cookies/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.141] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0132.142] CloseHandle (hObject=0xdc) returned 1 [0132.142] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/FXSAPIDebugLogFile.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.142] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/FXSAPIDebugLogFile.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.142] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/FXSAPIDebugLogFile.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.142] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/FXSAPIDebugLogFile.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.142] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/FXSAPIDebugLogFile.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.142] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.142] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0132.143] CloseHandle (hObject=0xdc) returned 1 [0132.143] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.143] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.143] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.144] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0132.145] WriteFile (in: hFile=0x178, lpBuffer=0x12773300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12773300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0132.146] CloseHandle (hObject=0x178) returned 1 [0132.146] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.146] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.146] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.146] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x4abc00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4abc00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.146] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x4abc00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4abc00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.146] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x4abc00, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x4abc00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4b0a20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.146] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 1 [0132.146] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.146] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.146] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.147] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.147] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.147] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.147] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.147] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.147] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.147] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.147] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.147] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.148] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.148] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0132.148] CloseHandle (hObject=0x178) returned 1 [0132.148] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.148] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.148] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.149] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0132.149] WriteFile (in: hFile=0x178, lpBuffer=0x12775900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12775900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0132.150] CloseHandle (hObject=0x178) returned 1 [0132.150] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.150] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.150] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x4b5840, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4b5840, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.150] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x4b5840, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4b5840, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.150] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x4b5840, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x4b5840, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4ba660, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.150] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9824200, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.150] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0132.150] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.150] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.151] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.151] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.151] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.151] ReadFile (in: hFile=0x178, lpBuffer=0x1248c000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfBytesRead=0x124299e0*=0x91, lpOverlapped=0x0) returned 1 [0132.152] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.153] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.153] ReadFile (in: hFile=0xdc, lpBuffer=0x1248c100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1248c100*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.154] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9824200, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x91)) returned 1 [0132.155] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0132.155] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.155] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0132.155] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e400 | out: pbBuffer=0x1240e400) returned 1 [0132.156] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2200 | out: pbBuffer=0x124e2200) returned 1 [0132.156] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c302 | out: pbBuffer=0x1248c302) returned 1 [0132.158] SetEvent (hEvent=0x6c) returned 1 [0132.158] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x4000, lpOverlapped=0x0) returned 1 [0132.158] GetFileType (hFile=0x154) returned 0x1 [0132.158] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0132.158] WriteFile (in: hFile=0x154, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x124298a8*=0x4000, lpOverlapped=0x124298b4) returned 1 [0132.158] GetFileType (hFile=0x154) returned 0x1 [0132.158] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0132.159] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0132.159] CloseHandle (hObject=0x154) returned 1 [0132.159] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.159] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0132.159] WriteFile (in: hFile=0x154, lpBuffer=0x1247cb40*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1247cb40*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0132.159] CloseHandle (hObject=0x154) returned 1 [0132.159] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0x6c, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x1242957c*=0x6c) returned 1 [0132.160] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.160] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.160] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.161] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.161] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.161] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/History/History.IE5/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.161] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0132.161] CloseHandle (hObject=0x154) returned 1 [0132.161] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.161] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.162] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.162] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0132.163] WriteFile (in: hFile=0x154, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0132.164] CloseHandle (hObject=0x154) returned 1 [0132.164] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.164] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.164] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.164] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x4d7b20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4d7b20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.164] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x4d7b20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4d7b20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.164] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x4d7b20, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x4d7b20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4dc940, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.164] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 1 [0132.164] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.164] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.164] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.164] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.165] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.165] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.165] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.165] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.165] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.165] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.165] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.165] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.165] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.165] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0132.166] CloseHandle (hObject=0x154) returned 1 [0132.166] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.166] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.166] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.168] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0132.168] WriteFile (in: hFile=0x154, lpBuffer=0x12657900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12657900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0132.169] CloseHandle (hObject=0x154) returned 1 [0132.170] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.170] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.170] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.170] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x4e6580, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4e6580, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.170] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x4e6580, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4e6580, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.170] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="03J4UQW0", cAlternateFileName="")) returned 1 [0132.170] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x4e1760, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x4e1760, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4eb3a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.170] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.170] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0132.170] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KETAJP6D", cAlternateFileName="")) returned 1 [0132.170] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VB18B0KB", cAlternateFileName="")) returned 1 [0132.170] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XT1RPYG9", cAlternateFileName="")) returned 1 [0132.170] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.170] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.170] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.170] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.171] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.171] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.171] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.172] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.172] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.172] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.172] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.172] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.172] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.172] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.172] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.173] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.173] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.174] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.174] ReadFile (in: hFile=0x154, lpBuffer=0x1248c000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfBytesRead=0x124299e0*=0x43, lpOverlapped=0x0) returned 1 [0132.175] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.175] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.175] ReadFile (in: hFile=0x178, lpBuffer=0x1248c100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1248c100*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.177] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0132.177] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0132.177] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.177] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0132.177] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124424a0 | out: pbBuffer=0x124424a0) returned 1 [0132.178] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c202 | out: pbBuffer=0x1248c202) returned 1 [0132.179] SetEvent (hEvent=0xb8) returned 1 [0132.179] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x8000, lpOverlapped=0x0) returned 1 [0132.180] GetFileType (hFile=0xdc) returned 0x1 [0132.180] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0132.180] WriteFile (in: hFile=0xdc, lpBuffer=0x12490000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x12490000*, lpNumberOfBytesWritten=0x124298a8*=0x8000, lpOverlapped=0x124298b4) returned 1 [0132.181] GetFileType (hFile=0xdc) returned 0x1 [0132.181] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0132.181] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0132.181] CloseHandle (hObject=0xdc) returned 1 [0132.181] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.181] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0132.181] WriteFile (in: hFile=0xdc, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0132.182] CloseHandle (hObject=0xdc) returned 1 [0132.182] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12650000*, nNumberOfCharsToWrite=0x7d, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x12650000*, lpNumberOfCharsWritten=0x1242957c*=0x7d) returned 1 [0132.182] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.182] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.183] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.183] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0132.183] WriteFile (in: hFile=0xdc, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0132.185] CloseHandle (hObject=0xdc) returned 1 [0132.185] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.185] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.185] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.185] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x50af70, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x50af70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.185] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x50af70, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x50af70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.185] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x50af70, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x50af70, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x50fd90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.185] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.185] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.185] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.185] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.185] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.185] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.186] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0132.186] ReadFile (in: hFile=0xdc, lpBuffer=0x12650700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12650700*, lpNumberOfBytesRead=0x12429938*=0x43, lpOverlapped=0x0) returned 1 [0132.188] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0132.188] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.188] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.188] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.188] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.188] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.188] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/03J4UQW0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.188] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0132.188] CloseHandle (hObject=0x154) returned 1 [0132.188] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.188] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.189] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.189] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.189] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.189] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.189] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0132.189] CloseHandle (hObject=0x154) returned 1 [0132.189] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.189] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.189] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.190] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0132.190] WriteFile (in: hFile=0x154, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0132.191] CloseHandle (hObject=0x154) returned 1 [0132.191] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.191] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.191] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.191] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x5199d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5199d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.191] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x5199d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5199d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.191] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5199d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5199d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x51e7f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.192] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.192] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.192] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.192] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.192] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0132.192] ReadFile (in: hFile=0x154, lpBuffer=0x12650f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12650f00*, lpNumberOfBytesRead=0x12429938*=0x43, lpOverlapped=0x0) returned 1 [0132.193] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0132.194] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.194] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.194] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.194] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.194] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.194] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/KETAJP6D/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.194] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0132.194] CloseHandle (hObject=0x178) returned 1 [0132.194] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.194] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.194] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.195] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0132.195] WriteFile (in: hFile=0x178, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0132.196] CloseHandle (hObject=0x178) returned 1 [0132.196] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.196] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.196] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.197] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x528430, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x528430, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.197] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x528430, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x528430, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.197] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x528430, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x528430, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52ab40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.197] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.197] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.197] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.197] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.197] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.197] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.197] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0132.198] ReadFile (in: hFile=0x178, lpBuffer=0x12651700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12651700*, lpNumberOfBytesRead=0x12429938*=0x43, lpOverlapped=0x0) returned 1 [0132.198] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0132.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.199] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.199] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.199] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/VB18B0KB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0132.199] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0132.199] CloseHandle (hObject=0x124) returned 1 [0132.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.199] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.199] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0132.200] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0132.200] WriteFile (in: hFile=0x124, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0132.201] CloseHandle (hObject=0x124) returned 1 [0132.201] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.201] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.201] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.202] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x52f960, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52f960, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.202] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x52f960, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52f960, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.202] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x52d250, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x52d250, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x532070, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.202] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.202] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.202] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.202] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.202] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.202] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0132.202] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0132.203] ReadFile (in: hFile=0x124, lpBuffer=0x12651f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x12651f00*, lpNumberOfBytesRead=0x12429938*=0x43, lpOverlapped=0x0) returned 1 [0132.204] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1 [0132.204] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.204] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.204] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.204] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.204] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.204] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/Temporary Internet Files/Content.IE5/XT1RPYG9/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0132.204] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0132.204] CloseHandle (hObject=0x18c) returned 1 [0132.204] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.204] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.205] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0132.205] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0132.205] WriteFile (in: hFile=0x18c, lpBuffer=0x12773300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12773300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0132.206] CloseHandle (hObject=0x18c) returned 1 [0132.206] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.206] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.207] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.207] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x874c95a0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0x53bcb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53bcb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.207] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x874c95a0, ftCreationTime.dwHighDateTime=0x1d4d5ae, ftLastAccessTime.dwLowDateTime=0x53bcb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53bcb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.207] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x53bcb0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x53bcb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x53e3c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.207] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.207] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.207] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.207] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.207] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.207] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.207] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.207] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.207] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temp/WPDNSE/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0132.208] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0132.208] CloseHandle (hObject=0x18c) returned 1 [0132.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temporary internet files\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.208] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temporary internet files\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0132.209] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0132.210] WriteFile (in: hFile=0x18c, lpBuffer=0x12775900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12775900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0132.211] CloseHandle (hObject=0x18c) returned 1 [0132.211] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temporary internet files\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.211] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temporary Internet Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temporary internet files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Temporary Internet Files\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.212] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0132.212] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0132.213] WriteFile (in: hFile=0x18c, lpBuffer=0x12776c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12776c00*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0132.214] CloseHandle (hObject=0x18c) returned 1 [0132.214] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.214] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.214] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.214] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54ce20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x54ce20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54ce20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x54ce20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x54ce20, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x54ce20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x551c40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.215] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.215] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.215] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.215] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.215] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.215] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.215] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.215] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.215] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/VirtualStore/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0132.215] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0132.216] CloseHandle (hObject=0x18c) returned 1 [0132.216] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.216] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.216] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0132.216] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0132.216] WriteFile (in: hFile=0x18c, lpBuffer=0x127b9300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x127b9300*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0132.217] CloseHandle (hObject=0x18c) returned 1 [0132.218] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.218] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.218] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.218] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x556a60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x556a60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.218] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x556a60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x556a60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.218] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x556a60, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x556a60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x55b880, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.218] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0132.218] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0132.218] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0132.218] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.218] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.218] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.218] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.218] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.219] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.220] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.220] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.220] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.220] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.220] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.220] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.221] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.221] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.221] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.221] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.221] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.221] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.221] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0132.221] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0132.222] CloseHandle (hObject=0x18c) returned 1 [0132.222] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.222] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.222] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0132.222] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0132.222] WriteFile (in: hFile=0x18c, lpBuffer=0x127bb900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x127bb900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0132.224] CloseHandle (hObject=0x18c) returned 1 [0132.224] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.224] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.224] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.224] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x5654c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5654c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.224] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x5654c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5654c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.224] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5654c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5654c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x56a2e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.224] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0132.224] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0132.224] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.224] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.224] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.224] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.224] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.225] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.225] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.225] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.225] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.225] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.225] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.226] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.226] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.226] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.226] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.226] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0132.226] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0132.227] CloseHandle (hObject=0x18c) returned 1 [0132.227] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.227] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.227] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0132.227] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0132.228] WriteFile (in: hFile=0x18c, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0132.229] CloseHandle (hObject=0x18c) returned 1 [0132.229] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.229] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.229] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.229] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x571810, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x571810, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.230] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x571810, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x571810, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.230] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0132.230] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x571810, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x571810, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x576630, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.230] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.230] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.230] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.230] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.231] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.232] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.232] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.232] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.233] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.233] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0132.233] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0132.234] WriteFile (in: hFile=0x18c, lpBuffer=0x12655300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12655300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0132.235] CloseHandle (hObject=0x18c) returned 1 [0132.235] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.235] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.235] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.235] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x580270, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x580270, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.235] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x580270, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x580270, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.235] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x580270, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x580270, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x585090, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.235] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1 [0132.235] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0132.235] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0132.235] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.235] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.235] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.236] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.236] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/ReaderMessages" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\readermessages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0132.236] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.236] ReadFile (in: hFile=0x18c, lpBuffer=0x1248c600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1248c600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.238] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.238] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.239] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.239] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0132.240] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.242] ReadFile (in: hFile=0x148, lpBuffer=0x1248c700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1248c700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.244] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/ReaderMessages" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\readermessages"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0132.244] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff)) returned 1 [0132.244] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.244] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0132.244] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240ed20 | out: pbBuffer=0x1240ed20) returned 1 [0132.245] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2680 | out: pbBuffer=0x124e2680) returned 1 [0132.245] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c802 | out: pbBuffer=0x1248c802) returned 1 [0132.245] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c88b | out: pbBuffer=0x1248c88b) returned 1 [0132.247] SetEvent (hEvent=0x7c) returned 1 [0132.247] ReadFile (in: hFile=0x120, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0xa5ff, lpOverlapped=0x0) returned 1 [0132.247] GetFileType (hFile=0x120) returned 0x1 [0132.247] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0132.247] WriteFile (in: hFile=0x120, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0xa5ff, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x124298a8*=0xa5ff, lpOverlapped=0x124298b4) returned 1 [0132.248] GetFileType (hFile=0x120) returned 0x1 [0132.248] SetFilePointerEx (in: hFile=0x120, liDistanceToMove=0xa5ff, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0132.248] ReadFile (in: hFile=0x120, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0132.248] CloseHandle (hObject=0x120) returned 1 [0132.248] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.248] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0132.248] WriteFile (in: hFile=0x120, lpBuffer=0x1247cfc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1247cfc0*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0132.249] CloseHandle (hObject=0x120) returned 1 [0132.249] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c90a0*, nNumberOfCharsToWrite=0x6e, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124c90a0*, lpNumberOfCharsWritten=0x1242957c*=0x6e) returned 1 [0132.249] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.249] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.249] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.250] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.250] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.250] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.250] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0132.251] CloseHandle (hObject=0x120) returned 1 [0132.251] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.251] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.251] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.251] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0132.252] WriteFile (in: hFile=0x120, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0132.253] CloseHandle (hObject=0x120) returned 1 [0132.253] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.253] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.253] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.253] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x5ac190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ac190, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.253] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x5ac190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ac190, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.253] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5ac190, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5ac190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5b0fb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.253] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.253] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.253] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.253] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.253] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.254] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.254] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.254] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.254] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.254] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/10.0/Search/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.254] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0132.254] CloseHandle (hObject=0x120) returned 1 [0132.254] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.254] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.254] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.254] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.255] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.255] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.255] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0132.255] CloseHandle (hObject=0x120) returned 1 [0132.255] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.255] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.255] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.256] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0132.256] WriteFile (in: hFile=0x120, lpBuffer=0x124d1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d1300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0132.257] CloseHandle (hObject=0x120) returned 1 [0132.257] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.257] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.257] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.257] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x5b5dd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5b5dd0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.257] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x5b5dd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5b5dd0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.258] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5b5dd0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5b5dd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5babf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.258] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0132.258] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.258] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.258] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.258] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.258] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.258] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.259] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.259] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.260] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.260] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.260] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.260] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.260] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.260] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0132.260] CloseHandle (hObject=0x120) returned 1 [0132.260] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.260] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.260] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.261] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0132.261] WriteFile (in: hFile=0x120, lpBuffer=0x124d3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d3900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0132.262] CloseHandle (hObject=0x120) returned 1 [0132.262] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.262] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.263] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.263] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x5c4830, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5c4830, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.263] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x5c4830, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5c4830, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.263] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5c4830, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5c4830, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5c6f40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.263] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0132.263] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.263] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.263] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.263] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.263] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.263] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.265] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.266] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.266] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.266] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.266] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.266] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.266] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.266] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0132.266] CloseHandle (hObject=0x120) returned 1 [0132.267] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.267] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.267] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.268] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0132.268] WriteFile (in: hFile=0x120, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0132.269] CloseHandle (hObject=0x120) returned 1 [0132.269] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.269] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.269] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.269] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x5d0b80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5d0b80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.269] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x5d0b80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5d0b80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5ce470, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5ce470, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5d3290, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1 [0132.270] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.270] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.270] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.270] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.270] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.270] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.271] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.271] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.271] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.272] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.272] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.272] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.273] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.273] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.273] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.274] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.274] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.274] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.274] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.274] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.274] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.274] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.274] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.274] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.275] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.275] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.275] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.275] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.275] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.275] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.275] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.276] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.276] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.276] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.276] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.276] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.276] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.276] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.276] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.276] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.277] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.277] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.277] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.277] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.277] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.277] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.277] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.277] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0132.277] CloseHandle (hObject=0x120) returned 1 [0132.278] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.278] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.278] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.278] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0132.278] WriteFile (in: hFile=0x120, lpBuffer=0x12656600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12656600*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0132.279] CloseHandle (hObject=0x120) returned 1 [0132.279] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.280] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.280] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.280] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x5e9220, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5e9220, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.280] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x5e9220, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5e9220, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.280] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5e9220, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5e9220, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5eb930, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.280] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.280] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.280] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.280] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.280] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.280] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.281] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.281] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.281] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.281] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/all/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.281] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0132.281] CloseHandle (hObject=0x120) returned 1 [0132.281] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.281] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.281] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.282] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0132.282] WriteFile (in: hFile=0x120, lpBuffer=0x12658c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12658c00*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0132.283] CloseHandle (hObject=0x120) returned 1 [0132.283] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.283] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.283] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.284] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x5f0750, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f0750, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.284] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x5f0750, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f0750, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.284] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5f0750, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5f0750, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f5570, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.284] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.284] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.284] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.284] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.284] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.284] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.285] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0132.285] CloseHandle (hObject=0x120) returned 1 [0132.285] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.285] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.285] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.285] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0132.286] WriteFile (in: hFile=0x120, lpBuffer=0x124ad300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x124ad300*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0132.287] CloseHandle (hObject=0x120) returned 1 [0132.287] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.287] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.287] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.287] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x5fa390, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fa390, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.287] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x5fa390, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fa390, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.287] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5fa390, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5fa390, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ff1b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.287] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.287] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.287] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.287] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.288] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.288] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.288] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/brz/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.288] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0132.288] CloseHandle (hObject=0x120) returned 1 [0132.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.288] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.289] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.289] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0132.289] WriteFile (in: hFile=0x120, lpBuffer=0x124af900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x124af900*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0132.290] CloseHandle (hObject=0x120) returned 1 [0132.290] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.290] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.290] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.291] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x603fd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x603fd0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.291] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x603fd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x603fd0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.291] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x603fd0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x603fd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6066e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.291] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.291] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.291] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.291] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.291] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.291] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.291] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.291] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.291] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.291] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dan/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.292] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0132.292] CloseHandle (hObject=0x120) returned 1 [0132.292] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.292] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.292] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.292] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0132.293] WriteFile (in: hFile=0x120, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0132.294] CloseHandle (hObject=0x120) returned 1 [0132.294] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.294] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.294] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.294] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x60b500, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x60b500, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.294] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x60b500, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x60b500, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.294] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x60b500, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x60b500, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x610320, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.294] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.295] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.295] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.295] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.295] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.295] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/dut/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.295] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0132.295] CloseHandle (hObject=0x120) returned 1 [0132.296] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.296] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.296] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.296] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0132.296] WriteFile (in: hFile=0x120, lpBuffer=0x1258a600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x1258a600*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0132.303] CloseHandle (hObject=0x120) returned 1 [0132.303] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.303] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.303] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.303] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x615140, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x615140, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x615140, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x615140, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x615140, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x615140, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6262b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.303] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.303] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.303] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.304] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.304] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.304] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/eng/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.304] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0132.304] CloseHandle (hObject=0x120) returned 1 [0132.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.304] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.305] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.305] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0132.305] WriteFile (in: hFile=0x120, lpBuffer=0x1258cc00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x1258cc00*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0132.306] CloseHandle (hObject=0x120) returned 1 [0132.306] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.306] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.307] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x62b0d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x62b0d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.307] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x62b0d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x62b0d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.307] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x62b0d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x62b0d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x62d7e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.307] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.307] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.307] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.307] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.307] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.307] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.307] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.307] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.307] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.307] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/frn/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.308] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0132.308] CloseHandle (hObject=0x120) returned 1 [0132.308] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.308] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.308] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.308] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0132.309] WriteFile (in: hFile=0x120, lpBuffer=0x12455300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12455300*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0132.310] CloseHandle (hObject=0x120) returned 1 [0132.310] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.310] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.310] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.310] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x632600, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x632600, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.310] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x632600, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x632600, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.310] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x632600, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x632600, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x637420, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.310] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.310] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.310] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.310] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.310] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.311] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.311] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.311] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.311] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.311] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/grm/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.311] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0132.311] CloseHandle (hObject=0x120) returned 1 [0132.311] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.311] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.311] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.312] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0132.312] WriteFile (in: hFile=0x120, lpBuffer=0x12457900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12457900*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0132.313] CloseHandle (hObject=0x120) returned 1 [0132.313] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.313] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.313] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.313] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x63c240, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63c240, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x63c240, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63c240, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x63c240, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x63c240, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63e950, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.314] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.314] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.314] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.314] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.314] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.314] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.314] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.314] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.314] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/itl/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.314] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0132.315] CloseHandle (hObject=0x120) returned 1 [0132.315] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.315] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.315] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.315] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0132.315] WriteFile (in: hFile=0x120, lpBuffer=0x127b2000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x127b2000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0132.316] CloseHandle (hObject=0x120) returned 1 [0132.317] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.317] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.317] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.317] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x643770, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x643770, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.317] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x643770, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x643770, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.317] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x643770, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x643770, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x648590, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.317] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.317] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.317] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.317] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.317] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.318] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.318] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.318] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.318] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.318] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/nrw/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.318] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0132.318] CloseHandle (hObject=0x120) returned 1 [0132.318] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.318] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.318] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.319] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0132.319] WriteFile (in: hFile=0x120, lpBuffer=0x127b4600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x127b4600*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0132.320] CloseHandle (hObject=0x120) returned 1 [0132.320] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.320] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.320] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.320] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x64d3b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x64d3b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.321] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x64d3b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x64d3b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.321] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x64d3b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x64d3b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x64fac0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.321] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.321] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.321] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.321] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.321] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.321] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.321] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.321] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.321] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.321] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/prt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.321] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0132.322] CloseHandle (hObject=0x120) returned 1 [0132.322] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.322] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.322] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.322] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0132.322] WriteFile (in: hFile=0x120, lpBuffer=0x127b6c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x127b6c00*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0132.324] CloseHandle (hObject=0x120) returned 1 [0132.324] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.324] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.324] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.324] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x6548e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6548e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.324] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x6548e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6548e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.324] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x6548e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6548e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x659700, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.324] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.324] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.324] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.324] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.324] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.325] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.325] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.325] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.325] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.325] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/spn/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.325] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0132.325] CloseHandle (hObject=0x120) returned 1 [0132.325] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.325] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.325] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.326] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0132.326] WriteFile (in: hFile=0x120, lpBuffer=0x127e7300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x127e7300*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0132.327] CloseHandle (hObject=0x120) returned 1 [0132.327] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.327] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.327] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.327] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x65e520, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x65e520, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.327] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x65e520, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x65e520, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.328] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x65e520, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x65e520, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x660c30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.328] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.328] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.328] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.328] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.328] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.328] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.328] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.328] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.328] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.328] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Adobe/Linguistics/Dictionaries/Adobe Custom Dictionary/swd/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.328] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0132.328] CloseHandle (hObject=0x120) returned 1 [0132.329] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.329] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.329] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.329] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0132.330] WriteFile (in: hFile=0x120, lpBuffer=0x127e9900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x127e9900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0132.331] CloseHandle (hObject=0x120) returned 1 [0132.331] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.331] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.331] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.331] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x660c30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x660c30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.331] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x660c30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x660c30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.332] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x660c30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x660c30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x668160, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.332] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0132.332] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0132.332] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0132.332] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0132.332] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0132.332] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0132.332] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.332] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.332] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.332] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.332] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.332] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.332] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.332] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/IME12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\ime12"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.332] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/IME12\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.333] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.333] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/IMJP12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp12"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.333] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/IMJP12\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.334] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.334] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/IMJP8_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp8_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.334] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/IMJP8_1\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.334] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.334] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/IMJP9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp9_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.334] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/IMJP9_0\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.334] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.334] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.334] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.335] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.335] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.335] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.336] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.336] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.336] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.336] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.336] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0132.336] CloseHandle (hObject=0x120) returned 1 [0132.336] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.336] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.336] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.350] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0132.350] WriteFile (in: hFile=0x120, lpBuffer=0x12596000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12596000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0132.351] CloseHandle (hObject=0x120) returned 1 [0132.351] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.351] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.351] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.351] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x694080, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x694080, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.351] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x694080, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x694080, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.352] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x694080, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x694080, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x698ea0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.352] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0132.352] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0132.352] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.352] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.352] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.352] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.352] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.352] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.352] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.352] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.352] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.353] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.353] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.353] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.353] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.353] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.353] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.353] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.353] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0132.353] CloseHandle (hObject=0x120) returned 1 [0132.353] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.353] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.354] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.354] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0132.354] WriteFile (in: hFile=0x120, lpBuffer=0x12598600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12598600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0132.355] CloseHandle (hObject=0x120) returned 1 [0132.355] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.355] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.355] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.356] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6a03d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6a03d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6a03d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6a03d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0132.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x6a03d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6a03d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6a2ae0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0132.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0132.358] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0132.358] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0132.358] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0132.358] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0132.358] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0132.358] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0132.358] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0132.358] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0132.358] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0132.358] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.358] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.358] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.358] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.358] ReadFile (in: hFile=0x120, lpBuffer=0x12651100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651100*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.359] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.368] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.368] ReadFile (in: hFile=0xdc, lpBuffer=0x12651200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.371] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.371] ReadFile (in: hFile=0x154, lpBuffer=0x12651300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651300*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.372] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.373] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.373] ReadFile (in: hFile=0x178, lpBuffer=0x12651400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651400*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.375] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/23B523C9E7746F715D33C6527C18EB9D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\23b523c9e7746f715d33c6527c18eb9d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0132.375] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.376] ReadFile (in: hFile=0x124, lpBuffer=0x12651500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651500*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.376] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/3130B1871A126520A8C47861EFE3ED4D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3130b1871a126520a8c47861efe3ed4d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0132.377] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.378] ReadFile (in: hFile=0x18c, lpBuffer=0x12651600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.379] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0132.379] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.379] ReadFile (in: hFile=0x148, lpBuffer=0x12651700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.380] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0132.381] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.381] ReadFile (in: hFile=0x15c, lpBuffer=0x12651800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651800*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.383] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0132.384] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.384] ReadFile (in: hFile=0x10c, lpBuffer=0x12651900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651900*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.387] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0132.388] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.388] ReadFile (in: hFile=0xc0, lpBuffer=0x12651a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651a00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.389] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0132.390] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.390] ReadFile (in: hFile=0x180, lpBuffer=0x12651b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651b00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.392] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0132.392] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.392] ReadFile (in: hFile=0x19c, lpBuffer=0x12651c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651c00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.394] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0132.395] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.395] ReadFile (in: hFile=0x110, lpBuffer=0x12651d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651d00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.396] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/696F3DE637E6DE85B458996D49D759AD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\696f3de637e6de85b458996d49d759ad"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0132.396] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.396] ReadFile (in: hFile=0x128, lpBuffer=0x12651e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651e00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.397] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0132.397] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.397] ReadFile (in: hFile=0x12c, lpBuffer=0x12651f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12651f00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.399] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/7396C420A8E1BC1DA97F1AF0D10BAD21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7396c420a8e1bc1da97f1af0d10bad21"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0132.399] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.399] ReadFile (in: hFile=0x198, lpBuffer=0x125a8000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8000*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.400] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0132.430] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.435] ReadFile (in: hFile=0x168, lpBuffer=0x125a8100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8100*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.436] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0132.437] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.437] ReadFile (in: hFile=0xd0, lpBuffer=0x125a8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.438] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0132.438] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.438] ReadFile (in: hFile=0x144, lpBuffer=0x125a8300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8300*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.440] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0132.441] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.441] ReadFile (in: hFile=0x16c, lpBuffer=0x125a8400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8400*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.442] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0132.443] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.443] ReadFile (in: hFile=0xc8, lpBuffer=0x125a8500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8500*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.444] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_234cb5d64705d4dbb4da839716359af0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0132.445] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.445] ReadFile (in: hFile=0x118, lpBuffer=0x125a8600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.446] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_294110d6990ee392327f8a606d55bc1e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0132.447] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.447] ReadFile (in: hFile=0x17c, lpBuffer=0x125a8700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.448] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_50167909fcfe0c66153f1901439cbba1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0132.449] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.449] ReadFile (in: hFile=0xbc, lpBuffer=0x125a8800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8800*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.450] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_581c904db5924e46a6c1a8637614a40e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0132.451] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.451] ReadFile (in: hFile=0xe8, lpBuffer=0x125a8900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8900*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.452] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_5ea65844b9ef5670a9c002cbd85b10a4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0132.453] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.453] ReadFile (in: hFile=0x114, lpBuffer=0x125a8a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8a00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.454] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_74e943f7dab6d19e37e4854057155778"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0132.454] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.455] ReadFile (in: hFile=0x160, lpBuffer=0x125a8b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8b00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.456] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_c080da2ae431c1a7f3b0c147eeb043ed"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0132.456] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.457] ReadFile (in: hFile=0x164, lpBuffer=0x125a8c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8c00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.457] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_e907d7a04657714b5b06d18bc920971e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0132.458] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.458] ReadFile (in: hFile=0x158, lpBuffer=0x125a8d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8d00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.459] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f2318f7ab33980a131a265454c39ca30"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0132.463] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.463] ReadFile (in: hFile=0xf8, lpBuffer=0x125a8e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8e00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.464] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f6e15778dc8e326895c606fbfa0392eb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0132.465] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.465] ReadFile (in: hFile=0x130, lpBuffer=0x125a8f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a8f00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.466] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_0206efbc540300c3bf0163cdbc3d7d56"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0132.466] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.466] ReadFile (in: hFile=0x134, lpBuffer=0x125a9000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9000*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.468] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_3df94eb797096674f7793a562a778c5f"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0132.468] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.469] ReadFile (in: hFile=0xfc, lpBuffer=0x125a9100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9100*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.481] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_c6ef73e4482b2588b1252d1a64b99416"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0132.482] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.482] ReadFile (in: hFile=0x104, lpBuffer=0x125a9200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.483] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8e4e510f44a56b8c8ecfec352907c373_411140098d71f028134e9b8a21255c61"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0132.484] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.484] ReadFile (in: hFile=0xf0, lpBuffer=0x125a9300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9300*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.485] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0132.485] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.486] ReadFile (in: hFile=0xe4, lpBuffer=0x125a9400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9400*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.488] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\955cab6ff6a24d5820d50b5ba1cf79c7_ad9e7615297a3a83320aace5801a04f9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0132.489] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.489] ReadFile (in: hFile=0x138, lpBuffer=0x125a9500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9500*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.490] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9bc2ffc5d9591e1bd3545230e9b7cc36_cf30943571f9bee96c487b2d9f0436e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0132.491] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.491] ReadFile (in: hFile=0x108, lpBuffer=0x125a9600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.493] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_1213dc6f71e4c3b05e7bceebc203a31e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0132.493] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.494] ReadFile (in: hFile=0x190, lpBuffer=0x125a9700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.495] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_ebc75728c6119a77e4da8559dd10f061"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0132.495] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.496] ReadFile (in: hFile=0x188, lpBuffer=0x125a9800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9800*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.497] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.497] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.498] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_183a5be0b233cc1d513955fabecf9450"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0132.498] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.498] ReadFile (in: hFile=0x150, lpBuffer=0x125a9900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9900*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.499] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\acf244f1a10d4dbed0d88eba0c43a9b5_ba1ab6c2bdfdf57799e8116e4002d001"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0132.500] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.500] ReadFile (in: hFile=0x98, lpBuffer=0x125a9a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9a00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.501] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_6f0a84ce2ba99bd19d42c92610275852"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0132.502] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.502] ReadFile (in: hFile=0x100, lpBuffer=0x125a9b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9b00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.504] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0132.505] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.505] ReadFile (in: hFile=0x13c, lpBuffer=0x125a9c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9c00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.506] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_6ce6e578b5c8485b4be3c4d58e12f150"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0132.506] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.507] ReadFile (in: hFile=0x11c, lpBuffer=0x125a9d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9d00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.508] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_f4d449ca9e0eaccfe15946f8fcd349fc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0132.509] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.509] ReadFile (in: hFile=0x170, lpBuffer=0x125a9e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9e00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.510] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0132.511] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.511] ReadFile (in: hFile=0x174, lpBuffer=0x125a9f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x125a9f00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.513] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0132.513] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.513] ReadFile (in: hFile=0xf4, lpBuffer=0x1256a000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256a000*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.523] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0132.523] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.524] ReadFile (in: hFile=0x14c, lpBuffer=0x1256a100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256a100*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.528] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_4dd1053bcc726da41115fff4c7d6e9cc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0132.528] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.528] ReadFile (in: hFile=0x140, lpBuffer=0x1256a200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256a200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.530] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0132.530] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.530] ReadFile (in: hFile=0xd8, lpBuffer=0x1256a300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256a300*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.532] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d52c56d8f24bec96604372afbaf264e1_e76a2b627dd019eb51d9335f24b14c2c"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0132.532] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.532] ReadFile (in: hFile=0xcc, lpBuffer=0x1256a400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256a400*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.534] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\ea618097e393409afa316f0f87e2c202_827c1b837652b048c4c84237d0838585"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0132.535] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.535] ReadFile (in: hFile=0xe0, lpBuffer=0x1256a500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256a500*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.537] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f293aead5e84facfb686c4a620718928_c8424a0b24a72939b13720d0c000c9c1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0132.537] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.537] ReadFile (in: hFile=0xec, lpBuffer=0x1256a600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256a600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.539] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/F90F18257CBB4D84216AC1E1F3BB2C76" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f90f18257cbb4d84216ac1e1f3bb2c76"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0132.540] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.540] ReadFile (in: hFile=0x184, lpBuffer=0x1256a700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256a700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.541] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0132.541] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561)) returned 1 [0132.541] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8)) returned 1 [0132.541] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d)) returned 1 [0132.541] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/23B523C9E7746F715D33C6527C18EB9D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\23b523c9e7746f715d33c6527c18eb9d"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145)) returned 1 [0132.541] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/3130B1871A126520A8C47861EFE3ED4D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3130b1871a126520a8c47861efe3ed4d"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209)) returned 1 [0132.541] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b)) returned 1 [0132.541] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0132.541] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0132.541] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680)) returned 1 [0132.542] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7)) returned 1 [0132.542] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7)) returned 1 [0132.542] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0132.542] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/696F3DE637E6DE85B458996D49D759AD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\696f3de637e6de85b458996d49d759ad"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d)) returned 1 [0132.542] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648)) returned 1 [0132.542] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/7396C420A8E1BC1DA97F1AF0D10BAD21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7396c420a8e1bc1da97f1af0d10bad21"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a)) returned 1 [0132.542] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0132.542] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa)) returned 1 [0132.542] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c)) returned 1 [0132.542] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0132.542] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0132.542] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_234cb5d64705d4dbb4da839716359af0"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0132.542] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_294110d6990ee392327f8a606d55bc1e"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0132.543] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_50167909fcfe0c66153f1901439cbba1"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0132.543] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_581c904db5924e46a6c1a8637614a40e"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0132.543] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_5ea65844b9ef5670a9c002cbd85b10a4"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0132.543] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_74e943f7dab6d19e37e4854057155778"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0132.543] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_c080da2ae431c1a7f3b0c147eeb043ed"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0132.543] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_e907d7a04657714b5b06d18bc920971e"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0132.543] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f2318f7ab33980a131a265454c39ca30"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0132.543] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f6e15778dc8e326895c606fbfa0392eb"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0132.543] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_0206efbc540300c3bf0163cdbc3d7d56"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e)) returned 1 [0132.543] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_3df94eb797096674f7793a562a778c5f"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0132.543] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_c6ef73e4482b2588b1252d1a64b99416"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0132.543] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8e4e510f44a56b8c8ecfec352907c373_411140098d71f028134e9b8a21255c61"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d)) returned 1 [0132.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da)) returned 1 [0132.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\955cab6ff6a24d5820d50b5ba1cf79c7_ad9e7615297a3a83320aace5801a04f9"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1 [0132.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9bc2ffc5d9591e1bd3545230e9b7cc36_cf30943571f9bee96c487b2d9f0436e6"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab)) returned 1 [0132.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_1213dc6f71e4c3b05e7bceebc203a31e"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652)) returned 1 [0132.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_ebc75728c6119a77e4da8559dd10f061"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652)) returned 1 [0132.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_183a5be0b233cc1d513955fabecf9450"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0132.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\acf244f1a10d4dbed0d88eba0c43a9b5_ba1ab6c2bdfdf57799e8116e4002d001"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee)) returned 1 [0132.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_6f0a84ce2ba99bd19d42c92610275852"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652)) returned 1 [0132.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652)) returned 1 [0132.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_6ce6e578b5c8485b4be3c4d58e12f150"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed)) returned 1 [0132.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_f4d449ca9e0eaccfe15946f8fcd349fc"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed)) returned 1 [0132.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0132.545] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0132.545] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0132.545] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_4dd1053bcc726da41115fff4c7d6e9cc"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1 [0132.545] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1 [0132.545] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d52c56d8f24bec96604372afbaf264e1_e76a2b627dd019eb51d9335f24b14c2c"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663)) returned 1 [0132.545] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\ea618097e393409afa316f0f87e2c202_827c1b837652b048c4c84237d0838585"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b)) returned 1 [0132.545] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f293aead5e84facfb686c4a620718928_c8424a0b24a72939b13720d0c000c9c1"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c)) returned 1 [0132.545] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/F90F18257CBB4D84216AC1E1F3BB2C76" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f90f18257cbb4d84216ac1e1f3bb2c76"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226)) returned 1 [0132.545] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.545] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.545] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.545] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.546] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.546] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x194 [0132.546] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0132.546] CloseHandle (hObject=0x194) returned 1 [0132.546] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.546] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.546] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x194 [0132.547] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0132.547] WriteFile (in: hFile=0x194, lpBuffer=0x1259ac00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1259ac00*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0132.548] CloseHandle (hObject=0x194) returned 1 [0132.548] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.548] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.549] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.549] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x857b10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x857b10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x857b10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x857b10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd48e2bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0132.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x611ea800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x611ea800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5836df00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5836df00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x196, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbf0dd70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x857b10, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x857b10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x85c930, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0132.550] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0132.551] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0132.551] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0132.551] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0132.551] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0132.551] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0132.551] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0132.551] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0132.551] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0132.551] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0132.551] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0132.551] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0132.551] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0132.551] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0132.551] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.551] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.551] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x194 [0132.552] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.552] ReadFile (in: hFile=0x194, lpBuffer=0x1256a800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256a800*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.553] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a0 [0132.554] GetConsoleMode (in: hConsoleHandle=0x1a0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.554] ReadFile (in: hFile=0x1a0, lpBuffer=0x1256a900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256a900*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.555] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0132.556] GetConsoleMode (in: hConsoleHandle=0x1a4, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.556] ReadFile (in: hFile=0x1a4, lpBuffer=0x1256aa00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256aa00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.557] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a8 [0132.557] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.558] ReadFile (in: hFile=0x1a8, lpBuffer=0x1256ab00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256ab00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.559] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/23B523C9E7746F715D33C6527C18EB9D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\23b523c9e7746f715d33c6527c18eb9d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0132.559] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.559] ReadFile (in: hFile=0x1ac, lpBuffer=0x1256ac00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256ac00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.560] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/3130B1871A126520A8C47861EFE3ED4D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\3130b1871a126520a8c47861efe3ed4d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0132.560] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.560] ReadFile (in: hFile=0x1b0, lpBuffer=0x1256ad00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256ad00*, lpNumberOfBytesRead=0x124299e0*=0xdc, lpOverlapped=0x0) returned 1 [0132.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0132.562] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.562] ReadFile (in: hFile=0x1b4, lpBuffer=0x1256ae00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256ae00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.563] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0132.563] GetConsoleMode (in: hConsoleHandle=0x1b8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.563] ReadFile (in: hFile=0x1b8, lpBuffer=0x1256af00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256af00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.564] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0132.565] GetConsoleMode (in: hConsoleHandle=0x1bc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.565] ReadFile (in: hFile=0x1bc, lpBuffer=0x1256b000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256b000*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.566] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0132.566] GetConsoleMode (in: hConsoleHandle=0x1c0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.566] ReadFile (in: hFile=0x1c0, lpBuffer=0x1256b100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256b100*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.567] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c4 [0132.567] GetConsoleMode (in: hConsoleHandle=0x1c4, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.568] ReadFile (in: hFile=0x1c4, lpBuffer=0x1256b200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256b200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.568] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0132.569] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.570] ReadFile (in: hFile=0x1c8, lpBuffer=0x1256b300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256b300*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.570] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0132.571] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.571] ReadFile (in: hFile=0x1cc, lpBuffer=0x1256b400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256b400*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.572] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/696F3DE637E6DE85B458996D49D759AD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\696f3de637e6de85b458996d49d759ad"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0132.573] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.573] ReadFile (in: hFile=0x1d0, lpBuffer=0x1256b500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256b500*, lpNumberOfBytesRead=0x124299e0*=0xf4, lpOverlapped=0x0) returned 1 [0132.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0132.574] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.574] ReadFile (in: hFile=0x1d4, lpBuffer=0x1256b600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256b600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.575] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/7396C420A8E1BC1DA97F1AF0D10BAD21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7396c420a8e1bc1da97f1af0d10bad21"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0132.576] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.576] ReadFile (in: hFile=0x1d8, lpBuffer=0x1256b700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256b700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.578] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0132.578] GetConsoleMode (in: hConsoleHandle=0x1dc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.578] ReadFile (in: hFile=0x1dc, lpBuffer=0x1256b800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256b800*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.579] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0132.579] GetConsoleMode (in: hConsoleHandle=0x1e0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.580] ReadFile (in: hFile=0x1e0, lpBuffer=0x1256b900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256b900*, lpNumberOfBytesRead=0x124299e0*=0xdc, lpOverlapped=0x0) returned 1 [0132.580] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0132.581] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.582] ReadFile (in: hFile=0x1e4, lpBuffer=0x1256ba00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256ba00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.582] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0132.583] GetConsoleMode (in: hConsoleHandle=0x1e8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.583] ReadFile (in: hFile=0x1e8, lpBuffer=0x1256bb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256bb00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.584] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0132.584] GetConsoleMode (in: hConsoleHandle=0x1ec, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x1256bc00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256bc00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.589] GetConsoleMode (in: hConsoleHandle=0x1f0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x1256bd00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256bd00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.590] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x1256be00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256be00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.591] GetConsoleMode (in: hConsoleHandle=0x1f8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.591] ReadFile (in: hFile=0x1f8, lpBuffer=0x1256bf00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1256bf00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.592] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.592] ReadFile (in: hFile=0x1fc, lpBuffer=0x12750000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750000*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.593] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.594] ReadFile (in: hFile=0x200, lpBuffer=0x12750100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750100*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.595] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.595] ReadFile (in: hFile=0x204, lpBuffer=0x12750200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.596] GetConsoleMode (in: hConsoleHandle=0x208, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.596] ReadFile (in: hFile=0x208, lpBuffer=0x12750300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750300*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.597] GetConsoleMode (in: hConsoleHandle=0x20c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.597] ReadFile (in: hFile=0x20c, lpBuffer=0x12750400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750400*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.598] GetConsoleMode (in: hConsoleHandle=0x210, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.598] ReadFile (in: hFile=0x210, lpBuffer=0x12750500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750500*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.600] GetConsoleMode (in: hConsoleHandle=0x214, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.600] ReadFile (in: hFile=0x214, lpBuffer=0x12750600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.601] GetConsoleMode (in: hConsoleHandle=0x218, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.601] ReadFile (in: hFile=0x218, lpBuffer=0x12750700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.604] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.604] ReadFile (in: hFile=0x21c, lpBuffer=0x12750800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750800*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.605] GetConsoleMode (in: hConsoleHandle=0x220, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.605] ReadFile (in: hFile=0x220, lpBuffer=0x12750900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750900*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.607] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.607] ReadFile (in: hFile=0x224, lpBuffer=0x12750a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750a00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.608] GetConsoleMode (in: hConsoleHandle=0x228, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.608] ReadFile (in: hFile=0x228, lpBuffer=0x12750b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750b00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.609] GetConsoleMode (in: hConsoleHandle=0x22c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.610] ReadFile (in: hFile=0x22c, lpBuffer=0x12750c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750c00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.611] GetConsoleMode (in: hConsoleHandle=0x230, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.611] ReadFile (in: hFile=0x230, lpBuffer=0x12750d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750d00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.612] GetConsoleMode (in: hConsoleHandle=0x234, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.612] ReadFile (in: hFile=0x234, lpBuffer=0x12750e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750e00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.613] GetConsoleMode (in: hConsoleHandle=0x238, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.613] ReadFile (in: hFile=0x238, lpBuffer=0x12750f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12750f00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.615] GetConsoleMode (in: hConsoleHandle=0x23c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.616] ReadFile (in: hFile=0x23c, lpBuffer=0x12751000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12751000*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.617] GetConsoleMode (in: hConsoleHandle=0x240, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.617] ReadFile (in: hFile=0x240, lpBuffer=0x12751100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12751100*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.618] GetConsoleMode (in: hConsoleHandle=0x244, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.618] ReadFile (in: hFile=0x244, lpBuffer=0x12751200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12751200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.619] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.619] ReadFile (in: hFile=0x248, lpBuffer=0x12751300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12751300*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.620] GetConsoleMode (in: hConsoleHandle=0x24c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.620] ReadFile (in: hFile=0x24c, lpBuffer=0x12751400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12751400*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.622] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.622] ReadFile (in: hFile=0x250, lpBuffer=0x12751500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12751500*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.624] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.624] ReadFile (in: hFile=0x254, lpBuffer=0x12751600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12751600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.625] GetConsoleMode (in: hConsoleHandle=0x258, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.625] ReadFile (in: hFile=0x258, lpBuffer=0x12751700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12751700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.626] GetConsoleMode (in: hConsoleHandle=0x25c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.626] ReadFile (in: hFile=0x25c, lpBuffer=0x12751800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12751800*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.627] GetConsoleMode (in: hConsoleHandle=0x260, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.628] ReadFile (in: hFile=0x260, lpBuffer=0x12751900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12751900*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.629] GetConsoleMode (in: hConsoleHandle=0x264, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.629] ReadFile (in: hFile=0x264, lpBuffer=0x12751a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12751a00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.630] GetConsoleMode (in: hConsoleHandle=0x268, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.631] ReadFile (in: hFile=0x268, lpBuffer=0x12751b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12751b00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.632] GetConsoleMode (in: hConsoleHandle=0x26c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.632] ReadFile (in: hFile=0x26c, lpBuffer=0x12751c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12751c00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.633] GetConsoleMode (in: hConsoleHandle=0x270, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.633] ReadFile (in: hFile=0x270, lpBuffer=0x12751d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12751d00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.639] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/IME12\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.639] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x930fa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x930fa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.639] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x930fa0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x930fa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x935dc0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.639] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.639] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.641] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/IMJP12\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.641] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x9384d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9384d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.641] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x9384d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x9384d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x93abe0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.641] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.641] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.643] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/IMJP8_1\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.643] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x93d2f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x93d2f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.643] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x93d2f0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x93d2f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x93fa00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.643] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.643] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.645] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/IMJP9_0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.645] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x942110, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x942110, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.645] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x942110, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x942110, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x944820, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.645] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.646] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.647] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x946f30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x946f30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x946f30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x946f30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x949640, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0132.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0132.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.648] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.652] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.652] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x953280, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x953280, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.652] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="36USA68T", cAlternateFileName="")) returned 1 [0132.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3O75JDME", cAlternateFileName="")) returned 1 [0132.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x94e460, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x94e460, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x955990, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0132.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UV0DUWVB", cAlternateFileName="")) returned 1 [0132.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 1 [0132.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.653] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.659] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442320 | out: pbBuffer=0x12442320) returned 1 [0132.660] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e3090 | out: pbBuffer=0x124e3090) returned 1 [0132.660] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1278b602 | out: pbBuffer=0x1278b602) returned 1 [0132.660] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1278b609 | out: pbBuffer=0x1278b609) returned 1 [0132.660] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1278b63a | out: pbBuffer=0x1278b63a) returned 1 [0132.662] SetEvent (hEvent=0x6c) returned 1 [0132.662] ReadFile (in: hFile=0x27c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x8000, lpOverlapped=0x0) returned 1 [0132.662] GetFileType (hFile=0x27c) returned 0x1 [0132.662] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0132.662] WriteFile (in: hFile=0x27c, lpBuffer=0x1250e000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1250e000*, lpNumberOfBytesWritten=0x124298a8*=0x8000, lpOverlapped=0x124298b4) returned 1 [0132.663] GetFileType (hFile=0x27c) returned 0x1 [0132.663] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0132.663] ReadFile (in: hFile=0x27c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0132.663] CloseHandle (hObject=0x27c) returned 1 [0132.663] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0132.664] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0132.664] WriteFile (in: hFile=0x27c, lpBuffer=0x124f2fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124f2fc0*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0132.664] CloseHandle (hObject=0x27c) returned 1 [0132.664] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1278b800*, nNumberOfCharsToWrite=0x7b, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x1278b800*, lpNumberOfCharsWritten=0x1242957c*=0x7b) returned 1 [0132.665] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.665] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.665] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0132.665] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0132.666] WriteFile (in: hFile=0x27c, lpBuffer=0x127aa600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x127aa600*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0132.667] CloseHandle (hObject=0x27c) returned 1 [0132.667] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.667] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.668] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.668] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96e030, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x96e030, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.668] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96e030, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x96e030, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.668] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x96e030, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x96e030, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x972e50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.668] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 1 [0132.668] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.668] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.668] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.668] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.668] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T/imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0132.669] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0132.675] ReadFile (in: hFile=0x27c, lpBuffer=0x1278a300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x1278a300*, lpNumberOfBytesRead=0x12429938*=0xd, lpOverlapped=0x0) returned 1 [0132.676] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T/imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd)) returned 1 [0132.676] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.676] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.677] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.677] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/36USA68T/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.677] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0132.677] CloseHandle (hObject=0x120) returned 1 [0132.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.677] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.678] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.678] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0132.678] WriteFile (in: hFile=0x120, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0132.679] CloseHandle (hObject=0x120) returned 1 [0132.679] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.679] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.680] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.680] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x98dc00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x98dc00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x98dc00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x98dc00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x98dc00, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x98dc00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x990310, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 1 [0132.680] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.680] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.680] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.680] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.680] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME/www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.681] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0132.681] ReadFile (in: hFile=0x120, lpBuffer=0x1278ac00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x1278ac00*, lpNumberOfBytesRead=0x12429938*=0xd, lpOverlapped=0x0) returned 1 [0132.682] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME/www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd)) returned 1 [0132.682] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.682] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.683] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.683] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.683] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.683] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/3O75JDME/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.683] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0132.683] CloseHandle (hObject=0xdc) returned 1 [0132.683] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.683] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.683] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.683] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.683] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.683] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.684] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0132.684] CloseHandle (hObject=0xdc) returned 1 [0132.684] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.684] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.684] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.684] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0132.685] WriteFile (in: hFile=0xdc, lpBuffer=0x127a9300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x127a9300*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0132.686] CloseHandle (hObject=0xdc) returned 1 [0132.686] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.686] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.686] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.686] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x99c660, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x99c660, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.686] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x99c660, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x99c660, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.686] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x99c660, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x99c660, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9a1480, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.686] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.686] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.686] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.686] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.687] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.687] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.687] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.687] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.687] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.687] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/UV0DUWVB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.687] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0132.687] CloseHandle (hObject=0xdc) returned 1 [0132.687] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.687] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.688] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.688] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0132.688] WriteFile (in: hFile=0xdc, lpBuffer=0x127acc00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x127acc00*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0132.689] CloseHandle (hObject=0xdc) returned 1 [0132.689] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.689] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.689] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.690] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9a62a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9a62a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.690] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9a62a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9a62a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.690] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x9a62a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x9a62a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9a89b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.690] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 1 [0132.690] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.690] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.690] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.690] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.690] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09/www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.691] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0132.691] ReadFile (in: hFile=0xdc, lpBuffer=0x1278bf00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x1278bf00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0132.705] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09/www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344)) returned 1 [0132.705] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.705] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.705] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.705] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.705] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.705] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/DOMStore/VGMTOI09/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.706] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0132.706] CloseHandle (hObject=0x154) returned 1 [0132.706] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.706] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.706] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.707] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0132.707] WriteFile (in: hFile=0x154, lpBuffer=0x124d1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d1300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0132.708] CloseHandle (hObject=0x154) returned 1 [0132.708] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.708] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.708] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.708] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9d21c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9d21c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.709] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9d21c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9d21c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.709] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x9d21c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x9d21c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9d6fe0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.709] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.709] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.709] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.709] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.709] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.709] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.709] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.709] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.709] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.709] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Microsoft/Internet Explorer/Services/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.709] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0132.710] CloseHandle (hObject=0x154) returned 1 [0132.710] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.710] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.710] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.710] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0132.711] WriteFile (in: hFile=0x154, lpBuffer=0x124d3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d3900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0132.712] CloseHandle (hObject=0x154) returned 1 [0132.712] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.712] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.712] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.712] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x9dbe00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9dbe00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.712] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x9dbe00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9dbe00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.712] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x9dbe00, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x9dbe00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9e0c20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.712] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0132.713] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.713] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.713] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.713] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.713] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.713] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.714] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.714] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.714] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.714] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.714] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.714] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.714] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.714] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0132.714] CloseHandle (hObject=0x154) returned 1 [0132.714] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.715] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.715] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.716] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0132.717] WriteFile (in: hFile=0x154, lpBuffer=0x12490000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12490000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0132.718] CloseHandle (hObject=0x154) returned 1 [0132.718] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.718] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.718] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.718] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x9ea860, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9ea860, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.718] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x9ea860, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9ea860, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.718] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x9e8150, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x9e8150, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9ef680, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.718] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1 [0132.718] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0132.718] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1 [0132.718] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.718] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.718] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.719] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.719] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.719] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.720] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.720] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.720] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.720] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.720] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.720] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.720] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.720] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.720] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.720] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.721] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.721] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.721] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.721] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0132.721] CloseHandle (hObject=0x154) returned 1 [0132.721] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.721] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.721] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.722] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0132.722] WriteFile (in: hFile=0x154, lpBuffer=0x12492600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12492600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0132.723] CloseHandle (hObject=0x154) returned 1 [0132.723] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.723] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.723] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.723] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x9f1d90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9f1d90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x9f1d90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9f1d90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.723] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x9f1d90, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x9f1d90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x9f6bb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.724] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8e062, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.cab", cAlternateFileName="")) returned 1 [0132.724] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 1 [0132.724] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.724] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.724] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.724] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.724] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU/au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0132.725] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.725] ReadFile (in: hFile=0x154, lpBuffer=0x127c8300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x127c8300*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.727] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU/au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0132.729] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.729] ReadFile (in: hFile=0x178, lpBuffer=0x127c8400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x127c8400*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.731] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU/au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8e062)) returned 1 [0132.731] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU/au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0132.731] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0132.731] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124429e0 | out: pbBuffer=0x124429e0) returned 1 [0132.732] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2484 | out: pbBuffer=0x124e2484) returned 1 [0132.732] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127c8502 | out: pbBuffer=0x127c8502) returned 1 [0132.732] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127c855a | out: pbBuffer=0x127c855a) returned 1 [0132.734] SetEvent (hEvent=0xb8) returned 1 [0132.734] ReadFile (in: hFile=0x124, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x8e062, lpOverlapped=0x0) returned 1 [0132.752] SetEvent (hEvent=0x6c) returned 1 [0132.755] GetFileType (hFile=0x124) returned 0x1 [0132.755] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0132.755] WriteFile (in: hFile=0x124, lpBuffer=0x12662000*, nNumberOfBytesToWrite=0x8e062, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x12662000*, lpNumberOfBytesWritten=0x124298a8*=0x8e062, lpOverlapped=0x124298b4) returned 1 [0132.758] GetFileType (hFile=0x124) returned 0x1 [0132.758] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x8e062, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0132.758] ReadFile (in: hFile=0x124, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0132.758] CloseHandle (hObject=0x124) returned 1 [0132.758] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU/au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0132.758] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0132.759] WriteFile (in: hFile=0x124, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0132.759] CloseHandle (hObject=0x124) returned 1 [0132.759] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x1242957c*=0x5f) returned 1 [0132.759] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU/au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400)) returned 1 [0132.759] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.759] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.760] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.760] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.760] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.760] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/AU/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0132.760] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0132.760] CloseHandle (hObject=0x124) returned 1 [0132.760] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.760] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.761] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0132.763] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0132.763] WriteFile (in: hFile=0x124, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0132.764] CloseHandle (hObject=0x124) returned 1 [0132.764] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.765] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.765] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.765] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa58630, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa58630, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.765] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa58630, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa58630, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.765] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xa53810, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0xa53810, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa5ad40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.765] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1ea6db0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfec5c570, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0132.765] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0132.765] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1 [0132.765] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.765] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.765] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.765] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.765] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0132.766] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.766] ReadFile (in: hFile=0x124, lpBuffer=0x127c8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x127c8200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.768] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.768] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.768] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.768] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.768] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.769] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.769] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1ea6db0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfec5c570, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2cf)) returned 1 [0132.769] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.769] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.769] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.769] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.769] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.769] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0132.769] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0132.769] CloseHandle (hObject=0x27c) returned 1 [0132.769] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.770] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.770] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0132.770] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0132.770] WriteFile (in: hFile=0x27c, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0132.771] CloseHandle (hObject=0x27c) returned 1 [0132.771] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.772] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.772] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.772] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa697a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa697a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.772] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa697a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa697a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.772] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xa697a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0xa697a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa6beb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.772] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.772] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.772] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.772] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.772] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.772] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.773] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.773] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.773] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.773] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/security/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0132.773] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0132.773] CloseHandle (hObject=0x27c) returned 1 [0132.773] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.773] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.773] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0132.774] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0132.774] WriteFile (in: hFile=0x27c, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0132.775] CloseHandle (hObject=0x27c) returned 1 [0132.775] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.775] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.776] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.776] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa70cd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa70cd0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.776] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa70cd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa70cd0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.776] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xa70cd0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0xa70cd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa75af0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.776] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0132.776] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.776] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.776] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.776] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.776] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.776] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.777] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.777] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.777] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.777] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.777] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.777] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.777] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0132.777] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0132.777] CloseHandle (hObject=0x27c) returned 1 [0132.778] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.778] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.778] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0132.783] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0132.784] WriteFile (in: hFile=0x27c, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0132.785] CloseHandle (hObject=0x27c) returned 1 [0132.785] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.785] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.785] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.785] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa89370, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa89370, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.785] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa89370, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa89370, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.785] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xa7d020, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0xa7d020, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa8ba80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.785] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.786] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.786] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.786] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.786] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.786] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.786] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.786] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.786] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0132.786] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/Deployment/tmp/si/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0132.786] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0132.786] CloseHandle (hObject=0x27c) returned 1 [0132.787] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.787] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.787] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0132.791] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0132.791] WriteFile (in: hFile=0x27c, lpBuffer=0x124f3300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124f3300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0132.793] CloseHandle (hObject=0x27c) returned 1 [0132.793] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\@_read_to_recover_files_@.txt")) returned 0x2020 [0132.793] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0132.793] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.793] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa97dd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa97dd0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0132.793] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa97dd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa97dd0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.793] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xa8e190, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0xa8e190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa9cbf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0132.793] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0132.794] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 1 [0132.794] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.794] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0132.794] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0132.794] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0132.794] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45/Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0132.796] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.796] ReadFile (in: hFile=0x27c, lpBuffer=0x127c8700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x127c8700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.799] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45/jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0132.801] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0132.801] ReadFile (in: hFile=0x120, lpBuffer=0x127c8800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x127c8800*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0132.803] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45/Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a)) returned 1 [0132.803] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45/Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0132.803] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0132.804] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124426a0 | out: pbBuffer=0x124426a0) returned 1 [0132.805] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446384 | out: pbBuffer=0x12446384) returned 1 [0132.805] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127c8902 | out: pbBuffer=0x127c8902) returned 1 [0132.805] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127c89a9 | out: pbBuffer=0x127c89a9) returned 1 [0132.807] SetEvent (hEvent=0xb8) returned 1 [0132.807] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x800000, lpOverlapped=0x0) returned 1 [0132.993] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0133.088] SetEvent (hEvent=0xac) returned 1 [0133.088] SetEvent (hEvent=0x6c) returned 1 [0133.089] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0133.089] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0133.090] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0133.090] SetEvent (hEvent=0xb8) returned 1 [0133.090] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0133.136] GetFileType (hFile=0xdc) returned 0x1 [0133.136] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.136] WriteFile (in: hFile=0xdc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x124298a8*=0x800000, lpOverlapped=0x124298b4) returned 1 [0133.229] GetFileType (hFile=0xdc) returned 0x1 [0133.230] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.230] GetFileType (hFile=0xdc) returned 0x1 [0133.230] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.230] WriteFile (in: hFile=0xdc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x124298a8*=0x800000, lpOverlapped=0x124298b4) returned 1 [0133.320] GetFileType (hFile=0xdc) returned 0x1 [0133.320] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.320] GetFileType (hFile=0xdc) returned 0x1 [0133.320] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.320] WriteFile (in: hFile=0xdc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x124298a8*=0x800000, lpOverlapped=0x124298b4) returned 1 [0133.420] GetFileType (hFile=0xdc) returned 0x1 [0133.420] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.420] GetFileType (hFile=0xdc) returned 0x1 [0133.420] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.420] WriteFile (in: hFile=0xdc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x124298a8*=0x800000, lpOverlapped=0x124298b4) returned 1 [0133.524] GetFileType (hFile=0xdc) returned 0x1 [0133.525] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.525] GetFileType (hFile=0xdc) returned 0x1 [0133.525] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.525] WriteFile (in: hFile=0xdc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x124298a8*=0x800000, lpOverlapped=0x124298b4) returned 1 [0133.617] GetFileType (hFile=0xdc) returned 0x1 [0133.617] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.617] GetFileType (hFile=0xdc) returned 0x1 [0133.617] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.617] WriteFile (in: hFile=0xdc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x124298a8*=0x800000, lpOverlapped=0x124298b4) returned 1 [0133.709] GetFileType (hFile=0xdc) returned 0x1 [0133.709] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.709] GetFileType (hFile=0xdc) returned 0x1 [0133.709] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.709] WriteFile (in: hFile=0xdc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x124298a8*=0x800000, lpOverlapped=0x124298b4) returned 1 [0133.801] GetFileType (hFile=0xdc) returned 0x1 [0133.801] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.801] GetFileType (hFile=0xdc) returned 0x1 [0133.801] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.801] WriteFile (in: hFile=0xdc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x124298a8*=0x800000, lpOverlapped=0x124298b4) returned 1 [0133.892] GetFileType (hFile=0xdc) returned 0x1 [0133.892] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0133.892] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x800000, lpOverlapped=0x0) returned 1 [0134.156] SetEvent (hEvent=0x7c) returned 1 [0134.156] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0134.164] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0134.165] SetEvent (hEvent=0x7c) returned 1 [0134.165] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0134.219] GetFileType (hFile=0xdc) returned 0x1 [0134.219] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0134.219] WriteFile (in: hFile=0xdc, lpBuffer=0x1400a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1400a000*, lpNumberOfBytesWritten=0x124298a8*=0x800000, lpOverlapped=0x124298b4) returned 1 [0134.362] GetFileType (hFile=0xdc) returned 0x1 [0134.362] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0134.362] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x800000, lpOverlapped=0x0) returned 1 [0134.459] SetEvent (hEvent=0xb8) returned 1 [0134.459] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0134.487] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0134.487] SetEvent (hEvent=0xb8) returned 1 [0134.487] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0134.545] GetFileType (hFile=0xdc) returned 0x1 [0134.545] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0134.546] WriteFile (in: hFile=0xdc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x124298a8*=0x800000, lpOverlapped=0x124298b4) returned 1 [0134.670] GetFileType (hFile=0xdc) returned 0x1 [0134.670] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x1800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0134.670] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x2ac2a, lpOverlapped=0x0) returned 1 [0134.679] GetFileType (hFile=0xdc) returned 0x1 [0134.679] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0134.679] WriteFile (in: hFile=0xdc, lpBuffer=0x12780000*, nNumberOfBytesToWrite=0x2ac2a, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x12780000*, lpNumberOfBytesWritten=0x124298a8*=0x2ac2a, lpOverlapped=0x124298b4) returned 1 [0134.680] GetFileType (hFile=0xdc) returned 0x1 [0134.680] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x182ac2a, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0134.680] ReadFile (in: hFile=0xdc, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0134.680] CloseHandle (hObject=0xdc) returned 1 [0134.680] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45/Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0134.680] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0134.695] WriteFile (in: hFile=0xdc, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0134.695] CloseHandle (hObject=0xdc) returned 1 [0134.695] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x6b, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x1242957c*=0x6b) returned 1 [0134.701] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45/jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600)) returned 1 [0134.701] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0134.701] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0134.701] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0134.701] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0134.701] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0134.701] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/LocalLow/Sun/Java/jre1.7.0_45/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0134.701] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0134.709] CloseHandle (hObject=0xdc) returned 1 [0134.709] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0134.709] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0134.709] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0134.710] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0134.724] WriteFile (in: hFile=0xdc, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0134.725] CloseHandle (hObject=0xdc) returned 1 [0134.725] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\@_read_to_recover_files_@.txt")) returned 0x2020 [0134.725] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0134.725] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0134.725] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1c51f30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1c51f30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0134.725] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1c51f30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1c51f30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.725] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b93e680, ftCreationTime.dwHighDateTime=0x1d4cdfa, ftLastAccessTime.dwLowDateTime=0x438fa330, ftLastAccessTime.dwHighDateTime=0x1d4d594, ftLastWriteTime.dwLowDateTime=0x438fa330, ftLastWriteTime.dwHighDateTime=0x1d4d594, nFileSizeHigh=0x0, nFileSizeLow=0x5975, dwReserved0=0x0, dwReserved1=0x0, cFileName="-QCv7WqS5.m4a", cAlternateFileName="-QCV7W~1.M4A")) returned 1 [0134.725] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b55e0, ftCreationTime.dwHighDateTime=0x1d4cb6e, ftLastAccessTime.dwLowDateTime=0xd45928b0, ftLastAccessTime.dwHighDateTime=0x1d4d0e8, ftLastWriteTime.dwLowDateTime=0xd45928b0, ftLastWriteTime.dwHighDateTime=0x1d4d0e8, nFileSizeHigh=0x0, nFileSizeLow=0xe61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="04At0EU7zywSleLf5.xlsx", cAlternateFileName="04AT0E~1.XLS")) returned 1 [0134.725] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30f1c820, ftCreationTime.dwHighDateTime=0x1d4ccac, ftLastAccessTime.dwLowDateTime=0x12664fc0, ftLastAccessTime.dwHighDateTime=0x1d4c879, ftLastWriteTime.dwLowDateTime=0x12664fc0, ftLastWriteTime.dwHighDateTime=0x1d4c879, nFileSizeHigh=0x0, nFileSizeLow=0x469c, dwReserved0=0x0, dwReserved1=0x0, cFileName="5dK F4favnbdLGxZ.rtf", cAlternateFileName="5DKF4F~1.RTF")) returned 1 [0134.725] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad19fcc0, ftCreationTime.dwHighDateTime=0x1d4c53f, ftLastAccessTime.dwLowDateTime=0xcdfcead0, ftLastAccessTime.dwHighDateTime=0x1d4cb00, ftLastWriteTime.dwLowDateTime=0xcdfcead0, ftLastWriteTime.dwHighDateTime=0x1d4cb00, nFileSizeHigh=0x0, nFileSizeLow=0x234f, dwReserved0=0x0, dwReserved1=0x0, cFileName="5eNMeUMrObI.wav", cAlternateFileName="5ENMEU~1.WAV")) returned 1 [0134.725] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca0e0d10, ftCreationTime.dwHighDateTime=0x1d4cbb3, ftLastAccessTime.dwLowDateTime=0x4b3cb060, ftLastAccessTime.dwHighDateTime=0x1d4cf0d, ftLastWriteTime.dwLowDateTime=0x4b3cb060, ftLastWriteTime.dwHighDateTime=0x1d4cf0d, nFileSizeHigh=0x0, nFileSizeLow=0x9b76, dwReserved0=0x0, dwReserved1=0x0, cFileName="7PpN_qwAVlI9gVO3D3.wav", cAlternateFileName="7PPN_Q~1.WAV")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1c51f30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1c51f30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1c76920, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a95c190, ftCreationTime.dwHighDateTime=0x1d4d1f8, ftLastAccessTime.dwLowDateTime=0xcc7cbab0, ftLastAccessTime.dwHighDateTime=0x1d4c7a3, ftLastWriteTime.dwLowDateTime=0xcc7cbab0, ftLastWriteTime.dwHighDateTime=0x1d4c7a3, nFileSizeHigh=0x0, nFileSizeLow=0x17295, dwReserved0=0x0, dwReserved1=0x0, cFileName="AJa3N8BK.wav", cAlternateFileName="")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77827770, ftCreationTime.dwHighDateTime=0x1d4c843, ftLastAccessTime.dwLowDateTime=0x54823930, ftLastAccessTime.dwHighDateTime=0x1d4d0dc, ftLastWriteTime.dwLowDateTime=0x54823930, ftLastWriteTime.dwHighDateTime=0x1d4d0dc, nFileSizeHigh=0x0, nFileSizeLow=0x8e19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AvEXqQEtSFz.m4a", cAlternateFileName="AVEXQQ~1.M4A")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459e1fa0, ftCreationTime.dwHighDateTime=0x1d4d259, ftLastAccessTime.dwLowDateTime=0x530a6220, ftLastAccessTime.dwHighDateTime=0x1d4d501, ftLastWriteTime.dwLowDateTime=0x530a6220, ftLastWriteTime.dwHighDateTime=0x1d4d501, nFileSizeHigh=0x0, nFileSizeLow=0x948a, dwReserved0=0x0, dwReserved1=0x0, cFileName="B9yf_.m4a", cAlternateFileName="")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x485047f0, ftCreationTime.dwHighDateTime=0x1d4cf93, ftLastAccessTime.dwLowDateTime=0x88247ff0, ftLastAccessTime.dwHighDateTime=0x1d4c97f, ftLastWriteTime.dwLowDateTime=0x88247ff0, ftLastWriteTime.dwHighDateTime=0x1d4c97f, nFileSizeHigh=0x0, nFileSizeLow=0x919b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bb7rti-T 7OusysW.swf", cAlternateFileName="BB7RTI~1.SWF")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa9d98320, ftCreationTime.dwHighDateTime=0x1d4d3b6, ftLastAccessTime.dwLowDateTime=0xa1938500, ftLastAccessTime.dwHighDateTime=0x1d4c62b, ftLastWriteTime.dwLowDateTime=0xa1938500, ftLastWriteTime.dwHighDateTime=0x1d4c62b, nFileSizeHigh=0x0, nFileSizeLow=0x17b45, dwReserved0=0x0, dwReserved1=0x0, cFileName="bgJrCSmkUc1Roq2vVxN_.pptx", cAlternateFileName="BGJRCS~1.PPT")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f689850, ftCreationTime.dwHighDateTime=0x1d4ce74, ftLastAccessTime.dwLowDateTime=0x50a40400, ftLastAccessTime.dwHighDateTime=0x1d4c81d, ftLastWriteTime.dwLowDateTime=0x50a40400, ftLastWriteTime.dwHighDateTime=0x1d4c81d, nFileSizeHigh=0x0, nFileSizeLow=0x3f4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="d1T_U.png", cAlternateFileName="")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f36fd0, ftCreationTime.dwHighDateTime=0x1d4c7d4, ftLastAccessTime.dwLowDateTime=0xfa75e880, ftLastAccessTime.dwHighDateTime=0x1d4c6f7, ftLastWriteTime.dwLowDateTime=0xfa75e880, ftLastWriteTime.dwHighDateTime=0x1d4c6f7, nFileSizeHigh=0x0, nFileSizeLow=0x153ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dv37yfvj PyKcAHbu1H.jpg", cAlternateFileName="DV37YF~1.JPG")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9476f80, ftCreationTime.dwHighDateTime=0x1d4d024, ftLastAccessTime.dwLowDateTime=0xf732fd60, ftLastAccessTime.dwHighDateTime=0x1d4c806, ftLastWriteTime.dwLowDateTime=0xf732fd60, ftLastWriteTime.dwHighDateTime=0x1d4c806, nFileSizeHigh=0x0, nFileSizeLow=0x14628, dwReserved0=0x0, dwReserved1=0x0, cFileName="eohr3zKKFMjhq.docx", cAlternateFileName="EOHR3Z~1.DOC")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90f6f0c0, ftCreationTime.dwHighDateTime=0x1d4d192, ftLastAccessTime.dwLowDateTime=0x781164c0, ftLastAccessTime.dwHighDateTime=0x1d4d59b, ftLastWriteTime.dwLowDateTime=0x781164c0, ftLastWriteTime.dwHighDateTime=0x1d4d59b, nFileSizeHigh=0x0, nFileSizeLow=0x155d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="fIjLE.ods", cAlternateFileName="")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63cce5a0, ftCreationTime.dwHighDateTime=0x1d4d566, ftLastAccessTime.dwLowDateTime=0x42cc1b20, ftLastAccessTime.dwHighDateTime=0x1d4c538, ftLastWriteTime.dwLowDateTime=0x42cc1b20, ftLastWriteTime.dwHighDateTime=0x1d4c538, nFileSizeHigh=0x0, nFileSizeLow=0xbb16, dwReserved0=0x0, dwReserved1=0x0, cFileName="g-xY9LQ.m4a", cAlternateFileName="")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48efbd50, ftCreationTime.dwHighDateTime=0x1d4d135, ftLastAccessTime.dwLowDateTime=0x2fdeaae0, ftLastAccessTime.dwHighDateTime=0x1d4d114, ftLastWriteTime.dwLowDateTime=0x2fdeaae0, ftLastWriteTime.dwHighDateTime=0x1d4d114, nFileSizeHigh=0x0, nFileSizeLow=0xf464, dwReserved0=0x0, dwReserved1=0x0, cFileName="H0Izx8nD.swf", cAlternateFileName="")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x73798950, ftCreationTime.dwHighDateTime=0x1d4cc28, ftLastAccessTime.dwLowDateTime=0x4ad67a80, ftLastAccessTime.dwHighDateTime=0x1d4d13c, ftLastWriteTime.dwLowDateTime=0x4ad67a80, ftLastWriteTime.dwHighDateTime=0x1d4d13c, nFileSizeHigh=0x0, nFileSizeLow=0x5edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="h6DRaJyxlSr4I.avi", cAlternateFileName="H6DRAJ~1.AVI")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x22381650, ftCreationTime.dwHighDateTime=0x1d4ce9f, ftLastAccessTime.dwLowDateTime=0x9176c830, ftLastAccessTime.dwHighDateTime=0x1d4c757, ftLastWriteTime.dwLowDateTime=0x9176c830, ftLastWriteTime.dwHighDateTime=0x1d4c757, nFileSizeHigh=0x0, nFileSizeLow=0xd0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hhL9fj9N.m4a", cAlternateFileName="")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3fbea3a0, ftCreationTime.dwHighDateTime=0x1d4c8d3, ftLastAccessTime.dwLowDateTime=0x578eb630, ftLastAccessTime.dwHighDateTime=0x1d4c5b5, ftLastWriteTime.dwLowDateTime=0x578eb630, ftLastWriteTime.dwHighDateTime=0x1d4c5b5, nFileSizeHigh=0x0, nFileSizeLow=0x23ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="IcNU.pptx", cAlternateFileName="ICNU~1.PPT")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea4a5630, ftCreationTime.dwHighDateTime=0x1d4d52a, ftLastAccessTime.dwLowDateTime=0x263fb2f0, ftLastAccessTime.dwHighDateTime=0x1d4ce3e, ftLastWriteTime.dwLowDateTime=0x263fb2f0, ftLastWriteTime.dwHighDateTime=0x1d4ce3e, nFileSizeHigh=0x0, nFileSizeLow=0xa67a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kaz43j9ZpivhoK.bmp", cAlternateFileName="KAZ43J~1.BMP")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7b41cb0, ftCreationTime.dwHighDateTime=0x1d4d53e, ftLastAccessTime.dwLowDateTime=0x476b1a60, ftLastAccessTime.dwHighDateTime=0x1d4d2fc, ftLastWriteTime.dwLowDateTime=0x476b1a60, ftLastWriteTime.dwHighDateTime=0x1d4d2fc, nFileSizeHigh=0x0, nFileSizeLow=0x2c3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="lYdw_c6ujU9hekwMzKxZ.ots", cAlternateFileName="LYDW_C~1.OTS")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcffca500, ftCreationTime.dwHighDateTime=0x1d4d35c, ftLastAccessTime.dwLowDateTime=0xb2b37130, ftLastAccessTime.dwHighDateTime=0x1d4c845, ftLastWriteTime.dwLowDateTime=0xb2b37130, ftLastWriteTime.dwHighDateTime=0x1d4c845, nFileSizeHigh=0x0, nFileSizeLow=0x7b30, dwReserved0=0x0, dwReserved1=0x0, cFileName="mghf7Ph6XAtyL.avi", cAlternateFileName="MGHF7P~1.AVI")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4921c380, ftCreationTime.dwHighDateTime=0x1d4cb87, ftLastAccessTime.dwLowDateTime=0xdf2b3850, ftLastAccessTime.dwHighDateTime=0x1d4d390, ftLastWriteTime.dwLowDateTime=0xdf2b3850, ftLastWriteTime.dwHighDateTime=0x1d4d390, nFileSizeHigh=0x0, nFileSizeLow=0xa5fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxSz.mkv", cAlternateFileName="")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55ce7920, ftCreationTime.dwHighDateTime=0x1d4cf38, ftLastAccessTime.dwLowDateTime=0x2c1e75a0, ftLastAccessTime.dwHighDateTime=0x1d4cb21, ftLastWriteTime.dwLowDateTime=0x2c1e75a0, ftLastWriteTime.dwHighDateTime=0x1d4cb21, nFileSizeHigh=0x0, nFileSizeLow=0x4cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="M_VKKEHCyvkgTM.flv", cAlternateFileName="M_VKKE~1.FLV")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81882230, ftCreationTime.dwHighDateTime=0x1d4c931, ftLastAccessTime.dwLowDateTime=0x306022b0, ftLastAccessTime.dwHighDateTime=0x1d4c65a, ftLastWriteTime.dwLowDateTime=0x306022b0, ftLastWriteTime.dwHighDateTime=0x1d4c65a, nFileSizeHigh=0x0, nFileSizeLow=0x61e, dwReserved0=0x0, dwReserved1=0x0, cFileName="na V3QV3XM.mp3", cAlternateFileName="NAV3QV~1.MP3")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1ec1b0, ftCreationTime.dwHighDateTime=0x1d4d40f, ftLastAccessTime.dwLowDateTime=0x8937fed0, ftLastAccessTime.dwHighDateTime=0x1d4c7ea, ftLastWriteTime.dwLowDateTime=0x8937fed0, ftLastWriteTime.dwHighDateTime=0x1d4c7ea, nFileSizeHigh=0x0, nFileSizeLow=0x11eeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oo2Q-jg42k9M.m4a", cAlternateFileName="OO2Q-J~1.M4A")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5103d740, ftCreationTime.dwHighDateTime=0x1d4cf70, ftLastAccessTime.dwLowDateTime=0x1a4cbfb0, ftLastAccessTime.dwHighDateTime=0x1d4cd67, ftLastWriteTime.dwLowDateTime=0x1a4cbfb0, ftLastWriteTime.dwHighDateTime=0x1d4cd67, nFileSizeHigh=0x0, nFileSizeLow=0x927c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PP6jPt9JMM.jpg", cAlternateFileName="PP6JPT~1.JPG")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44c24ae0, ftCreationTime.dwHighDateTime=0x1d4ce01, ftLastAccessTime.dwLowDateTime=0x2f83fb40, ftLastAccessTime.dwHighDateTime=0x1d4d2d6, ftLastWriteTime.dwLowDateTime=0x2f83fb40, ftLastWriteTime.dwHighDateTime=0x1d4d2d6, nFileSizeHigh=0x0, nFileSizeLow=0x5b9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q0EaU-pYxFnNwI.avi", cAlternateFileName="Q0EAU-~1.AVI")) returned 1 [0134.726] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b8e9660, ftCreationTime.dwHighDateTime=0x1d4c9dc, ftLastAccessTime.dwLowDateTime=0xfe733130, ftLastAccessTime.dwHighDateTime=0x1d4d355, ftLastWriteTime.dwLowDateTime=0xfe733130, ftLastWriteTime.dwHighDateTime=0x1d4d355, nFileSizeHigh=0x0, nFileSizeLow=0x16ea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="q1dK.avi", cAlternateFileName="")) returned 1 [0134.727] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92228420, ftCreationTime.dwHighDateTime=0x1d4c8ad, ftLastAccessTime.dwLowDateTime=0xbc8ddf30, ftLastAccessTime.dwHighDateTime=0x1d4c820, ftLastWriteTime.dwLowDateTime=0xbc8ddf30, ftLastWriteTime.dwHighDateTime=0x1d4c820, nFileSizeHigh=0x0, nFileSizeLow=0x72e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="rWeh1ehLy1Y.mp4", cAlternateFileName="RWEH1E~1.MP4")) returned 1 [0134.727] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed03810, ftCreationTime.dwHighDateTime=0x1d4cd58, ftLastAccessTime.dwLowDateTime=0x25d18c70, ftLastAccessTime.dwHighDateTime=0x1d4d02e, ftLastWriteTime.dwLowDateTime=0x25d18c70, ftLastWriteTime.dwHighDateTime=0x1d4d02e, nFileSizeHigh=0x0, nFileSizeLow=0x7c28, dwReserved0=0x0, dwReserved1=0x0, cFileName="SDSnkbK5.wav", cAlternateFileName="")) returned 1 [0134.727] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f084090, ftCreationTime.dwHighDateTime=0x1d4d055, ftLastAccessTime.dwLowDateTime=0xb94ab7e0, ftLastAccessTime.dwHighDateTime=0x1d4cb9e, ftLastWriteTime.dwLowDateTime=0xb94ab7e0, ftLastWriteTime.dwHighDateTime=0x1d4cb9e, nFileSizeHigh=0x0, nFileSizeLow=0x14ba5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UDpgafGVfgkzOCjYtG7.rtf", cAlternateFileName="UDPGAF~1.RTF")) returned 1 [0134.727] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf74b91f0, ftCreationTime.dwHighDateTime=0x1d4cdfa, ftLastAccessTime.dwLowDateTime=0xa95fd470, ftLastAccessTime.dwHighDateTime=0x1d4c930, ftLastWriteTime.dwLowDateTime=0xa95fd470, ftLastWriteTime.dwHighDateTime=0x1d4c930, nFileSizeHigh=0x0, nFileSizeLow=0x1284e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UdYEwbii2LgwNXNHUv_.jpg", cAlternateFileName="UDYEWB~1.JPG")) returned 1 [0134.727] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf00ca300, ftCreationTime.dwHighDateTime=0x1d4cea6, ftLastAccessTime.dwLowDateTime=0x1d303f0, ftLastAccessTime.dwHighDateTime=0x1d4c7a3, ftLastWriteTime.dwLowDateTime=0x1d303f0, ftLastWriteTime.dwHighDateTime=0x1d4c7a3, nFileSizeHigh=0x0, nFileSizeLow=0x1258e, dwReserved0=0x0, dwReserved1=0x0, cFileName="vQZpYW4e22Mm.ods", cAlternateFileName="VQZPYW~1.ODS")) returned 1 [0134.727] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x801c5090, ftCreationTime.dwHighDateTime=0x1d4c799, ftLastAccessTime.dwLowDateTime=0x14c6d270, ftLastAccessTime.dwHighDateTime=0x1d4d455, ftLastWriteTime.dwLowDateTime=0x14c6d270, ftLastWriteTime.dwHighDateTime=0x1d4d455, nFileSizeHigh=0x0, nFileSizeLow=0x10abf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WnSo.gif", cAlternateFileName="")) returned 1 [0134.727] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd09a000, ftCreationTime.dwHighDateTime=0x1d4d051, ftLastAccessTime.dwLowDateTime=0xc70004c0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0xc70004c0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0xf8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wun4NyNH-z.rtf", cAlternateFileName="WUN4NY~1.RTF")) returned 1 [0134.727] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa4af250, ftCreationTime.dwHighDateTime=0x1d4d3a5, ftLastAccessTime.dwLowDateTime=0x301048a0, ftLastAccessTime.dwHighDateTime=0x1d4c905, ftLastWriteTime.dwLowDateTime=0x301048a0, ftLastWriteTime.dwHighDateTime=0x1d4c905, nFileSizeHigh=0x0, nFileSizeLow=0x143e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="yiJUOPMQsD N.ots", cAlternateFileName="YIJUOP~1.OTS")) returned 1 [0134.727] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe23c82c0, ftCreationTime.dwHighDateTime=0x1d4cb47, ftLastAccessTime.dwLowDateTime=0x2378e610, ftLastAccessTime.dwHighDateTime=0x1d4d305, ftLastWriteTime.dwLowDateTime=0x2378e610, ftLastWriteTime.dwHighDateTime=0x1d4d305, nFileSizeHigh=0x0, nFileSizeLow=0x6d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="ytwg.mp3", cAlternateFileName="")) returned 1 [0134.727] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84d12ac0, ftCreationTime.dwHighDateTime=0x1d4cda7, ftLastAccessTime.dwLowDateTime=0x4408fc60, ftLastAccessTime.dwHighDateTime=0x1d4d3e8, ftLastWriteTime.dwLowDateTime=0x4408fc60, ftLastWriteTime.dwHighDateTime=0x1d4d3e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="_zvQWRzLV.jpg", cAlternateFileName="_ZVQWR~1.JPG")) returned 1 [0134.727] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.727] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0134.727] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/-QCv7WqS5.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\-qcv7wqs5.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0134.727] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.733] ReadFile (in: hFile=0xdc, lpBuffer=0x127c8300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c8300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.733] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/04At0EU7zywSleLf5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\04at0eu7zywslelf5.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0134.734] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.742] ReadFile (in: hFile=0x124, lpBuffer=0x127c8400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c8400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.742] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/5dK F4favnbdLGxZ.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5dk f4favnbdlgxz.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0134.743] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.751] ReadFile (in: hFile=0x27c, lpBuffer=0x127c8500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c8500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.751] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/5eNMeUMrObI.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5enmeumrobi.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0134.752] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.753] ReadFile (in: hFile=0x120, lpBuffer=0x127c8700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c8700*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.754] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/7PpN_qwAVlI9gVO3D3.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\7ppn_qwavli9gvo3d3.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0134.754] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.760] ReadFile (in: hFile=0x154, lpBuffer=0x127c8800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c8800*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.761] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0134.761] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0134.761] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/AJa3N8BK.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aja3n8bk.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0134.761] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.775] ReadFile (in: hFile=0x178, lpBuffer=0x127c8a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c8a00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.775] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0134.776] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0134.795] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0134.796] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/AvEXqQEtSFz.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\avexqqetsfz.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0134.796] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.804] ReadFile (in: hFile=0x18c, lpBuffer=0x127c8c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c8c00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.805] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/B9yf_.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b9yf_.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0134.805] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.808] ReadFile (in: hFile=0x148, lpBuffer=0x127c8d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c8d00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.809] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Bb7rti-T 7OusysW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bb7rti-t 7ousysw.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0134.809] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.810] ReadFile (in: hFile=0x15c, lpBuffer=0x127c8e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c8e00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.810] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Dv37yfvj PyKcAHbu1H.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\dv37yfvj pykcahbu1h.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0134.810] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.811] ReadFile (in: hFile=0x10c, lpBuffer=0x127c8f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c8f00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.811] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/H0Izx8nD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\h0izx8nd.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0134.811] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.812] ReadFile (in: hFile=0xc0, lpBuffer=0x127c9000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c9000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/IcNU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\icnu.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0134.812] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.813] ReadFile (in: hFile=0x180, lpBuffer=0x127c9100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c9100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.813] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0134.813] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0134.814] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0134.814] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Kaz43j9ZpivhoK.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\kaz43j9zpivhok.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0134.814] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.814] ReadFile (in: hFile=0x19c, lpBuffer=0x127c9200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c9200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.815] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/M_VKKEHCyvkgTM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\m_vkkehcyvkgtm.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0134.815] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.815] ReadFile (in: hFile=0x110, lpBuffer=0x127c9300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c9300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.816] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0134.816] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0134.816] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0134.817] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0134.817] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0134.817] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0134.817] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0134.817] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0134.817] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0134.817] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Oo2Q-jg42k9M.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\oo2q-jg42k9m.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128 [0134.817] GetConsoleMode (in: hConsoleHandle=0x128, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.818] ReadFile (in: hFile=0x128, lpBuffer=0x127c9500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c9500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.818] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/PP6jPt9JMM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\pp6jpt9jmm.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0134.818] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.819] ReadFile (in: hFile=0x12c, lpBuffer=0x127c9700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c9700*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.819] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Q0EaU-pYxFnNwI.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q0eau-pyxfnnwi.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0134.819] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.820] ReadFile (in: hFile=0x198, lpBuffer=0x127c9800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c9800*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.820] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/SDSnkbK5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sdsnkbk5.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0134.821] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.821] ReadFile (in: hFile=0x168, lpBuffer=0x127c9900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c9900*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.821] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/UDpgafGVfgkzOCjYtG7.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\udpgafgvfgkzocjytg7.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0134.822] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.822] ReadFile (in: hFile=0xd0, lpBuffer=0x127c9a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c9a00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.822] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/UdYEwbii2LgwNXNHUv_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\udyewbii2lgwnxnhuv_.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0134.823] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.823] ReadFile (in: hFile=0x144, lpBuffer=0x127c9b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c9b00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.823] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/WnSo.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wnso.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0134.824] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.824] ReadFile (in: hFile=0x16c, lpBuffer=0x127c9c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c9c00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.825] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/_zvQWRzLV.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\_zvqwrzlv.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0134.825] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.825] ReadFile (in: hFile=0xc8, lpBuffer=0x127c9d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c9d00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.826] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/bgJrCSmkUc1Roq2vVxN_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bgjrcsmkuc1roq2vvxn_.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0134.826] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.826] ReadFile (in: hFile=0x118, lpBuffer=0x127c9e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c9e00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.827] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/d1T_U.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\d1t_u.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0134.827] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.827] ReadFile (in: hFile=0x17c, lpBuffer=0x127c9f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127c9f00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.828] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/eohr3zKKFMjhq.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\eohr3zkkfmjhq.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0134.828] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.828] ReadFile (in: hFile=0xbc, lpBuffer=0x124b8000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.829] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/fIjLE.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fijle.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0134.829] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.829] ReadFile (in: hFile=0xe8, lpBuffer=0x124b8100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.830] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/g-xY9LQ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\g-xy9lq.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0134.830] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.830] ReadFile (in: hFile=0x114, lpBuffer=0x124b8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.831] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/h6DRaJyxlSr4I.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\h6drajyxlsr4i.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0134.831] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.831] ReadFile (in: hFile=0x160, lpBuffer=0x124b8400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.832] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/hhL9fj9N.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hhl9fj9n.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0134.832] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.832] ReadFile (in: hFile=0x164, lpBuffer=0x124b8500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.833] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/lYdw_c6ujU9hekwMzKxZ.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lydw_c6uju9hekwmzkxz.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0134.833] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.833] ReadFile (in: hFile=0x158, lpBuffer=0x124b8600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.834] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/mghf7Ph6XAtyL.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mghf7ph6xatyl.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0134.834] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.834] ReadFile (in: hFile=0xf8, lpBuffer=0x124b8800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8800*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.835] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/mxSz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mxsz.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0134.835] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.835] ReadFile (in: hFile=0x130, lpBuffer=0x124b8900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8900*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.836] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/na V3QV3XM.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\na v3qv3xm.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0134.836] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.836] ReadFile (in: hFile=0x134, lpBuffer=0x124b8b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8b00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.837] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/q1dK.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q1dk.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0134.837] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.838] ReadFile (in: hFile=0xfc, lpBuffer=0x124b8c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8c00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.838] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/rWeh1ehLy1Y.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\rweh1ehly1y.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0134.839] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.839] ReadFile (in: hFile=0x104, lpBuffer=0x124b8e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b8e00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/vQZpYW4e22Mm.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vqzpyw4e22mm.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0134.840] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.840] ReadFile (in: hFile=0xf0, lpBuffer=0x124b9000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b9000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.841] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/wun4NyNH-z.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wun4nynh-z.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0134.841] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.842] ReadFile (in: hFile=0xe4, lpBuffer=0x124b9200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b9200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.843] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/yiJUOPMQsD N.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yijuopmqsd n.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0134.843] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.843] ReadFile (in: hFile=0x138, lpBuffer=0x124b9400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b9400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.844] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/ytwg.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ytwg.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0134.844] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0134.845] ReadFile (in: hFile=0x108, lpBuffer=0x124b9500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b9500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0134.845] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/-QCv7WqS5.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\-qcv7wqs5.m4a"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b93e680, ftCreationTime.dwHighDateTime=0x1d4cdfa, ftLastAccessTime.dwLowDateTime=0x438fa330, ftLastAccessTime.dwHighDateTime=0x1d4d594, ftLastWriteTime.dwLowDateTime=0x438fa330, ftLastWriteTime.dwHighDateTime=0x1d4d594, nFileSizeHigh=0x0, nFileSizeLow=0x5975)) returned 1 [0134.846] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/04At0EU7zywSleLf5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\04at0eu7zywslelf5.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b55e0, ftCreationTime.dwHighDateTime=0x1d4cb6e, ftLastAccessTime.dwLowDateTime=0xd45928b0, ftLastAccessTime.dwHighDateTime=0x1d4d0e8, ftLastWriteTime.dwLowDateTime=0xd45928b0, ftLastWriteTime.dwHighDateTime=0x1d4d0e8, nFileSizeHigh=0x0, nFileSizeLow=0xe61c)) returned 1 [0134.846] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/04At0EU7zywSleLf5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\04at0eu7zywslelf5.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.846] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.846] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442600 | out: pbBuffer=0x12442600) returned 1 [0134.848] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b9602 | out: pbBuffer=0x124b9602) returned 1 [0134.848] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b963e | out: pbBuffer=0x124b963e) returned 1 [0134.848] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b96d7 | out: pbBuffer=0x124b96d7) returned 1 [0134.848] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b96de | out: pbBuffer=0x124b96de) returned 1 [0134.849] SetEvent (hEvent=0x7c) returned 1 [0134.849] ReadFile (in: hFile=0x190, lpBuffer=0x1400a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1400a000*, lpNumberOfBytesRead=0x12429abc*=0xe61c, lpOverlapped=0x0) returned 1 [0134.851] GetFileType (hFile=0x190) returned 0x1 [0134.851] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.851] WriteFile (in: hFile=0x190, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0xe61c, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x12429aa0*=0xe61c, lpOverlapped=0x12429aac) returned 1 [0134.851] GetFileType (hFile=0x190) returned 0x1 [0134.851] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xe61c, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.851] ReadFile (in: hFile=0x190, lpBuffer=0x1400a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1400a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.851] CloseHandle (hObject=0x190) returned 1 [0134.851] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/04At0EU7zywSleLf5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\04at0eu7zywslelf5.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.851] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.852] WriteFile (in: hFile=0x190, lpBuffer=0x1247d440*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x1247d440*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.852] CloseHandle (hObject=0x190) returned 1 [0134.852] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1244c1a0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1244c1a0*, lpNumberOfCharsWritten=0x12429774*=0x62) returned 1 [0134.852] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/5dK F4favnbdLGxZ.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5dk f4favnbdlgxz.rtf"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30f1c820, ftCreationTime.dwHighDateTime=0x1d4ccac, ftLastAccessTime.dwLowDateTime=0x12664fc0, ftLastAccessTime.dwHighDateTime=0x1d4c879, ftLastWriteTime.dwLowDateTime=0x12664fc0, ftLastWriteTime.dwHighDateTime=0x1d4c879, nFileSizeHigh=0x0, nFileSizeLow=0x469c)) returned 1 [0134.852] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/5dK F4favnbdLGxZ.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5dk f4favnbdlgxz.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.853] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.853] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1 [0134.854] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2074 | out: pbBuffer=0x124e2074) returned 1 [0134.854] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127c8002 | out: pbBuffer=0x127c8002) returned 1 [0134.855] CloseHandle (hObject=0x134) returned 1 [0134.855] CloseHandle (hObject=0x130) returned 1 [0134.855] CloseHandle (hObject=0xf8) returned 1 [0134.855] CloseHandle (hObject=0x158) returned 1 [0134.855] CloseHandle (hObject=0x164) returned 1 [0134.855] CloseHandle (hObject=0x160) returned 1 [0134.855] CloseHandle (hObject=0x114) returned 1 [0134.855] CloseHandle (hObject=0xe8) returned 1 [0134.855] CloseHandle (hObject=0xbc) returned 1 [0134.855] CloseHandle (hObject=0x17c) returned 1 [0134.855] CloseHandle (hObject=0x118) returned 1 [0134.855] CloseHandle (hObject=0xc8) returned 1 [0134.856] CloseHandle (hObject=0x16c) returned 1 [0134.856] CloseHandle (hObject=0x144) returned 1 [0134.856] CloseHandle (hObject=0xd0) returned 1 [0134.856] CloseHandle (hObject=0x168) returned 1 [0134.856] CloseHandle (hObject=0x198) returned 1 [0134.856] CloseHandle (hObject=0x12c) returned 1 [0134.856] CloseHandle (hObject=0x128) returned 1 [0134.856] CloseHandle (hObject=0x110) returned 1 [0134.856] CloseHandle (hObject=0x19c) returned 1 [0134.856] CloseHandle (hObject=0x180) returned 1 [0134.856] CloseHandle (hObject=0xc0) returned 1 [0134.856] CloseHandle (hObject=0x10c) returned 1 [0134.856] CloseHandle (hObject=0x15c) returned 1 [0134.856] CloseHandle (hObject=0x148) returned 1 [0134.856] CloseHandle (hObject=0x18c) returned 1 [0134.857] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0134.859] CloseHandle (hObject=0x178) returned 1 [0134.859] CloseHandle (hObject=0x154) returned 1 [0134.860] CloseHandle (hObject=0x120) returned 1 [0134.860] CloseHandle (hObject=0x27c) returned 1 [0134.860] CloseHandle (hObject=0x124) returned 1 [0134.860] CloseHandle (hObject=0xdc) returned 1 [0134.860] CloseHandle (hObject=0x108) returned 1 [0134.860] CloseHandle (hObject=0x138) returned 1 [0134.860] CloseHandle (hObject=0xe4) returned 1 [0134.860] CloseHandle (hObject=0xf0) returned 1 [0134.860] CloseHandle (hObject=0x104) returned 1 [0134.860] CloseHandle (hObject=0xfc) returned 1 [0134.860] SetEvent (hEvent=0xa8) returned 1 [0134.860] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.350] SetEvent (hEvent=0xa8) returned 1 [0135.350] SetEvent (hEvent=0xb8) returned 1 [0135.350] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.354] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.455] SetEvent (hEvent=0xb8) returned 1 [0135.455] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.456] SetEvent (hEvent=0xb8) returned 1 [0135.457] SetEvent (hEvent=0xa8) returned 1 [0135.457] CloseHandle (hObject=0x148) returned 1 [0135.457] SwitchToThread () returned 1 [0135.460] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.547] SetEvent (hEvent=0xa8) returned 1 [0135.547] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0135.549] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.549] SetEvent (hEvent=0xa8) returned 1 [0135.549] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0135.553] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.643] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.778] SetEvent (hEvent=0xb8) returned 1 [0135.778] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.779] SetEvent (hEvent=0xb8) returned 1 [0135.779] SetEvent (hEvent=0xa8) returned 1 [0135.779] CloseHandle (hObject=0xd0) returned 1 [0135.779] CloseHandle (hObject=0x168) returned 1 [0135.779] CloseHandle (hObject=0x198) returned 1 [0135.779] CloseHandle (hObject=0x12c) returned 1 [0135.779] CloseHandle (hObject=0x128) returned 1 [0135.779] CloseHandle (hObject=0x110) returned 1 [0135.779] CloseHandle (hObject=0x19c) returned 1 [0135.780] CloseHandle (hObject=0x180) returned 1 [0135.780] CloseHandle (hObject=0xc0) returned 1 [0135.780] CloseHandle (hObject=0x10c) returned 1 [0135.780] CloseHandle (hObject=0x18c) returned 1 [0135.780] CloseHandle (hObject=0x154) returned 1 [0135.780] CloseHandle (hObject=0xe4) returned 1 [0135.780] CloseHandle (hObject=0xf0) returned 1 [0135.780] CloseHandle (hObject=0x104) returned 1 [0135.780] CloseHandle (hObject=0xfc) returned 1 [0135.780] CloseHandle (hObject=0x190) returned 1 [0135.780] CloseHandle (hObject=0x15c) returned 1 [0135.780] CloseHandle (hObject=0x27c) returned 1 [0135.780] CloseHandle (hObject=0x120) returned 1 [0135.780] CloseHandle (hObject=0x178) returned 1 [0135.780] CloseHandle (hObject=0x124) returned 1 [0135.780] CloseHandle (hObject=0xdc) returned 1 [0135.780] CloseHandle (hObject=0x108) returned 1 [0135.780] CloseHandle (hObject=0x138) returned 1 [0135.780] CloseHandle (hObject=0x148) returned 1 [0135.780] CloseHandle (hObject=0x144) returned 1 [0135.781] SwitchToThread () returned 1 [0135.783] SetEvent (hEvent=0x7c) returned 1 [0135.783] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.785] SetEvent (hEvent=0xa8) returned 1 [0135.785] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0135.789] SetEvent (hEvent=0xa8) returned 1 [0135.789] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0135.792] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0135.792] SetEvent (hEvent=0x7c) returned 1 [0135.792] ReadFile (in: hFile=0x16c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x80000, lpOverlapped=0x0) returned 1 [0135.802] GetFileType (hFile=0x16c) returned 0x1 [0135.802] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.802] WriteFile (in: hFile=0x16c, lpBuffer=0x12662000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x12662000*, lpNumberOfBytesWritten=0x12429800*=0x80000, lpOverlapped=0x1242980c) returned 1 [0135.804] GetFileType (hFile=0x16c) returned 0x1 [0135.804] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x80000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.804] ReadFile (in: hFile=0x16c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0135.804] CloseHandle (hObject=0x16c) returned 1 [0135.804] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.804] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.805] WriteFile (in: hFile=0x16c, lpBuffer=0x124c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x124c0240*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0135.806] CloseHandle (hObject=0x16c) returned 1 [0135.806] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12576000*, nNumberOfCharsToWrite=0x84, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x12576000*, lpNumberOfCharsWritten=0x124294d4*=0x84) returned 1 [0135.806] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc374ed0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbc374ed0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbc555e20, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0135.806] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.807] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.807] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0135.808] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0135.808] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12772002 | out: pbBuffer=0x12772002) returned 1 [0135.809] SwitchToThread () returned 1 [0135.810] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.813] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.814] SetEvent (hEvent=0xa8) returned 1 [0135.814] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.817] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.819] SetEvent (hEvent=0x7c) returned 1 [0135.820] SetEvent (hEvent=0xb8) returned 1 [0135.820] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.829] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.833] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.833] SetEvent (hEvent=0xb8) returned 1 [0135.833] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.836] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.837] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.838] SetEvent (hEvent=0xa8) returned 1 [0135.838] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.841] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.843] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.844] SetEvent (hEvent=0xb8) returned 1 [0135.844] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.847] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0135.944] SetEvent (hEvent=0xa8) returned 1 [0135.944] SetEvent (hEvent=0x7c) returned 1 [0135.944] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.379] SetEvent (hEvent=0xb8) returned 1 [0137.379] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.385] SetEvent (hEvent=0xb8) returned 1 [0137.385] SetEvent (hEvent=0x7c) returned 1 [0137.385] SwitchToThread () returned 1 [0137.386] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.391] SetEvent (hEvent=0x7c) returned 1 [0137.391] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.392] SetEvent (hEvent=0x7c) returned 1 [0137.392] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.397] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.432] SetEvent (hEvent=0x7c) returned 1 [0137.432] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.437] SetEvent (hEvent=0x7c) returned 1 [0137.437] SwitchToThread () returned 1 [0137.437] SetEvent (hEvent=0x7c) returned 1 [0137.437] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.451] SetEvent (hEvent=0xa8) returned 1 [0137.451] SetEvent (hEvent=0xb8) returned 1 [0137.452] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.453] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.457] SetEvent (hEvent=0xa8) returned 1 [0137.457] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.459] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.581] SwitchToThread () returned 1 [0137.598] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.679] SetEvent (hEvent=0xb8) returned 1 [0137.679] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.682] SetEvent (hEvent=0xb8) returned 1 [0137.682] SwitchToThread () returned 1 [0137.683] SetEvent (hEvent=0xb8) returned 1 [0137.683] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.685] SetEvent (hEvent=0xa8) returned 1 [0137.685] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.686] SetEvent (hEvent=0xa8) returned 1 [0137.686] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.689] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.689] SetEvent (hEvent=0xa8) returned 1 [0137.689] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x13f7b, lpOverlapped=0x0) returned 1 [0137.690] GetFileType (hFile=0x17c) returned 0x1 [0137.690] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.690] WriteFile (in: hFile=0x17c, lpBuffer=0x12596000*, nNumberOfBytesToWrite=0x13f7b, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12596000*, lpNumberOfBytesWritten=0x12429b48*=0x13f7b, lpOverlapped=0x12429b54) returned 1 [0137.690] GetFileType (hFile=0x17c) returned 0x1 [0137.690] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x13f7b, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.690] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.691] CloseHandle (hObject=0x17c) returned 1 [0137.691] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/H56i l8jwNvN dqAYS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h56i l8jwnvn dqays.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.691] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.691] WriteFile (in: hFile=0x17c, lpBuffer=0x1249a240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1249a240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.692] CloseHandle (hObject=0x17c) returned 1 [0137.692] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x5a, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x1242981c*=0x5a) returned 1 [0137.692] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/N399TRFUCOINN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n399trfucoinn.wav"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b35c90, ftCreationTime.dwHighDateTime=0x1d4cc66, ftLastAccessTime.dwLowDateTime=0x5118aac0, ftLastAccessTime.dwHighDateTime=0x1d4d381, ftLastWriteTime.dwLowDateTime=0x5118aac0, ftLastWriteTime.dwHighDateTime=0x1d4d381, nFileSizeHigh=0x0, nFileSizeLow=0xbaca)) returned 1 [0137.692] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/N399TRFUCOINN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n399trfucoinn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.693] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.693] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0137.694] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0137.695] SwitchToThread () returned 1 [0137.695] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.698] SetEvent (hEvent=0xb8) returned 1 [0137.698] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.700] SetEvent (hEvent=0xb8) returned 1 [0137.701] SwitchToThread () returned 1 [0137.701] SetEvent (hEvent=0xb8) returned 1 [0137.701] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.703] SetEvent (hEvent=0xa8) returned 1 [0137.704] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.705] SetEvent (hEvent=0xa8) returned 1 [0137.705] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.707] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.707] SetEvent (hEvent=0xa8) returned 1 [0137.707] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x4fbf, lpOverlapped=0x0) returned 1 [0137.708] GetFileType (hFile=0x17c) returned 0x1 [0137.708] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.708] WriteFile (in: hFile=0x17c, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x4fbf, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x12429b48*=0x4fbf, lpOverlapped=0x12429b54) returned 1 [0137.708] GetFileType (hFile=0x17c) returned 0x1 [0137.708] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x4fbf, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.708] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.708] CloseHandle (hObject=0x17c) returned 1 [0137.709] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/WLWIo6rts IESz.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wlwio6rts iesz.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.712] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.719] WriteFile (in: hFile=0x17c, lpBuffer=0x1249a6c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1249a6c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.721] CloseHandle (hObject=0x17c) returned 1 [0137.721] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x56, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x56) returned 1 [0137.722] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/WPbf3bW8zJzjM2KHJI7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wpbf3bw8zjzjm2khji7.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d3a54f0, ftCreationTime.dwHighDateTime=0x1d4d180, ftLastAccessTime.dwLowDateTime=0xa3e90660, ftLastAccessTime.dwHighDateTime=0x1d4d263, ftLastWriteTime.dwLowDateTime=0xa3e90660, ftLastWriteTime.dwHighDateTime=0x1d4d263, nFileSizeHigh=0x0, nFileSizeLow=0xaf30)) returned 1 [0137.722] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/WPbf3bW8zJzjM2KHJI7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wpbf3bw8zjzjm2khji7.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.722] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.722] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0137.723] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2094 | out: pbBuffer=0x124e2094) returned 1 [0137.723] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466202 | out: pbBuffer=0x12466202) returned 1 [0137.723] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124662aa | out: pbBuffer=0x124662aa) returned 1 [0137.724] SwitchToThread () returned 1 [0137.725] SetEvent (hEvent=0xa8) returned 1 [0137.725] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.727] SetEvent (hEvent=0xb8) returned 1 [0137.727] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.729] SetEvent (hEvent=0xb8) returned 1 [0137.729] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.731] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.731] SetEvent (hEvent=0xb8) returned 1 [0137.731] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0xa373, lpOverlapped=0x0) returned 1 [0137.732] GetFileType (hFile=0x17c) returned 0x1 [0137.732] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.732] WriteFile (in: hFile=0x17c, lpBuffer=0x12566000*, nNumberOfBytesToWrite=0xa373, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12566000*, lpNumberOfBytesWritten=0x12429b48*=0xa373, lpOverlapped=0x12429b54) returned 1 [0137.732] GetFileType (hFile=0x17c) returned 0x1 [0137.732] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xa373, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.732] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.732] CloseHandle (hObject=0x17c) returned 1 [0137.732] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/f4Qtm-9U_F.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f4qtm-9u_f.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.733] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.733] WriteFile (in: hFile=0x17c, lpBuffer=0x125846c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x125846c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.733] CloseHandle (hObject=0x17c) returned 1 [0137.733] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x52, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x52) returned 1 [0137.734] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/fUwity1af-QlSxxi.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fuwity1af-qlsxxi.pdf"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74302370, ftCreationTime.dwHighDateTime=0x1d4c667, ftLastAccessTime.dwLowDateTime=0xd7d97d00, ftLastAccessTime.dwHighDateTime=0x1d4d0c0, ftLastWriteTime.dwLowDateTime=0xd7d97d00, ftLastWriteTime.dwHighDateTime=0x1d4d0c0, nFileSizeHigh=0x0, nFileSizeLow=0x9508)) returned 1 [0137.734] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/fUwity1af-QlSxxi.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fuwity1af-qlsxxi.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.734] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.734] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0137.735] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0137.735] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b607a | out: pbBuffer=0x124b607a) returned 1 [0137.736] SwitchToThread () returned 1 [0137.736] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.739] SetEvent (hEvent=0xa8) returned 1 [0137.739] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.741] SetEvent (hEvent=0xa8) returned 1 [0137.741] SwitchToThread () returned 1 [0137.741] SetEvent (hEvent=0xa8) returned 1 [0137.741] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.744] SetEvent (hEvent=0xb8) returned 1 [0137.744] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.745] SetEvent (hEvent=0xb8) returned 1 [0137.745] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.747] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.747] SetEvent (hEvent=0xb8) returned 1 [0137.747] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0xc124, lpOverlapped=0x0) returned 1 [0137.748] GetFileType (hFile=0x17c) returned 0x1 [0137.748] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.748] WriteFile (in: hFile=0x17c, lpBuffer=0x12566000*, nNumberOfBytesToWrite=0xc124, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12566000*, lpNumberOfBytesWritten=0x12429b48*=0xc124, lpOverlapped=0x12429b54) returned 1 [0137.748] GetFileType (hFile=0x17c) returned 0x1 [0137.749] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xc124, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.749] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.749] CloseHandle (hObject=0x17c) returned 1 [0137.749] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/m74aEqfpjloC.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m74aeqfpjloc.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.749] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.749] WriteFile (in: hFile=0x17c, lpBuffer=0x12584240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12584240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.749] CloseHandle (hObject=0x17c) returned 1 [0137.750] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x54, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x54) returned 1 [0137.750] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/qLrgvIWjmmlyK.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qlrgviwjmmlyk.avi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30e981a0, ftCreationTime.dwHighDateTime=0x1d4c9b5, ftLastAccessTime.dwLowDateTime=0xc1042470, ftLastAccessTime.dwHighDateTime=0x1d4c604, ftLastWriteTime.dwLowDateTime=0xc1042470, ftLastWriteTime.dwHighDateTime=0x1d4c604, nFileSizeHigh=0x0, nFileSizeLow=0xfd1d)) returned 1 [0137.750] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/qLrgvIWjmmlyK.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qlrgviwjmmlyk.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.750] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.751] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0137.751] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0137.751] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b6058 | out: pbBuffer=0x124b6058) returned 1 [0137.751] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b6067 | out: pbBuffer=0x124b6067) returned 1 [0137.752] SwitchToThread () returned 1 [0137.752] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.756] SetEvent (hEvent=0xa8) returned 1 [0137.756] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.766] SetEvent (hEvent=0xa8) returned 1 [0137.766] SwitchToThread () returned 1 [0137.766] SetEvent (hEvent=0xa8) returned 1 [0137.766] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.776] SetEvent (hEvent=0xb8) returned 1 [0137.776] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.777] SetEvent (hEvent=0xb8) returned 1 [0137.777] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.779] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.779] SetEvent (hEvent=0xb8) returned 1 [0137.779] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x1039, lpOverlapped=0x0) returned 1 [0137.780] GetFileType (hFile=0x17c) returned 0x1 [0137.780] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.780] WriteFile (in: hFile=0x17c, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1039, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x12429b48*=0x1039, lpOverlapped=0x12429b54) returned 1 [0137.780] GetFileType (hFile=0x17c) returned 0x1 [0137.780] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x1039, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.780] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.780] CloseHandle (hObject=0x17c) returned 1 [0137.781] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/tm1Vh 1iu.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tm1vh 1iu.csv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.781] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.781] WriteFile (in: hFile=0x17c, lpBuffer=0x125846c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x125846c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.781] CloseHandle (hObject=0x17c) returned 1 [0137.781] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c0b0*, nNumberOfCharsToWrite=0x51, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c0b0*, lpNumberOfCharsWritten=0x1242981c*=0x51) returned 1 [0137.782] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.782] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.782] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.782] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.782] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.782] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.782] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0137.783] CloseHandle (hObject=0x17c) returned 1 [0137.783] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.783] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.783] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.784] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0137.784] WriteFile (in: hFile=0x17c, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0137.785] CloseHandle (hObject=0x17c) returned 1 [0137.785] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\@_read_to_recover_files_@.txt")) returned 0x20 [0137.785] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0137.786] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.786] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb6115c0, ftCreationTime.dwHighDateTime=0x1d4d111, ftLastAccessTime.dwLowDateTime=0x38c13f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x38c13f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.786] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb6115c0, ftCreationTime.dwHighDateTime=0x1d4d111, ftLastAccessTime.dwLowDateTime=0x38c13f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x38c13f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.786] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d5cde00, ftCreationTime.dwHighDateTime=0x1d4d251, ftLastAccessTime.dwLowDateTime=0x68d2d630, ftLastAccessTime.dwHighDateTime=0x1d4c761, ftLastWriteTime.dwLowDateTime=0x68d2d630, ftLastWriteTime.dwHighDateTime=0x1d4c761, nFileSizeHigh=0x0, nFileSizeLow=0x120d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7 Akbf1F2MIhONEj22.bmp", cAlternateFileName="7AKBF1~1.BMP")) returned 1 [0137.786] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x38c13f0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x38c13f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x38e7550, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0137.786] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1abcaa0, ftCreationTime.dwHighDateTime=0x1d4d48d, ftLastAccessTime.dwLowDateTime=0xe49c1380, ftLastAccessTime.dwHighDateTime=0x1d4d21f, ftLastWriteTime.dwLowDateTime=0xe49c1380, ftLastWriteTime.dwHighDateTime=0x1d4d21f, nFileSizeHigh=0x0, nFileSizeLow=0xc11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="e6KCoElhmGt.jpg", cAlternateFileName="E6KCOE~1.JPG")) returned 1 [0137.786] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7199560, ftCreationTime.dwHighDateTime=0x1d4d2f0, ftLastAccessTime.dwLowDateTime=0xd5f84fb0, ftLastAccessTime.dwHighDateTime=0x1d4c856, ftLastWriteTime.dwLowDateTime=0xd5f84fb0, ftLastWriteTime.dwHighDateTime=0x1d4c856, nFileSizeHigh=0x0, nFileSizeLow=0x9193, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ec6z QQKw.wav", cAlternateFileName="EC6ZQQ~1.WAV")) returned 1 [0137.786] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cb4f750, ftCreationTime.dwHighDateTime=0x1d4d18b, ftLastAccessTime.dwLowDateTime=0x788032c0, ftLastAccessTime.dwHighDateTime=0x1d4cdb1, ftLastWriteTime.dwLowDateTime=0x788032c0, ftLastWriteTime.dwHighDateTime=0x1d4cdb1, nFileSizeHigh=0x0, nFileSizeLow=0x6c75, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nod9 Yb2pogMaeW.m4a", cAlternateFileName="NOD9YB~1.M4A")) returned 1 [0137.786] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd300b80, ftCreationTime.dwHighDateTime=0x1d4c53a, ftLastAccessTime.dwLowDateTime=0xe06bff90, ftLastAccessTime.dwHighDateTime=0x1d4d4aa, ftLastWriteTime.dwLowDateTime=0xe06bff90, ftLastWriteTime.dwHighDateTime=0x1d4d4aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qbF4nhuyOKYL", cAlternateFileName="QBF4NH~1")) returned 1 [0137.786] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212a2c20, ftCreationTime.dwHighDateTime=0x1d4c775, ftLastAccessTime.dwLowDateTime=0x84512db0, ftLastAccessTime.dwHighDateTime=0x1d4c646, ftLastWriteTime.dwLowDateTime=0x84512db0, ftLastWriteTime.dwHighDateTime=0x1d4c646, nFileSizeHigh=0x0, nFileSizeLow=0x1ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="TfX h.m4a", cAlternateFileName="TFXH~1.M4A")) returned 1 [0137.786] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453e6fa0, ftCreationTime.dwHighDateTime=0x1d4d2aa, ftLastAccessTime.dwLowDateTime=0x922493b0, ftLastAccessTime.dwHighDateTime=0x1d4cae1, ftLastWriteTime.dwLowDateTime=0x922493b0, ftLastWriteTime.dwHighDateTime=0x1d4cae1, nFileSizeHigh=0x0, nFileSizeLow=0x6811, dwReserved0=0x0, dwReserved1=0x0, cFileName="vWfQ.gif", cAlternateFileName="")) returned 1 [0137.786] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75395750, ftCreationTime.dwHighDateTime=0x1d4c5bd, ftLastAccessTime.dwLowDateTime=0xf414af10, ftLastAccessTime.dwHighDateTime=0x1d4c695, ftLastWriteTime.dwLowDateTime=0xf414af10, ftLastWriteTime.dwHighDateTime=0x1d4c695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZqkX8xhI R1-VjyaXh", cAlternateFileName="ZQKX8X~1")) returned 1 [0137.786] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.786] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.786] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/7 Akbf1F2MIhONEj22.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\7 akbf1f2mihonej22.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.787] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0137.787] ReadFile (in: hFile=0x17c, lpBuffer=0x124b6000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0137.788] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.788] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.788] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/Ec6z QQKw.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\ec6z qqkw.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.788] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0137.788] ReadFile (in: hFile=0x108, lpBuffer=0x124b6200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b6200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0137.789] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/Nod9 Yb2pogMaeW.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\nod9 yb2pogmaew.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0137.789] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0137.789] ReadFile (in: hFile=0x138, lpBuffer=0x124b6300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b6300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0137.790] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/TfX h.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\tfx h.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.790] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0137.790] ReadFile (in: hFile=0x16c, lpBuffer=0x124b6400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b6400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0137.791] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.791] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75395750, ftCreationTime.dwHighDateTime=0x1d4c5bd, ftLastAccessTime.dwLowDateTime=0xf414af10, ftLastAccessTime.dwHighDateTime=0x1d4c695, ftLastWriteTime.dwLowDateTime=0xf414af10, ftLastWriteTime.dwHighDateTime=0x1d4c695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.791] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.791] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/e6KCoElhmGt.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\e6kcoelhmgt.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0137.792] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0137.792] ReadFile (in: hFile=0x144, lpBuffer=0x124b6500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b6500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0137.792] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.793] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd300b80, ftCreationTime.dwHighDateTime=0x1d4c53a, ftLastAccessTime.dwLowDateTime=0xe06bff90, ftLastAccessTime.dwHighDateTime=0x1d4d4aa, ftLastWriteTime.dwLowDateTime=0xe06bff90, ftLastWriteTime.dwHighDateTime=0x1d4d4aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.793] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.793] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/vWfQ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\vwfq.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0137.794] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0137.794] ReadFile (in: hFile=0x148, lpBuffer=0x124b6700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124b6700*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0137.794] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/7 Akbf1F2MIhONEj22.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\7 akbf1f2mihonej22.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d5cde00, ftCreationTime.dwHighDateTime=0x1d4d251, ftLastAccessTime.dwLowDateTime=0x68d2d630, ftLastAccessTime.dwHighDateTime=0x1d4c761, ftLastWriteTime.dwLowDateTime=0x68d2d630, ftLastWriteTime.dwHighDateTime=0x1d4c761, nFileSizeHigh=0x0, nFileSizeLow=0x120d2)) returned 1 [0137.794] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/Ec6z QQKw.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\ec6z qqkw.wav"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7199560, ftCreationTime.dwHighDateTime=0x1d4d2f0, ftLastAccessTime.dwLowDateTime=0xd5f84fb0, ftLastAccessTime.dwHighDateTime=0x1d4c856, ftLastWriteTime.dwLowDateTime=0xd5f84fb0, ftLastWriteTime.dwHighDateTime=0x1d4c856, nFileSizeHigh=0x0, nFileSizeLow=0x9193)) returned 1 [0137.795] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/Ec6z QQKw.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\ec6z qqkw.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0137.795] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0137.795] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124422e0 | out: pbBuffer=0x124422e0) returned 1 [0137.796] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2180 | out: pbBuffer=0x124e2180) returned 1 [0137.796] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6a02 | out: pbBuffer=0x124b6a02) returned 1 [0137.796] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b6a40 | out: pbBuffer=0x124b6a40) returned 1 [0137.798] SetEvent (hEvent=0xa8) returned 1 [0137.798] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x9193, lpOverlapped=0x0) returned 1 [0137.798] GetFileType (hFile=0xdc) returned 0x1 [0137.798] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0137.798] WriteFile (in: hFile=0xdc, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x9193, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x12429aa0*=0x9193, lpOverlapped=0x12429aac) returned 1 [0137.799] GetFileType (hFile=0xdc) returned 0x1 [0137.799] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x9193, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0137.799] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0137.799] CloseHandle (hObject=0xdc) returned 1 [0137.799] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/Ec6z QQKw.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\ec6z qqkw.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0137.799] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0137.800] WriteFile (in: hFile=0xdc, lpBuffer=0x12584fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12584fc0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0137.800] CloseHandle (hObject=0xdc) returned 1 [0137.800] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1245c000*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1245c000*, lpNumberOfCharsWritten=0x12429774*=0x5d) returned 1 [0137.800] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/Nod9 Yb2pogMaeW.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\nod9 yb2pogmaew.m4a"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cb4f750, ftCreationTime.dwHighDateTime=0x1d4d18b, ftLastAccessTime.dwLowDateTime=0x788032c0, ftLastAccessTime.dwHighDateTime=0x1d4cdb1, ftLastWriteTime.dwLowDateTime=0x788032c0, ftLastWriteTime.dwHighDateTime=0x1d4cdb1, nFileSizeHigh=0x0, nFileSizeLow=0x6c75)) returned 1 [0137.800] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/TfX h.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\tfx h.m4a"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212a2c20, ftCreationTime.dwHighDateTime=0x1d4c775, ftLastAccessTime.dwLowDateTime=0x84512db0, ftLastAccessTime.dwHighDateTime=0x1d4c646, ftLastWriteTime.dwLowDateTime=0x84512db0, ftLastWriteTime.dwHighDateTime=0x1d4c646, nFileSizeHigh=0x0, nFileSizeLow=0x1ac7)) returned 1 [0137.800] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/e6KCoElhmGt.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\e6kcoelhmgt.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1abcaa0, ftCreationTime.dwHighDateTime=0x1d4d48d, ftLastAccessTime.dwLowDateTime=0xe49c1380, ftLastAccessTime.dwHighDateTime=0x1d4d21f, ftLastWriteTime.dwLowDateTime=0xe49c1380, ftLastWriteTime.dwHighDateTime=0x1d4d21f, nFileSizeHigh=0x0, nFileSizeLow=0xc11b)) returned 1 [0137.800] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/e6KCoElhmGt.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\e6kcoelhmgt.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0137.801] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0137.801] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0137.802] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2074 | out: pbBuffer=0x124e2074) returned 1 [0137.802] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0137.802] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b600b | out: pbBuffer=0x124b600b) returned 1 [0137.803] CloseHandle (hObject=0x148) returned 1 [0137.803] CloseHandle (hObject=0x144) returned 1 [0137.803] CloseHandle (hObject=0x16c) returned 1 [0137.803] CloseHandle (hObject=0x138) returned 1 [0137.803] CloseHandle (hObject=0x108) returned 1 [0137.803] CloseHandle (hObject=0x17c) returned 1 [0137.803] SwitchToThread () returned 1 [0137.804] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.807] SetEvent (hEvent=0xb8) returned 1 [0137.807] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.809] SetEvent (hEvent=0xb8) returned 1 [0137.809] SwitchToThread () returned 1 [0137.809] SetEvent (hEvent=0xb8) returned 1 [0137.809] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.811] SetEvent (hEvent=0xa8) returned 1 [0137.811] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.812] SetEvent (hEvent=0xa8) returned 1 [0137.812] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.813] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.824] SetEvent (hEvent=0xa8) returned 1 [0137.824] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.827] SetEvent (hEvent=0xa8) returned 1 [0137.827] SwitchToThread () returned 1 [0137.827] SetEvent (hEvent=0xa8) returned 1 [0137.827] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.829] SetEvent (hEvent=0xb8) returned 1 [0137.829] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.830] SetEvent (hEvent=0xb8) returned 1 [0137.830] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.833] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.844] SetEvent (hEvent=0xb8) returned 1 [0137.844] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.847] SetEvent (hEvent=0xb8) returned 1 [0137.847] SwitchToThread () returned 1 [0137.847] SetEvent (hEvent=0xb8) returned 1 [0137.847] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.850] SetEvent (hEvent=0xa8) returned 1 [0137.850] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.851] SetEvent (hEvent=0xa8) returned 1 [0137.851] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.854] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.854] SetEvent (hEvent=0xa8) returned 1 [0137.854] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x6d76, lpOverlapped=0x0) returned 1 [0137.855] GetFileType (hFile=0x144) returned 0x1 [0137.855] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0137.855] WriteFile (in: hFile=0x144, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x6d76, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x124299f8*=0x6d76, lpOverlapped=0x12429a04) returned 1 [0137.855] GetFileType (hFile=0x144) returned 0x1 [0137.855] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x6d76, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0137.855] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0137.855] CloseHandle (hObject=0x144) returned 1 [0137.855] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/lry5A.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\lry5a.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0137.855] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0137.856] WriteFile (in: hFile=0x144, lpBuffer=0x127fa6c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x127fa6c0*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0137.856] CloseHandle (hObject=0x144) returned 1 [0137.856] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1249a000*, nNumberOfCharsToWrite=0x67, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x1249a000*, lpNumberOfCharsWritten=0x124296cc*=0x67) returned 1 [0137.857] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/yOZr3pj_m.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\yozr3pj_m.bmp"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500573e0, ftCreationTime.dwHighDateTime=0x1d4cd1c, ftLastAccessTime.dwLowDateTime=0x61cab490, ftLastAccessTime.dwHighDateTime=0x1d4d588, ftLastWriteTime.dwLowDateTime=0x61cab490, ftLastWriteTime.dwHighDateTime=0x1d4d588, nFileSizeHigh=0x0, nFileSizeLow=0xb357)) returned 1 [0137.857] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.857] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.857] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.857] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.857] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.857] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0137.857] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0137.857] CloseHandle (hObject=0x144) returned 1 [0137.858] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/sam.exe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sam.exe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.858] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/sam.exe\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.858] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/sam.exe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sam.exe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.858] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/sam.exe\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.858] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/sam.exe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sam.exe\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.858] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/sam.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sam.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0137.858] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0137.859] CloseHandle (hObject=0x144) returned 1 [0137.859] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.859] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.859] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0137.860] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0137.860] WriteFile (in: hFile=0x144, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0137.861] CloseHandle (hObject=0x144) returned 1 [0137.861] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\@_read_to_recover_files_@.txt")) returned 0x20 [0137.861] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0137.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.862] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3983180, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3983180, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3983180, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3983180, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7facc9e0, ftCreationTime.dwHighDateTime=0x1d4d3a2, ftLastAccessTime.dwLowDateTime=0xe5bfe4f0, ftLastAccessTime.dwHighDateTime=0x1d4caca, ftLastWriteTime.dwLowDateTime=0xe5bfe4f0, ftLastWriteTime.dwHighDateTime=0x1d4caca, nFileSizeHigh=0x0, nFileSizeLow=0x16493, dwReserved0=0x0, dwReserved1=0x0, cFileName="24RxlyJOca6.xls", cAlternateFileName="24RXLY~1.XLS")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e9ddf0, ftCreationTime.dwHighDateTime=0x1d4cbbd, ftLastAccessTime.dwLowDateTime=0x73b46940, ftLastAccessTime.dwHighDateTime=0x1d4d127, ftLastWriteTime.dwLowDateTime=0x73b46940, ftLastWriteTime.dwHighDateTime=0x1d4d127, nFileSizeHigh=0x0, nFileSizeLow=0x5e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="50VGB-UvN.pps", cAlternateFileName="50VGB-~1.PPS")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb931b2d0, ftCreationTime.dwHighDateTime=0x1d51014, ftLastAccessTime.dwLowDateTime=0x1a5b26b0, ftLastAccessTime.dwHighDateTime=0x1d50d25, ftLastWriteTime.dwLowDateTime=0x1a5b26b0, ftLastWriteTime.dwHighDateTime=0x1d50d25, nFileSizeHigh=0x0, nFileSizeLow=0x164fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="6g7-O Oj0fEf1rCpHFm.pptx", cAlternateFileName="6G7-OO~1.PPT")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54c5ec90, ftCreationTime.dwHighDateTime=0x1d4cea5, ftLastAccessTime.dwLowDateTime=0x4631de0, ftLastAccessTime.dwHighDateTime=0x1d4c5a4, ftLastWriteTime.dwLowDateTime=0x4631de0, ftLastWriteTime.dwHighDateTime=0x1d4c5a4, nFileSizeHigh=0x0, nFileSizeLow=0x7f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="8xs0xeB.ods", cAlternateFileName="")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x3983180, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x3983180, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3983180, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe81ef8f0, ftCreationTime.dwHighDateTime=0x1d51abe, ftLastAccessTime.dwLowDateTime=0xb6562dc0, ftLastAccessTime.dwHighDateTime=0x1d4f5d4, ftLastWriteTime.dwLowDateTime=0xb6562dc0, ftLastWriteTime.dwHighDateTime=0x1d4f5d4, nFileSizeHigh=0x0, nFileSizeLow=0xc167, dwReserved0=0x0, dwReserved1=0x0, cFileName="BK8inQ6dT2M9Bs.docx", cAlternateFileName="BK8INQ~1.DOC")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d14b570, ftCreationTime.dwHighDateTime=0x1d55f4a, ftLastAccessTime.dwLowDateTime=0x44b0f8a0, ftLastAccessTime.dwHighDateTime=0x1d559e1, ftLastWriteTime.dwLowDateTime=0x44b0f8a0, ftLastWriteTime.dwHighDateTime=0x1d559e1, nFileSizeHigh=0x0, nFileSizeLow=0x11294, dwReserved0=0x0, dwReserved1=0x0, cFileName="CItUAKoRDSSYq6S.pptx", cAlternateFileName="CITUAK~1.PPT")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1a73310, ftCreationTime.dwHighDateTime=0x1d4d292, ftLastAccessTime.dwLowDateTime=0x16f27050, ftLastAccessTime.dwHighDateTime=0x1d4c644, ftLastWriteTime.dwLowDateTime=0x16f27050, ftLastWriteTime.dwHighDateTime=0x1d4c644, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmO b7", cAlternateFileName="CMOB7~1")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80ef1030, ftCreationTime.dwHighDateTime=0x1d4cd47, ftLastAccessTime.dwLowDateTime=0xb40cc770, ftLastAccessTime.dwHighDateTime=0x1d4cf1b, ftLastWriteTime.dwLowDateTime=0xb40cc770, ftLastWriteTime.dwHighDateTime=0x1d4cf1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCetzcFw", cAlternateFileName="")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4f03550, ftCreationTime.dwHighDateTime=0x1d51d57, ftLastAccessTime.dwLowDateTime=0xca2f0cd0, ftLastAccessTime.dwHighDateTime=0x1d50c91, ftLastWriteTime.dwLowDateTime=0xca2f0cd0, ftLastWriteTime.dwHighDateTime=0x1d50c91, nFileSizeHigh=0x0, nFileSizeLow=0x2c5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DpEDB_T.xlsx", cAlternateFileName="DPEDB_~1.XLS")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacd47f50, ftCreationTime.dwHighDateTime=0x1d4c860, ftLastAccessTime.dwLowDateTime=0x2a3b3200, ftLastAccessTime.dwHighDateTime=0x1d4ced7, ftLastWriteTime.dwLowDateTime=0x2a3b3200, ftLastWriteTime.dwHighDateTime=0x1d4ced7, nFileSizeHigh=0x0, nFileSizeLow=0xb704, dwReserved0=0x0, dwReserved1=0x0, cFileName="EdZE.odp", cAlternateFileName="")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94294980, ftCreationTime.dwHighDateTime=0x1d4ca82, ftLastAccessTime.dwLowDateTime=0xa6beb40, ftLastAccessTime.dwHighDateTime=0x1d4d3f5, ftLastWriteTime.dwLowDateTime=0xa6beb40, ftLastWriteTime.dwHighDateTime=0x1d4d3f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F2hFH5 o", cAlternateFileName="F2HFH5~1")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x574d3190, ftCreationTime.dwHighDateTime=0x1d4cb61, ftLastAccessTime.dwLowDateTime=0x608c9d30, ftLastAccessTime.dwHighDateTime=0x1d4c97d, ftLastWriteTime.dwLowDateTime=0x608c9d30, ftLastWriteTime.dwHighDateTime=0x1d4c97d, nFileSizeHigh=0x0, nFileSizeLow=0x12851, dwReserved0=0x0, dwReserved1=0x0, cFileName="GyVi0.ods", cAlternateFileName="")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea603100, ftCreationTime.dwHighDateTime=0x1d51aab, ftLastAccessTime.dwLowDateTime=0x97fbcb70, ftLastAccessTime.dwHighDateTime=0x1d512a6, ftLastWriteTime.dwLowDateTime=0x97fbcb70, ftLastWriteTime.dwHighDateTime=0x1d512a6, nFileSizeHigh=0x0, nFileSizeLow=0x10ea3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Iq_AWBfS.xlsx", cAlternateFileName="IQ_AWB~1.XLS")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4234a2e0, ftCreationTime.dwHighDateTime=0x1d560c4, ftLastAccessTime.dwLowDateTime=0x85e599d0, ftLastAccessTime.dwHighDateTime=0x1d5175a, ftLastWriteTime.dwLowDateTime=0x85e599d0, ftLastWriteTime.dwHighDateTime=0x1d5175a, nFileSizeHigh=0x0, nFileSizeLow=0x17409, dwReserved0=0x0, dwReserved1=0x0, cFileName="iyfw6IN.xlsx", cAlternateFileName="IYFW6I~1.XLS")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d550250, ftCreationTime.dwHighDateTime=0x1d4d0b7, ftLastAccessTime.dwLowDateTime=0x8cbfa100, ftLastAccessTime.dwHighDateTime=0x1d4d0d4, ftLastWriteTime.dwLowDateTime=0x8cbfa100, ftLastWriteTime.dwHighDateTime=0x1d4d0d4, nFileSizeHigh=0x0, nFileSizeLow=0xbe51, dwReserved0=0x0, dwReserved1=0x0, cFileName="OW4mQauZ.ppt", cAlternateFileName="")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e31bb0, ftCreationTime.dwHighDateTime=0x1d52db7, ftLastAccessTime.dwLowDateTime=0xb6bf34f0, ftLastAccessTime.dwHighDateTime=0x1d52d9c, ftLastWriteTime.dwLowDateTime=0xb6bf34f0, ftLastWriteTime.dwHighDateTime=0x1d52d9c, nFileSizeHigh=0x0, nFileSizeLow=0x189ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="pM kY7wS-njVneDyiXxk.docx", cAlternateFileName="PMKY7W~1.DOC")) returned 1 [0137.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a9340, ftCreationTime.dwHighDateTime=0x1d5144b, ftLastAccessTime.dwLowDateTime=0x5324ee20, ftLastAccessTime.dwHighDateTime=0x1d52dd9, ftLastWriteTime.dwLowDateTime=0x5324ee20, ftLastWriteTime.dwHighDateTime=0x1d52dd9, nFileSizeHigh=0x0, nFileSizeLow=0x4e04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qn_mCSWqKPk-lT7MH.pptx", cAlternateFileName="QN_MCS~1.PPT")) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf4de4f0, ftCreationTime.dwHighDateTime=0x1d54090, ftLastAccessTime.dwLowDateTime=0x48042ab0, ftLastAccessTime.dwHighDateTime=0x1d53423, ftLastWriteTime.dwLowDateTime=0x48042ab0, ftLastWriteTime.dwHighDateTime=0x1d53423, nFileSizeHigh=0x0, nFileSizeLow=0x34b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="r-XdwL-42Vvwoybm7.xlsx", cAlternateFileName="R-XDWL~1.XLS")) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd45fbad0, ftCreationTime.dwHighDateTime=0x1d4fc4a, ftLastAccessTime.dwLowDateTime=0x6ae52fd0, ftLastAccessTime.dwHighDateTime=0x1d5646f, ftLastWriteTime.dwLowDateTime=0x6ae52fd0, ftLastWriteTime.dwHighDateTime=0x1d5646f, nFileSizeHigh=0x0, nFileSizeLow=0x83b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSTx5xrRFDVy Iqzz.docx", cAlternateFileName="RSTX5X~1.DOC")) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8258fec0, ftCreationTime.dwHighDateTime=0x1d50de5, ftLastAccessTime.dwLowDateTime=0x9ed613e0, ftLastAccessTime.dwHighDateTime=0x1d500dd, ftLastWriteTime.dwLowDateTime=0x9ed613e0, ftLastWriteTime.dwHighDateTime=0x1d500dd, nFileSizeHigh=0x0, nFileSizeLow=0x5e7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sAkuVSaLJ-Nqxr.pptx", cAlternateFileName="SAKUVS~1.PPT")) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8ecb750, ftCreationTime.dwHighDateTime=0x1d4c5c1, ftLastAccessTime.dwLowDateTime=0x424dad20, ftLastAccessTime.dwHighDateTime=0x1d4c6c9, ftLastWriteTime.dwLowDateTime=0x424dad20, ftLastWriteTime.dwHighDateTime=0x1d4c6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4ba6, dwReserved0=0x0, dwReserved1=0x0, cFileName="V3EUk Z465y_4wn7CML.odp", cAlternateFileName="V3EUKZ~1.ODP")) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf56d2f10, ftCreationTime.dwHighDateTime=0x1d558a1, ftLastAccessTime.dwLowDateTime=0xff6e2250, ftLastAccessTime.dwHighDateTime=0x1d51227, ftLastWriteTime.dwLowDateTime=0xff6e2250, ftLastWriteTime.dwHighDateTime=0x1d51227, nFileSizeHigh=0x0, nFileSizeLow=0x12406, dwReserved0=0x0, dwReserved1=0x0, cFileName="X aqr.xlsx", cAlternateFileName="XAQR~1.XLS")) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58019f50, ftCreationTime.dwHighDateTime=0x1d50e0e, ftLastAccessTime.dwLowDateTime=0xb257d070, ftLastAccessTime.dwHighDateTime=0x1d54ffc, ftLastWriteTime.dwLowDateTime=0xb257d070, ftLastWriteTime.dwHighDateTime=0x1d54ffc, nFileSizeHigh=0x0, nFileSizeLow=0x11514, dwReserved0=0x0, dwReserved1=0x0, cFileName="X5b66F.docx", cAlternateFileName="X5B66F~1.DOC")) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d0f00, ftCreationTime.dwHighDateTime=0x1d54e9d, ftLastAccessTime.dwLowDateTime=0x726b7050, ftLastAccessTime.dwHighDateTime=0x1d4f0a9, ftLastWriteTime.dwLowDateTime=0x726b7050, ftLastWriteTime.dwHighDateTime=0x1d4f0a9, nFileSizeHigh=0x0, nFileSizeLow=0x28d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="YgY3xw15wxPPmpcwx.docx", cAlternateFileName="YGY3XW~1.DOC")) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcabf80b0, ftCreationTime.dwHighDateTime=0x1d4d16f, ftLastAccessTime.dwLowDateTime=0x4408ceb0, ftLastAccessTime.dwHighDateTime=0x1d4c5d9, ftLastWriteTime.dwLowDateTime=0x4408ceb0, ftLastWriteTime.dwHighDateTime=0x1d4c5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YpYW5ZcWNBJ m2", cAlternateFileName="YPYW5Z~1")) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c02100, ftCreationTime.dwHighDateTime=0x1d55495, ftLastAccessTime.dwLowDateTime=0xd17325b0, ftLastAccessTime.dwHighDateTime=0x1d56657, ftLastWriteTime.dwLowDateTime=0xd17325b0, ftLastWriteTime.dwHighDateTime=0x1d56657, nFileSizeHigh=0x0, nFileSizeLow=0x16077, dwReserved0=0x0, dwReserved1=0x0, cFileName="_i3FeHRce2s HRSV.pptx", cAlternateFileName="_I3FEH~1.PPT")) returned 1 [0137.863] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.863] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.863] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/24RxlyJOca6.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\24rxlyjoca6.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0137.863] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.864] ReadFile (in: hFile=0x144, lpBuffer=0x1264e500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264e500*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.865] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/50VGB-UvN.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\50vgb-uvn.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.865] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.865] ReadFile (in: hFile=0x108, lpBuffer=0x1264e600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264e600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.866] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/6g7-O Oj0fEf1rCpHFm.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6g7-o oj0fef1rcphfm.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0137.866] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.866] ReadFile (in: hFile=0xdc, lpBuffer=0x1264e700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264e700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.867] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/8xs0xeB.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8xs0xeb.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.867] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.867] ReadFile (in: hFile=0x17c, lpBuffer=0x1264e800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264e800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.868] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.868] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.868] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/BK8inQ6dT2M9Bs.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bk8inq6dt2m9bs.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0137.868] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.868] ReadFile (in: hFile=0x138, lpBuffer=0x1264e900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264e900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.869] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/CItUAKoRDSSYq6S.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cituakordssyq6s.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.869] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.869] ReadFile (in: hFile=0x16c, lpBuffer=0x1264eb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264eb00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.870] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.870] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80ef1030, ftCreationTime.dwHighDateTime=0x1d4cd47, ftLastAccessTime.dwLowDateTime=0xb40cc770, ftLastAccessTime.dwHighDateTime=0x1d4cf1b, ftLastWriteTime.dwLowDateTime=0xb40cc770, ftLastWriteTime.dwHighDateTime=0x1d4cf1b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.870] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.870] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DpEDB_T.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dpedb_t.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0137.871] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.871] ReadFile (in: hFile=0x148, lpBuffer=0x1264ec00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264ec00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.872] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/EdZE.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\edze.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0137.872] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.872] ReadFile (in: hFile=0x124, lpBuffer=0x1264ed00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264ed00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.873] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.873] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94294980, ftCreationTime.dwHighDateTime=0x1d4ca82, ftLastAccessTime.dwLowDateTime=0xa6beb40, ftLastAccessTime.dwHighDateTime=0x1d4d3f5, ftLastWriteTime.dwLowDateTime=0xa6beb40, ftLastWriteTime.dwHighDateTime=0x1d4d3f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.873] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.873] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/GyVi0.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gyvi0.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0137.873] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.873] ReadFile (in: hFile=0x178, lpBuffer=0x1264ee00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264ee00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.874] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Iq_AWBfS.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iq_awbfs.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0137.874] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.874] ReadFile (in: hFile=0x12c, lpBuffer=0x1264ef00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264ef00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.875] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.875] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Music\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.875] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.876] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Pictures\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.876] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.876] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Shapes\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.876] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.876] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.876] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/My Videos\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.876] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/OW4mQauZ.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ow4mqauz.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0137.876] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.877] ReadFile (in: hFile=0x198, lpBuffer=0x1264f000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264f000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.877] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.877] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Outlook Files\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.878] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.878] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Qn_mCSWqKPk-lT7MH.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qn_mcswqkpk-lt7mh.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0137.878] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.878] ReadFile (in: hFile=0x168, lpBuffer=0x1264f200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264f200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.879] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/RSTx5xrRFDVy Iqzz.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rstx5xrrfdvy iqzz.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0137.879] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.879] ReadFile (in: hFile=0xd0, lpBuffer=0x1264f400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264f400*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.880] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/V3EUk Z465y_4wn7CML.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v3euk z465y_4wn7cml.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0137.880] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.880] ReadFile (in: hFile=0xc8, lpBuffer=0x1264f600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264f600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.881] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/X aqr.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x aqr.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0137.881] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.881] ReadFile (in: hFile=0x118, lpBuffer=0x1264f700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264f700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.882] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/X5b66F.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x5b66f.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0137.882] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.883] ReadFile (in: hFile=0x120, lpBuffer=0x1264f800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264f800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.884] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YgY3xw15wxPPmpcwx.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ygy3xw15wxppmpcwx.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0137.884] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.884] ReadFile (in: hFile=0x27c, lpBuffer=0x1264fa00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264fa00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.885] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.885] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcabf80b0, ftCreationTime.dwHighDateTime=0x1d4d16f, ftLastAccessTime.dwLowDateTime=0x4408ceb0, ftLastAccessTime.dwHighDateTime=0x1d4c5d9, ftLastWriteTime.dwLowDateTime=0x4408ceb0, ftLastWriteTime.dwHighDateTime=0x1d4c5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.885] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.885] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/_i3FeHRce2s HRSV.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_i3fehrce2s hrsv.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0137.885] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.885] ReadFile (in: hFile=0x15c, lpBuffer=0x1264fc00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264fc00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.886] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.886] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1a73310, ftCreationTime.dwHighDateTime=0x1d4d292, ftLastAccessTime.dwLowDateTime=0x16f27050, ftLastAccessTime.dwHighDateTime=0x1d4c644, ftLastWriteTime.dwLowDateTime=0x16f27050, ftLastWriteTime.dwHighDateTime=0x1d4c644, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.886] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.886] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0137.886] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.887] ReadFile (in: hFile=0x190, lpBuffer=0x1264fd00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264fd00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.887] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/iyfw6IN.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyfw6in.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0137.888] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.888] ReadFile (in: hFile=0xfc, lpBuffer=0x1264fe00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264fe00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.889] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/pM kY7wS-njVneDyiXxk.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pm ky7ws-njvnedyixxk.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0137.889] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.889] ReadFile (in: hFile=0x104, lpBuffer=0x1264ff00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1264ff00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.890] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/r-XdwL-42Vvwoybm7.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\r-xdwl-42vvwoybm7.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0137.890] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.890] ReadFile (in: hFile=0xf0, lpBuffer=0x124c0100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c0100*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.891] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/sAkuVSaLJ-Nqxr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sakuvsalj-nqxr.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0137.891] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0137.891] ReadFile (in: hFile=0xe4, lpBuffer=0x124c0200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c0200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0137.900] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/24RxlyJOca6.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\24rxlyjoca6.xls"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7facc9e0, ftCreationTime.dwHighDateTime=0x1d4d3a2, ftLastAccessTime.dwLowDateTime=0xe5bfe4f0, ftLastAccessTime.dwHighDateTime=0x1d4caca, ftLastWriteTime.dwLowDateTime=0xe5bfe4f0, ftLastWriteTime.dwHighDateTime=0x1d4caca, nFileSizeHigh=0x0, nFileSizeLow=0x16493)) returned 1 [0137.900] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/24RxlyJOca6.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\24rxlyjoca6.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.900] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.901] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442480 | out: pbBuffer=0x12442480) returned 1 [0137.901] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124102f4 | out: pbBuffer=0x124102f4) returned 1 [0137.901] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c0302 | out: pbBuffer=0x124c0302) returned 1 [0137.903] SetEvent (hEvent=0xb8) returned 1 [0137.903] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x16493, lpOverlapped=0x0) returned 1 [0137.904] GetFileType (hFile=0x154) returned 0x1 [0137.904] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.904] WriteFile (in: hFile=0x154, lpBuffer=0x12596000*, nNumberOfBytesToWrite=0x16493, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12596000*, lpNumberOfBytesWritten=0x12429b48*=0x16493, lpOverlapped=0x12429b54) returned 1 [0137.905] GetFileType (hFile=0x154) returned 0x1 [0137.905] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x16493, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.905] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.905] CloseHandle (hObject=0x154) returned 1 [0137.905] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/24RxlyJOca6.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\24rxlyjoca6.xls"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.905] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.905] WriteFile (in: hFile=0x154, lpBuffer=0x127fafc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127fafc0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.906] CloseHandle (hObject=0x154) returned 1 [0137.906] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x55) returned 1 [0137.906] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/50VGB-UvN.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\50vgb-uvn.pps"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e9ddf0, ftCreationTime.dwHighDateTime=0x1d4cbbd, ftLastAccessTime.dwLowDateTime=0x73b46940, ftLastAccessTime.dwHighDateTime=0x1d4d127, ftLastWriteTime.dwLowDateTime=0x73b46940, ftLastWriteTime.dwHighDateTime=0x1d4d127, nFileSizeHigh=0x0, nFileSizeLow=0x5e7c)) returned 1 [0137.906] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/50VGB-UvN.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\50vgb-uvn.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.907] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.907] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0137.908] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0137.908] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc0d8 | out: pbBuffer=0x124bc0d8) returned 1 [0137.909] CloseHandle (hObject=0x118) returned 1 [0137.910] CloseHandle (hObject=0xc8) returned 1 [0137.910] CloseHandle (hObject=0xd0) returned 1 [0137.910] CloseHandle (hObject=0x168) returned 1 [0137.910] CloseHandle (hObject=0x198) returned 1 [0137.910] CloseHandle (hObject=0x12c) returned 1 [0137.910] CloseHandle (hObject=0x178) returned 1 [0137.910] CloseHandle (hObject=0x124) returned 1 [0137.910] CloseHandle (hObject=0x148) returned 1 [0137.910] CloseHandle (hObject=0x16c) returned 1 [0137.910] CloseHandle (hObject=0x138) returned 1 [0137.910] CloseHandle (hObject=0x17c) returned 1 [0137.910] CloseHandle (hObject=0xdc) returned 1 [0137.910] CloseHandle (hObject=0x108) returned 1 [0137.910] CloseHandle (hObject=0x144) returned 1 [0137.910] CloseHandle (hObject=0xe4) returned 1 [0137.910] CloseHandle (hObject=0xf0) returned 1 [0137.910] CloseHandle (hObject=0x104) returned 1 [0137.910] CloseHandle (hObject=0xfc) returned 1 [0137.910] CloseHandle (hObject=0x190) returned 1 [0137.911] CloseHandle (hObject=0x15c) returned 1 [0137.911] CloseHandle (hObject=0x27c) returned 1 [0137.911] CloseHandle (hObject=0x120) returned 1 [0137.911] SwitchToThread () returned 1 [0137.911] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.914] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.915] SetEvent (hEvent=0x7c) returned 1 [0137.915] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.917] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.920] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.921] SetEvent (hEvent=0xb8) returned 1 [0137.921] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.923] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.926] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.926] SetEvent (hEvent=0x7c) returned 1 [0137.926] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.929] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.932] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.933] SetEvent (hEvent=0xb8) returned 1 [0137.933] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.935] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.947] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.948] SetEvent (hEvent=0x7c) returned 1 [0137.948] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.950] SetEvent (hEvent=0x7c) returned 1 [0137.950] SwitchToThread () returned 1 [0137.951] SetEvent (hEvent=0x7c) returned 1 [0137.951] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.953] SetEvent (hEvent=0xb8) returned 1 [0137.953] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0137.954] SetEvent (hEvent=0xb8) returned 1 [0137.954] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0137.998] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0137.998] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0138.000] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.000] SetEvent (hEvent=0xac) returned 1 [0138.004] SetEvent (hEvent=0xb8) returned 1 [0138.004] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0xb704, lpOverlapped=0x0) returned 1 [0138.005] GetFileType (hFile=0x154) returned 0x1 [0138.005] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.005] WriteFile (in: hFile=0x154, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0xb704, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x12429b48*=0xb704, lpOverlapped=0x12429b54) returned 1 [0138.006] GetFileType (hFile=0x154) returned 0x1 [0138.006] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0xb704, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.006] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.006] CloseHandle (hObject=0x154) returned 1 [0138.006] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/EdZE.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\edze.odp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.006] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.014] WriteFile (in: hFile=0x154, lpBuffer=0x12778240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12778240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.014] CloseHandle (hObject=0x154) returned 1 [0138.014] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x126601e0*, nNumberOfCharsToWrite=0x4e, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x126601e0*, lpNumberOfCharsWritten=0x1242981c*=0x4e) returned 1 [0138.028] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/GyVi0.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gyvi0.ods"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x574d3190, ftCreationTime.dwHighDateTime=0x1d4cb61, ftLastAccessTime.dwLowDateTime=0x608c9d30, ftLastAccessTime.dwHighDateTime=0x1d4c97d, ftLastWriteTime.dwLowDateTime=0x608c9d30, ftLastWriteTime.dwHighDateTime=0x1d4c97d, nFileSizeHigh=0x0, nFileSizeLow=0x12851)) returned 1 [0138.028] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/GyVi0.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gyvi0.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.028] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.030] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.034] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0138.034] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.036] SwitchToThread () returned 1 [0138.044] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.061] SetEvent (hEvent=0x7c) returned 1 [0138.061] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.065] SetEvent (hEvent=0x7c) returned 1 [0138.069] SwitchToThread () returned 1 [0138.079] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.109] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.115] SetEvent (hEvent=0xb8) returned 1 [0138.115] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.133] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.157] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.163] SetEvent (hEvent=0x7c) returned 1 [0138.163] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.194] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.208] SetEvent (hEvent=0xb8) returned 1 [0138.209] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.211] SetEvent (hEvent=0xb8) returned 1 [0138.211] SwitchToThread () returned 1 [0138.212] SetEvent (hEvent=0xb8) returned 1 [0138.212] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.213] SetEvent (hEvent=0x7c) returned 1 [0138.214] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.215] SetEvent (hEvent=0x7c) returned 1 [0138.215] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.217] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.217] SetEvent (hEvent=0x7c) returned 1 [0138.217] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x4ba6, lpOverlapped=0x0) returned 1 [0138.218] GetFileType (hFile=0x154) returned 0x1 [0138.218] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.219] WriteFile (in: hFile=0x154, lpBuffer=0x1257c000*, nNumberOfBytesToWrite=0x4ba6, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1257c000*, lpNumberOfBytesWritten=0x12429b48*=0x4ba6, lpOverlapped=0x12429b54) returned 1 [0138.219] GetFileType (hFile=0x154) returned 0x1 [0138.219] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x4ba6, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.219] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.219] CloseHandle (hObject=0x154) returned 1 [0138.219] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/V3EUk Z465y_4wn7CML.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v3euk z465y_4wn7cml.odp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.219] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.219] WriteFile (in: hFile=0x154, lpBuffer=0x124c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x124c0240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.219] CloseHandle (hObject=0x154) returned 1 [0138.220] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c000*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfCharsWritten=0x1242981c*=0x5d) returned 1 [0138.220] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/X aqr.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x aqr.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf56d2f10, ftCreationTime.dwHighDateTime=0x1d558a1, ftLastAccessTime.dwLowDateTime=0xff6e2250, ftLastAccessTime.dwHighDateTime=0x1d51227, ftLastWriteTime.dwLowDateTime=0xff6e2250, ftLastWriteTime.dwHighDateTime=0x1d51227, nFileSizeHigh=0x0, nFileSizeLow=0x12406)) returned 1 [0138.220] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/X aqr.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x aqr.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.220] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.220] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.221] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.222] SwitchToThread () returned 1 [0138.223] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.227] SetEvent (hEvent=0xb8) returned 1 [0138.227] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.229] SetEvent (hEvent=0xb8) returned 1 [0138.229] SwitchToThread () returned 1 [0138.229] SetEvent (hEvent=0xb8) returned 1 [0138.230] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.232] SetEvent (hEvent=0x7c) returned 1 [0138.232] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.233] SetEvent (hEvent=0x7c) returned 1 [0138.233] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.236] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.236] SetEvent (hEvent=0x7c) returned 1 [0138.236] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x28d6, lpOverlapped=0x0) returned 1 [0138.237] GetFileType (hFile=0x154) returned 0x1 [0138.237] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.237] WriteFile (in: hFile=0x154, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x28d6, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429b48*=0x28d6, lpOverlapped=0x12429b54) returned 1 [0138.237] GetFileType (hFile=0x154) returned 0x1 [0138.237] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x28d6, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.237] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.237] CloseHandle (hObject=0x154) returned 1 [0138.237] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YgY3xw15wxPPmpcwx.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ygy3xw15wxppmpcwx.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.237] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.238] WriteFile (in: hFile=0x154, lpBuffer=0x124c06c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x124c06c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.239] CloseHandle (hObject=0x154) returned 1 [0138.239] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x1242981c*=0x5c) returned 1 [0138.240] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/_i3FeHRce2s HRSV.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_i3fehrce2s hrsv.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c02100, ftCreationTime.dwHighDateTime=0x1d55495, ftLastAccessTime.dwLowDateTime=0xd17325b0, ftLastAccessTime.dwHighDateTime=0x1d56657, ftLastWriteTime.dwLowDateTime=0xd17325b0, ftLastWriteTime.dwHighDateTime=0x1d56657, nFileSizeHigh=0x0, nFileSizeLow=0x16077)) returned 1 [0138.240] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/_i3FeHRce2s HRSV.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_i3fehrce2s hrsv.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.240] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.241] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.241] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1247c202 | out: pbBuffer=0x1247c202) returned 1 [0138.241] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1247c2b8 | out: pbBuffer=0x1247c2b8) returned 1 [0138.242] SwitchToThread () returned 1 [0138.243] SetEvent (hEvent=0x7c) returned 1 [0138.243] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.245] SetEvent (hEvent=0xb8) returned 1 [0138.246] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.247] SetEvent (hEvent=0xb8) returned 1 [0138.247] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.249] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.249] SetEvent (hEvent=0xb8) returned 1 [0138.249] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x17409, lpOverlapped=0x0) returned 1 [0138.251] GetFileType (hFile=0x154) returned 0x1 [0138.251] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.251] WriteFile (in: hFile=0x154, lpBuffer=0x1274e000*, nNumberOfBytesToWrite=0x17409, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1274e000*, lpNumberOfBytesWritten=0x12429b48*=0x17409, lpOverlapped=0x12429b54) returned 1 [0138.251] GetFileType (hFile=0x154) returned 0x1 [0138.251] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x17409, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.251] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.251] CloseHandle (hObject=0x154) returned 1 [0138.252] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/iyfw6IN.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iyfw6in.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.252] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.252] WriteFile (in: hFile=0x154, lpBuffer=0x126506c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x126506c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.252] CloseHandle (hObject=0x154) returned 1 [0138.252] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x52, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x52) returned 1 [0138.253] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/pM kY7wS-njVneDyiXxk.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pm ky7ws-njvnedyixxk.docx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e31bb0, ftCreationTime.dwHighDateTime=0x1d52db7, ftLastAccessTime.dwLowDateTime=0xb6bf34f0, ftLastAccessTime.dwHighDateTime=0x1d52d9c, ftLastWriteTime.dwLowDateTime=0xb6bf34f0, ftLastWriteTime.dwHighDateTime=0x1d52d9c, nFileSizeHigh=0x0, nFileSizeLow=0x189ce)) returned 1 [0138.253] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/pM kY7wS-njVneDyiXxk.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pm ky7ws-njvnedyixxk.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.253] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.253] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.254] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0138.254] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.255] SwitchToThread () returned 1 [0138.255] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.259] SetEvent (hEvent=0x7c) returned 1 [0138.259] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.262] SetEvent (hEvent=0x7c) returned 1 [0138.262] SwitchToThread () returned 1 [0138.262] SetEvent (hEvent=0x7c) returned 1 [0138.262] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.264] SetEvent (hEvent=0xb8) returned 1 [0138.264] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.265] SetEvent (hEvent=0xb8) returned 1 [0138.265] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.267] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.267] SetEvent (hEvent=0xb8) returned 1 [0138.267] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x5e7e, lpOverlapped=0x0) returned 1 [0138.268] GetFileType (hFile=0x154) returned 0x1 [0138.269] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.269] WriteFile (in: hFile=0x154, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x5e7e, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429b48*=0x5e7e, lpOverlapped=0x12429b54) returned 1 [0138.269] GetFileType (hFile=0x154) returned 0x1 [0138.269] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x5e7e, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.269] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.269] CloseHandle (hObject=0x154) returned 1 [0138.269] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/sAkuVSaLJ-Nqxr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sakuvsalj-nqxr.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.269] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.269] WriteFile (in: hFile=0x154, lpBuffer=0x12650240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12650240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.269] CloseHandle (hObject=0x154) returned 1 [0138.270] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x59, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x1242981c*=0x59) returned 1 [0138.270] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.270] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.270] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.270] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.270] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.270] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.270] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0138.271] CloseHandle (hObject=0x154) returned 1 [0138.271] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.271] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.271] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.272] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.272] WriteFile (in: hFile=0x154, lpBuffer=0x1257c000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x1257c000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.273] CloseHandle (hObject=0x154) returned 1 [0138.273] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.273] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.273] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80ef1030, ftCreationTime.dwHighDateTime=0x1d4cd47, ftLastAccessTime.dwLowDateTime=0x3d64420, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3d64420, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.274] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80ef1030, ftCreationTime.dwHighDateTime=0x1d4cd47, ftLastAccessTime.dwLowDateTime=0x3d64420, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3d64420, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.274] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a119c0, ftCreationTime.dwHighDateTime=0x1d4c552, ftLastAccessTime.dwLowDateTime=0xd8a699d0, ftLastAccessTime.dwHighDateTime=0x1d4cb56, ftLastWriteTime.dwLowDateTime=0xd8a699d0, ftLastWriteTime.dwHighDateTime=0x1d4cb56, nFileSizeHigh=0x0, nFileSizeLow=0x3ac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="-_eoWhtTWzZx_RH7soy5.ods", cAlternateFileName="-_EOWH~1.ODS")) returned 1 [0138.274] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x3d64420, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x3d64420, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3d8a580, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.274] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c0c2010, ftCreationTime.dwHighDateTime=0x1d4cc00, ftLastAccessTime.dwLowDateTime=0xff620ce0, ftLastAccessTime.dwHighDateTime=0x1d4cf56, ftLastWriteTime.dwLowDateTime=0xff620ce0, ftLastWriteTime.dwHighDateTime=0x1d4cf56, nFileSizeHigh=0x0, nFileSizeLow=0x176c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ck Fg7_Zs7glJ.pdf", cAlternateFileName="CKFG7_~1.PDF")) returned 1 [0138.274] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd583460, ftCreationTime.dwHighDateTime=0x1d4c6e4, ftLastAccessTime.dwLowDateTime=0x831a7300, ftLastAccessTime.dwHighDateTime=0x1d4d39a, ftLastWriteTime.dwLowDateTime=0x831a7300, ftLastWriteTime.dwHighDateTime=0x1d4d39a, nFileSizeHigh=0x0, nFileSizeLow=0x34b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EwYE3NR3ncJ7eHCrP.pptx", cAlternateFileName="EWYE3N~1.PPT")) returned 1 [0138.274] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90935080, ftCreationTime.dwHighDateTime=0x1d4cf6f, ftLastAccessTime.dwLowDateTime=0x1b466740, ftLastAccessTime.dwHighDateTime=0x1d4ce3e, ftLastWriteTime.dwLowDateTime=0x1b466740, ftLastWriteTime.dwHighDateTime=0x1d4ce3e, nFileSizeHigh=0x0, nFileSizeLow=0xbf9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGT3yJWly.ods", cAlternateFileName="PGT3YJ~1.ODS")) returned 1 [0138.274] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.274] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.274] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/-_eoWhtTWzZx_RH7soy5.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\-_eowhttwzzx_rh7soy5.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.274] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.275] ReadFile (in: hFile=0x154, lpBuffer=0x124bc000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.275] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.275] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.276] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/EwYE3NR3ncJ7eHCrP.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\ewye3nr3ncj7ehcrp.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0138.276] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.276] ReadFile (in: hFile=0x120, lpBuffer=0x124bc100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124bc100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.277] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/PGT3yJWly.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\pgt3yjwly.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.277] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.277] ReadFile (in: hFile=0x27c, lpBuffer=0x124bc300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124bc300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.278] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/ck Fg7_Zs7glJ.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\ck fg7_zs7glj.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.278] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.278] ReadFile (in: hFile=0x15c, lpBuffer=0x124bc400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124bc400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.279] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/-_eoWhtTWzZx_RH7soy5.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\-_eowhttwzzx_rh7soy5.ods"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a119c0, ftCreationTime.dwHighDateTime=0x1d4c552, ftLastAccessTime.dwLowDateTime=0xd8a699d0, ftLastAccessTime.dwHighDateTime=0x1d4cb56, ftLastWriteTime.dwLowDateTime=0xd8a699d0, ftLastWriteTime.dwHighDateTime=0x1d4cb56, nFileSizeHigh=0x0, nFileSizeLow=0x3ac4)) returned 1 [0138.279] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/-_eoWhtTWzZx_RH7soy5.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\-_eowhttwzzx_rh7soy5.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.279] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.279] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e180 | out: pbBuffer=0x1249e180) returned 1 [0138.280] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc502 | out: pbBuffer=0x124bc502) returned 1 [0138.280] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc514 | out: pbBuffer=0x124bc514) returned 1 [0138.281] SetEvent (hEvent=0x7c) returned 1 [0138.281] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x3ac4, lpOverlapped=0x0) returned 1 [0138.281] GetFileType (hFile=0x190) returned 0x1 [0138.281] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.281] WriteFile (in: hFile=0x190, lpBuffer=0x1249a000*, nNumberOfBytesToWrite=0x3ac4, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1249a000*, lpNumberOfBytesWritten=0x12429aa0*=0x3ac4, lpOverlapped=0x12429aac) returned 1 [0138.282] GetFileType (hFile=0x190) returned 0x1 [0138.282] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3ac4, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.282] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.282] CloseHandle (hObject=0x190) returned 1 [0138.282] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/-_eoWhtTWzZx_RH7soy5.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\-_eowhttwzzx_rh7soy5.ods"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.282] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.282] WriteFile (in: hFile=0x190, lpBuffer=0x12650fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12650fc0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.282] CloseHandle (hObject=0x190) returned 1 [0138.282] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127785b0*, nNumberOfCharsToWrite=0x67, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127785b0*, lpNumberOfCharsWritten=0x12429774*=0x67) returned 1 [0138.283] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/EwYE3NR3ncJ7eHCrP.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\ewye3nr3ncj7ehcrp.pptx"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd583460, ftCreationTime.dwHighDateTime=0x1d4c6e4, ftLastAccessTime.dwLowDateTime=0x831a7300, ftLastAccessTime.dwHighDateTime=0x1d4d39a, ftLastWriteTime.dwLowDateTime=0x831a7300, ftLastWriteTime.dwHighDateTime=0x1d4d39a, nFileSizeHigh=0x0, nFileSizeLow=0x34b8)) returned 1 [0138.283] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/EwYE3NR3ncJ7eHCrP.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\ewye3nr3ncj7ehcrp.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.283] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.283] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.284] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0138.285] CloseHandle (hObject=0x15c) returned 1 [0138.285] CloseHandle (hObject=0x27c) returned 1 [0138.285] CloseHandle (hObject=0x120) returned 1 [0138.285] CloseHandle (hObject=0x154) returned 1 [0138.285] SwitchToThread () returned 1 [0138.285] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.288] SetEvent (hEvent=0xb8) returned 1 [0138.288] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.290] SetEvent (hEvent=0xb8) returned 1 [0138.290] SwitchToThread () returned 1 [0138.291] SetEvent (hEvent=0xb8) returned 1 [0138.291] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.293] SetEvent (hEvent=0x7c) returned 1 [0138.293] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.294] SetEvent (hEvent=0x7c) returned 1 [0138.294] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.296] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.296] SetEvent (hEvent=0x7c) returned 1 [0138.296] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x176c8, lpOverlapped=0x0) returned 1 [0138.298] GetFileType (hFile=0x190) returned 0x1 [0138.298] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.298] WriteFile (in: hFile=0x190, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x176c8, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x176c8, lpOverlapped=0x12429aac) returned 1 [0138.298] GetFileType (hFile=0x190) returned 0x1 [0138.298] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x176c8, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.298] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.298] CloseHandle (hObject=0x190) returned 1 [0138.299] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/ck Fg7_Zs7glJ.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\ck fg7_zs7glj.pdf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.299] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.300] WriteFile (in: hFile=0x190, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.300] CloseHandle (hObject=0x190) returned 1 [0138.300] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1245e0c0*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1245e0c0*, lpNumberOfCharsWritten=0x12429774*=0x60) returned 1 [0138.300] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.300] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.301] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.301] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.301] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.301] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.301] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0138.301] CloseHandle (hObject=0x190) returned 1 [0138.301] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.301] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.301] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.302] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.302] WriteFile (in: hFile=0x190, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.303] CloseHandle (hObject=0x190) returned 1 [0138.303] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.303] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.304] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94294980, ftCreationTime.dwHighDateTime=0x1d4ca82, ftLastAccessTime.dwLowDateTime=0x3dba320, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3dba320, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.304] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94294980, ftCreationTime.dwHighDateTime=0x1d4ca82, ftLastAccessTime.dwLowDateTime=0x3dba320, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3dba320, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.304] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaff24070, ftCreationTime.dwHighDateTime=0x1d4cfbb, ftLastAccessTime.dwLowDateTime=0x43d10de0, ftLastAccessTime.dwHighDateTime=0x1d4d524, ftLastWriteTime.dwLowDateTime=0x43d10de0, ftLastWriteTime.dwHighDateTime=0x1d4d524, nFileSizeHigh=0x0, nFileSizeLow=0x17392, dwReserved0=0x0, dwReserved1=0x0, cFileName="9G9yI2epAl1Q0rj4.csv", cAlternateFileName="9G9YI2~1.CSV")) returned 1 [0138.304] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x3dba320, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x3dba320, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3dba320, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.304] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29fee280, ftCreationTime.dwHighDateTime=0x1d4d44c, ftLastAccessTime.dwLowDateTime=0x29dba5d0, ftLastAccessTime.dwHighDateTime=0x1d4cfe8, ftLastWriteTime.dwLowDateTime=0x29dba5d0, ftLastWriteTime.dwHighDateTime=0x1d4cfe8, nFileSizeHigh=0x0, nFileSizeLow=0x18070, dwReserved0=0x0, dwReserved1=0x0, cFileName="c1HQNrRu.docx", cAlternateFileName="C1HQNR~1.DOC")) returned 1 [0138.304] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f32aa0, ftCreationTime.dwHighDateTime=0x1d4d27f, ftLastAccessTime.dwLowDateTime=0x88366b10, ftLastAccessTime.dwHighDateTime=0x1d4c89f, ftLastWriteTime.dwLowDateTime=0x88366b10, ftLastWriteTime.dwHighDateTime=0x1d4c89f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUIYKD5UBgBPtrI", cAlternateFileName="EUIYKD~1")) returned 1 [0138.304] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d795f70, ftCreationTime.dwHighDateTime=0x1d4cb00, ftLastAccessTime.dwLowDateTime=0x4e5c4530, ftLastAccessTime.dwHighDateTime=0x1d4cfe4, ftLastWriteTime.dwLowDateTime=0x4e5c4530, ftLastWriteTime.dwHighDateTime=0x1d4cfe4, nFileSizeHigh=0x0, nFileSizeLow=0x1369c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gnyq.csv", cAlternateFileName="")) returned 1 [0138.304] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca16c940, ftCreationTime.dwHighDateTime=0x1d4c619, ftLastAccessTime.dwLowDateTime=0xec2fc400, ftLastAccessTime.dwHighDateTime=0x1d4c600, ftLastWriteTime.dwLowDateTime=0xec2fc400, ftLastWriteTime.dwHighDateTime=0x1d4c600, nFileSizeHigh=0x0, nFileSizeLow=0x13fea, dwReserved0=0x0, dwReserved1=0x0, cFileName="nS JzGm_7m.pptx", cAlternateFileName="NSJZGM~1.PPT")) returned 1 [0138.304] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1212f3d0, ftCreationTime.dwHighDateTime=0x1d4d2e6, ftLastAccessTime.dwLowDateTime=0xee39300, ftLastAccessTime.dwHighDateTime=0x1d4d27c, ftLastWriteTime.dwLowDateTime=0xee39300, ftLastWriteTime.dwHighDateTime=0x1d4d27c, nFileSizeHigh=0x0, nFileSizeLow=0xe9be, dwReserved0=0x0, dwReserved1=0x0, cFileName="o-MKyp06h8MMK3Nef_sT.odp", cAlternateFileName="O-MKYP~1.ODP")) returned 1 [0138.304] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb033600, ftCreationTime.dwHighDateTime=0x1d4cd9c, ftLastAccessTime.dwLowDateTime=0x7bbdc10, ftLastAccessTime.dwHighDateTime=0x1d4cf37, ftLastWriteTime.dwLowDateTime=0x7bbdc10, ftLastWriteTime.dwHighDateTime=0x1d4cf37, nFileSizeHigh=0x0, nFileSizeLow=0x18500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Red6Mz4FPbX NpVD.csv", cAlternateFileName="RED6MZ~1.CSV")) returned 1 [0138.304] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26e9430, ftCreationTime.dwHighDateTime=0x1d4c741, ftLastAccessTime.dwLowDateTime=0x720b3770, ftLastAccessTime.dwHighDateTime=0x1d4ce45, ftLastWriteTime.dwLowDateTime=0x720b3770, ftLastWriteTime.dwHighDateTime=0x1d4ce45, nFileSizeHigh=0x0, nFileSizeLow=0xacf, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbJL3EO4YpHWj8imabS.rtf", cAlternateFileName="SBJL3E~1.RTF")) returned 1 [0138.304] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe40e7d10, ftCreationTime.dwHighDateTime=0x1d4cffc, ftLastAccessTime.dwLowDateTime=0xbf5ec000, ftLastAccessTime.dwHighDateTime=0x1d4cf53, ftLastWriteTime.dwLowDateTime=0xbf5ec000, ftLastWriteTime.dwHighDateTime=0x1d4cf53, nFileSizeHigh=0x0, nFileSizeLow=0x175dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="uv yhbvocPo.ppt", cAlternateFileName="UVYHBV~1.PPT")) returned 1 [0138.304] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d39070, ftCreationTime.dwHighDateTime=0x1d4d504, ftLastAccessTime.dwLowDateTime=0x36acaf00, ftLastAccessTime.dwHighDateTime=0x1d4d4db, ftLastWriteTime.dwLowDateTime=0x36acaf00, ftLastWriteTime.dwHighDateTime=0x1d4d4db, nFileSizeHigh=0x0, nFileSizeLow=0xad60, dwReserved0=0x0, dwReserved1=0x0, cFileName="wDFQJE7tGXQQFyWMNQ.odt", cAlternateFileName="WDFQJE~1.ODT")) returned 1 [0138.304] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.304] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/9G9yI2epAl1Q0rj4.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\9g9yi2epal1q0rj4.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.305] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.305] ReadFile (in: hFile=0x190, lpBuffer=0x124c8000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.306] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.306] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f32aa0, ftCreationTime.dwHighDateTime=0x1d4d27f, ftLastAccessTime.dwLowDateTime=0x88366b10, ftLastAccessTime.dwHighDateTime=0x1d4c89f, ftLastWriteTime.dwLowDateTime=0x88366b10, ftLastWriteTime.dwHighDateTime=0x1d4c89f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.306] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/Gnyq.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\gnyq.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.306] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.306] ReadFile (in: hFile=0x154, lpBuffer=0x124c8100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.307] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/Red6Mz4FPbX NpVD.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\red6mz4fpbx npvd.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0138.307] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.308] ReadFile (in: hFile=0x120, lpBuffer=0x124c8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.308] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/c1HQNrRu.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\c1hqnrru.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.309] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.309] ReadFile (in: hFile=0x27c, lpBuffer=0x124c8400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.310] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/nS JzGm_7m.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\ns jzgm_7m.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.310] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.310] ReadFile (in: hFile=0x15c, lpBuffer=0x124c8500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.311] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/o-MKyp06h8MMK3Nef_sT.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\o-mkyp06h8mmk3nef_st.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.311] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.311] ReadFile (in: hFile=0xfc, lpBuffer=0x124c8600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.312] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/sbJL3EO4YpHWj8imabS.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\sbjl3eo4yphwj8imabs.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0138.312] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.312] ReadFile (in: hFile=0x104, lpBuffer=0x124c8700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8700*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.313] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/uv yhbvocPo.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\uv yhbvocpo.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0138.313] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.313] ReadFile (in: hFile=0xf0, lpBuffer=0x124c8800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8800*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.314] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/wDFQJE7tGXQQFyWMNQ.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\wdfqje7tgxqqfywmnq.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0138.314] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.314] ReadFile (in: hFile=0xe4, lpBuffer=0x124c8900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8900*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.315] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/9G9yI2epAl1Q0rj4.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\9g9yi2epal1q0rj4.csv"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaff24070, ftCreationTime.dwHighDateTime=0x1d4cfbb, ftLastAccessTime.dwLowDateTime=0x43d10de0, ftLastAccessTime.dwHighDateTime=0x1d4d524, ftLastWriteTime.dwLowDateTime=0x43d10de0, ftLastWriteTime.dwHighDateTime=0x1d4d524, nFileSizeHigh=0x0, nFileSizeLow=0x17392)) returned 1 [0138.315] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/9G9yI2epAl1Q0rj4.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\9g9yi2epal1q0rj4.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.315] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.315] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442360 | out: pbBuffer=0x12442360) returned 1 [0138.316] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8a02 | out: pbBuffer=0x124c8a02) returned 1 [0138.316] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c8a40 | out: pbBuffer=0x124c8a40) returned 1 [0138.317] SetEvent (hEvent=0xb8) returned 1 [0138.317] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x17392, lpOverlapped=0x0) returned 1 [0138.318] GetFileType (hFile=0x144) returned 0x1 [0138.318] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.318] WriteFile (in: hFile=0x144, lpBuffer=0x1274e000*, nNumberOfBytesToWrite=0x17392, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1274e000*, lpNumberOfBytesWritten=0x12429aa0*=0x17392, lpOverlapped=0x12429aac) returned 1 [0138.319] GetFileType (hFile=0x144) returned 0x1 [0138.319] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x17392, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.319] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.319] CloseHandle (hObject=0x144) returned 1 [0138.319] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/9G9yI2epAl1Q0rj4.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\9g9yi2epal1q0rj4.csv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.319] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.319] WriteFile (in: hFile=0x144, lpBuffer=0x127c8fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8fc0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.320] CloseHandle (hObject=0x144) returned 1 [0138.320] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc1a0*, nNumberOfCharsToWrite=0x63, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124bc1a0*, lpNumberOfCharsWritten=0x12429774*=0x63) returned 1 [0138.320] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/Gnyq.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\gnyq.csv"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d795f70, ftCreationTime.dwHighDateTime=0x1d4cb00, ftLastAccessTime.dwLowDateTime=0x4e5c4530, ftLastAccessTime.dwHighDateTime=0x1d4cfe4, ftLastWriteTime.dwLowDateTime=0x4e5c4530, ftLastWriteTime.dwHighDateTime=0x1d4cfe4, nFileSizeHigh=0x0, nFileSizeLow=0x1369c)) returned 1 [0138.320] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/Gnyq.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\gnyq.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.320] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.320] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.321] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2074 | out: pbBuffer=0x124e2074) returned 1 [0138.321] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.321] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c80b7 | out: pbBuffer=0x124c80b7) returned 1 [0138.322] CloseHandle (hObject=0xe4) returned 1 [0138.322] CloseHandle (hObject=0xf0) returned 1 [0138.322] CloseHandle (hObject=0x104) returned 1 [0138.322] CloseHandle (hObject=0xfc) returned 1 [0138.323] CloseHandle (hObject=0x15c) returned 1 [0138.323] CloseHandle (hObject=0x27c) returned 1 [0138.323] CloseHandle (hObject=0x120) returned 1 [0138.323] CloseHandle (hObject=0x154) returned 1 [0138.323] CloseHandle (hObject=0x190) returned 1 [0138.323] SwitchToThread () returned 1 [0138.323] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.326] SetEvent (hEvent=0x7c) returned 1 [0138.326] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.329] SetEvent (hEvent=0x7c) returned 1 [0138.329] SwitchToThread () returned 1 [0138.329] SetEvent (hEvent=0x7c) returned 1 [0138.329] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.331] SetEvent (hEvent=0xb8) returned 1 [0138.332] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.333] SetEvent (hEvent=0xb8) returned 1 [0138.333] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0138.335] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.335] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.335] SetEvent (hEvent=0xac) returned 1 [0138.335] SetEvent (hEvent=0xb8) returned 1 [0138.335] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x18070, lpOverlapped=0x0) returned 1 [0138.337] GetFileType (hFile=0x144) returned 0x1 [0138.337] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.337] WriteFile (in: hFile=0x144, lpBuffer=0x1274e000*, nNumberOfBytesToWrite=0x18070, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1274e000*, lpNumberOfBytesWritten=0x12429aa0*=0x18070, lpOverlapped=0x12429aac) returned 1 [0138.337] GetFileType (hFile=0x144) returned 0x1 [0138.337] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x18070, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.337] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.337] CloseHandle (hObject=0x144) returned 1 [0138.338] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/c1HQNrRu.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\c1hqnrru.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.338] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.338] WriteFile (in: hFile=0x144, lpBuffer=0x124c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c0240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.338] CloseHandle (hObject=0x144) returned 1 [0138.338] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x125b0000*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x125b0000*, lpNumberOfCharsWritten=0x12429774*=0x5c) returned 1 [0138.339] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/nS JzGm_7m.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\ns jzgm_7m.pptx"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca16c940, ftCreationTime.dwHighDateTime=0x1d4c619, ftLastAccessTime.dwLowDateTime=0xec2fc400, ftLastAccessTime.dwHighDateTime=0x1d4c600, ftLastWriteTime.dwLowDateTime=0xec2fc400, ftLastWriteTime.dwHighDateTime=0x1d4c600, nFileSizeHigh=0x0, nFileSizeLow=0x13fea)) returned 1 [0138.339] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/nS JzGm_7m.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\ns jzgm_7m.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.339] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.339] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.340] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.340] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c80cc | out: pbBuffer=0x124c80cc) returned 1 [0138.341] SwitchToThread () returned 1 [0138.341] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.344] SetEvent (hEvent=0x7c) returned 1 [0138.344] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.347] SetEvent (hEvent=0x7c) returned 1 [0138.347] SwitchToThread () returned 1 [0138.347] SetEvent (hEvent=0x7c) returned 1 [0138.347] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.349] SetEvent (hEvent=0xb8) returned 1 [0138.349] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.350] SetEvent (hEvent=0xb8) returned 1 [0138.350] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0138.353] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.353] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.353] SetEvent (hEvent=0xac) returned 1 [0138.353] SetEvent (hEvent=0xb8) returned 1 [0138.353] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xacf, lpOverlapped=0x0) returned 1 [0138.354] GetFileType (hFile=0x144) returned 0x1 [0138.354] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.354] WriteFile (in: hFile=0x144, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0xacf, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429aa0*=0xacf, lpOverlapped=0x12429aac) returned 1 [0138.354] GetFileType (hFile=0x144) returned 0x1 [0138.354] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xacf, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.354] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.354] CloseHandle (hObject=0x144) returned 1 [0138.354] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/sbJL3EO4YpHWj8imabS.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\sbjl3eo4yphwj8imabs.rtf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.354] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.355] WriteFile (in: hFile=0x144, lpBuffer=0x124c06c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c06c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.355] CloseHandle (hObject=0x144) returned 1 [0138.355] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1265e0d0*, nNumberOfCharsToWrite=0x66, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1265e0d0*, lpNumberOfCharsWritten=0x12429774*=0x66) returned 1 [0138.355] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/uv yhbvocPo.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\uv yhbvocpo.ppt"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe40e7d10, ftCreationTime.dwHighDateTime=0x1d4cffc, ftLastAccessTime.dwLowDateTime=0xbf5ec000, ftLastAccessTime.dwHighDateTime=0x1d4cf53, ftLastWriteTime.dwLowDateTime=0xbf5ec000, ftLastWriteTime.dwHighDateTime=0x1d4cf53, nFileSizeHigh=0x0, nFileSizeLow=0x175dc)) returned 1 [0138.355] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/uv yhbvocPo.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\uv yhbvocpo.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.355] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.356] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.356] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.357] SwitchToThread () returned 1 [0138.358] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.361] SetEvent (hEvent=0x7c) returned 1 [0138.361] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.363] SetEvent (hEvent=0x7c) returned 1 [0138.363] SwitchToThread () returned 1 [0138.364] SetEvent (hEvent=0x7c) returned 1 [0138.364] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.365] SetEvent (hEvent=0xb8) returned 1 [0138.365] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.367] SetEvent (hEvent=0xb8) returned 1 [0138.367] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0138.368] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.368] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.379] SetEvent (hEvent=0xb8) returned 1 [0138.379] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.382] SetEvent (hEvent=0xb8) returned 1 [0138.382] SwitchToThread () returned 1 [0138.383] SetEvent (hEvent=0xb8) returned 1 [0138.383] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.385] SetEvent (hEvent=0x7c) returned 1 [0138.385] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.386] SetEvent (hEvent=0x7c) returned 1 [0138.386] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.388] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.388] SetEvent (hEvent=0x7c) returned 1 [0138.388] ReadFile (in: hFile=0x27c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x1039, lpOverlapped=0x0) returned 1 [0138.389] GetFileType (hFile=0x27c) returned 0x1 [0138.389] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.389] WriteFile (in: hFile=0x27c, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1039, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x124299f8*=0x1039, lpOverlapped=0x12429a04) returned 1 [0138.389] GetFileType (hFile=0x27c) returned 0x1 [0138.389] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x1039, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.389] ReadFile (in: hFile=0x27c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0138.389] CloseHandle (hObject=0x27c) returned 1 [0138.389] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/zVqSpAPcuQk0xpgn.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\zvqspapcuqk0xpgn.csv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.389] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.390] WriteFile (in: hFile=0x27c, lpBuffer=0x127c06c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x127c06c0*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0138.390] CloseHandle (hObject=0x27c) returned 1 [0138.390] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b60f0*, nNumberOfCharsToWrite=0x73, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124b60f0*, lpNumberOfCharsWritten=0x124296cc*=0x73) returned 1 [0138.390] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/zaN83FfpylnaUubw5l.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\zan83ffpylnauubw5l.rtf"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x677f390, ftCreationTime.dwHighDateTime=0x1d4ca17, ftLastAccessTime.dwLowDateTime=0xb757bc90, ftLastAccessTime.dwHighDateTime=0x1d4cff3, ftLastWriteTime.dwLowDateTime=0xb757bc90, ftLastWriteTime.dwHighDateTime=0x1d4cff3, nFileSizeHigh=0x0, nFileSizeLow=0xf791)) returned 1 [0138.390] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/zaN83FfpylnaUubw5l.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\zan83ffpylnauubw5l.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.390] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.391] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.391] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.391] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c8075 | out: pbBuffer=0x124c8075) returned 1 [0138.392] SwitchToThread () returned 1 [0138.393] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.395] SetEvent (hEvent=0xb8) returned 1 [0138.395] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.397] SetEvent (hEvent=0xb8) returned 1 [0138.397] SwitchToThread () returned 1 [0138.400] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.444] SetEvent (hEvent=0xb8) returned 1 [0138.444] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0138.445] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.445] SetEvent (hEvent=0xb8) returned 1 [0138.445] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0138.446] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.446] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.534] SwitchToThread () returned 1 [0138.534] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.537] SetEvent (hEvent=0xa8) returned 1 [0138.537] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.538] SetEvent (hEvent=0xa8) returned 1 [0138.538] SwitchToThread () returned 1 [0138.540] SetEvent (hEvent=0xb8) returned 1 [0138.540] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.543] SetEvent (hEvent=0xa8) returned 1 [0138.543] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.544] SetEvent (hEvent=0xa8) returned 1 [0138.544] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.546] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.546] SetEvent (hEvent=0xa8) returned 1 [0138.546] ReadFile (in: hFile=0xfc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x17773, lpOverlapped=0x0) returned 1 [0138.548] GetFileType (hFile=0xfc) returned 0x1 [0138.548] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.548] WriteFile (in: hFile=0xfc, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x17773, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x17773, lpOverlapped=0x12429aac) returned 1 [0138.548] GetFileType (hFile=0xfc) returned 0x1 [0138.548] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x17773, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.548] ReadFile (in: hFile=0xfc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.548] CloseHandle (hObject=0xfc) returned 1 [0138.548] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/W3GREwiMqRPSTDNz-94.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\w3grewimqrpstdnz-94.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.549] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.549] WriteFile (in: hFile=0xfc, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.549] CloseHandle (hObject=0xfc) returned 1 [0138.549] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12576000*, nNumberOfCharsToWrite=0x6d, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x12576000*, lpNumberOfCharsWritten=0x12429774*=0x6d) returned 1 [0138.549] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/dxlu_gWJuQJE0QfuQm.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\dxlu_gwjuqje0qfuqm.csv"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x396c54f0, ftCreationTime.dwHighDateTime=0x1d4cd6c, ftLastAccessTime.dwLowDateTime=0xd0ca83e0, ftLastAccessTime.dwHighDateTime=0x1d4c749, ftLastWriteTime.dwLowDateTime=0xd0ca83e0, ftLastWriteTime.dwHighDateTime=0x1d4c749, nFileSizeHigh=0x0, nFileSizeLow=0x184bf)) returned 1 [0138.550] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/dxlu_gWJuQJE0QfuQm.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\dxlu_gwjuqje0qfuqm.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.550] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.550] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.551] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.551] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c80c6 | out: pbBuffer=0x124c80c6) returned 1 [0138.551] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c80d4 | out: pbBuffer=0x124c80d4) returned 1 [0138.552] SwitchToThread () returned 1 [0138.552] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.555] SetEvent (hEvent=0xb8) returned 1 [0138.555] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.557] SetEvent (hEvent=0xb8) returned 1 [0138.557] SwitchToThread () returned 1 [0138.558] SetEvent (hEvent=0xb8) returned 1 [0138.558] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.560] SetEvent (hEvent=0xa8) returned 1 [0138.560] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.562] SetEvent (hEvent=0xa8) returned 1 [0138.562] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.566] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.573] SetEvent (hEvent=0xa8) returned 1 [0138.606] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.609] SetEvent (hEvent=0xa8) returned 1 [0138.609] SwitchToThread () returned 1 [0138.609] SetEvent (hEvent=0xa8) returned 1 [0138.609] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.612] SetEvent (hEvent=0xb8) returned 1 [0138.612] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.613] SetEvent (hEvent=0xb8) returned 1 [0138.613] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.615] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.615] SetEvent (hEvent=0xb8) returned 1 [0138.615] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x7be2, lpOverlapped=0x0) returned 1 [0138.616] GetFileType (hFile=0x144) returned 0x1 [0138.616] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.616] WriteFile (in: hFile=0x144, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x7be2, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x124299f8*=0x7be2, lpOverlapped=0x12429a04) returned 1 [0138.616] GetFileType (hFile=0x144) returned 0x1 [0138.616] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x7be2, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.616] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0138.616] CloseHandle (hObject=0x144) returned 1 [0138.617] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/j_avE.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\j_ave.ots"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.617] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.617] WriteFile (in: hFile=0x144, lpBuffer=0x125726c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x125726c0*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0138.617] CloseHandle (hObject=0x144) returned 1 [0138.617] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12584000*, nNumberOfCharsToWrite=0x73, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x12584000*, lpNumberOfCharsWritten=0x124296cc*=0x73) returned 1 [0138.617] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.618] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.618] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.618] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.618] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.618] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.618] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0138.618] CloseHandle (hObject=0x144) returned 1 [0138.618] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.618] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.618] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.619] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.619] WriteFile (in: hFile=0x144, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.620] CloseHandle (hObject=0x144) returned 1 [0138.620] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.620] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.621] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.621] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1a73310, ftCreationTime.dwHighDateTime=0x1d4d292, ftLastAccessTime.dwLowDateTime=0x40ae8b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x40ae8b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1a73310, ftCreationTime.dwHighDateTime=0x1d4d292, ftLastAccessTime.dwLowDateTime=0x40ae8b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x40ae8b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1bb6f70, ftCreationTime.dwHighDateTime=0x1d4d532, ftLastAccessTime.dwLowDateTime=0x8689ffb0, ftLastAccessTime.dwHighDateTime=0x1d4c904, ftLastWriteTime.dwLowDateTime=0x8689ffb0, ftLastWriteTime.dwHighDateTime=0x1d4c904, nFileSizeHigh=0x0, nFileSizeLow=0x144d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="0qqT.odt", cAlternateFileName="")) returned 1 [0138.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50d8cae0, ftCreationTime.dwHighDateTime=0x1d4cc97, ftLastAccessTime.dwLowDateTime=0x6f3f1f90, ftLastAccessTime.dwHighDateTime=0x1d4c8e9, ftLastWriteTime.dwLowDateTime=0x6f3f1f90, ftLastWriteTime.dwHighDateTime=0x1d4c8e9, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="0sV0pYP16jqJm.ppt", cAlternateFileName="0SV0PY~1.PPT")) returned 1 [0138.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd07f980, ftCreationTime.dwHighDateTime=0x1d4ce7c, ftLastAccessTime.dwLowDateTime=0x84757c60, ftLastAccessTime.dwHighDateTime=0x1d4cd8a, ftLastWriteTime.dwLowDateTime=0x84757c60, ftLastWriteTime.dwHighDateTime=0x1d4cd8a, nFileSizeHigh=0x0, nFileSizeLow=0xb433, dwReserved0=0x0, dwReserved1=0x0, cFileName="1zDEJQ7IF9i.xls", cAlternateFileName="1ZDEJQ~1.XLS")) returned 1 [0138.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x40ae8b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x40ae8b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x40ae8b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce108300, ftCreationTime.dwHighDateTime=0x1d4d439, ftLastAccessTime.dwLowDateTime=0x78ede80, ftLastAccessTime.dwHighDateTime=0x1d4c6b9, ftLastWriteTime.dwLowDateTime=0x78ede80, ftLastWriteTime.dwHighDateTime=0x1d4c6b9, nFileSizeHigh=0x0, nFileSizeLow=0xe84, dwReserved0=0x0, dwReserved1=0x0, cFileName="ezUZg.pptx", cAlternateFileName="EZUZG~1.PPT")) returned 1 [0138.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c69a830, ftCreationTime.dwHighDateTime=0x1d4d0ef, ftLastAccessTime.dwLowDateTime=0xf1f61440, ftLastAccessTime.dwHighDateTime=0x1d4cfea, ftLastWriteTime.dwLowDateTime=0xf1f61440, ftLastWriteTime.dwHighDateTime=0x1d4cfea, nFileSizeHigh=0x0, nFileSizeLow=0xa63a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fb_AJFIS_ruXp.odp", cAlternateFileName="FB_AJF~1.ODP")) returned 1 [0138.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c02bf00, ftCreationTime.dwHighDateTime=0x1d4c96d, ftLastAccessTime.dwLowDateTime=0xd11e8940, ftLastAccessTime.dwHighDateTime=0x1d4cd89, ftLastWriteTime.dwLowDateTime=0xd11e8940, ftLastWriteTime.dwHighDateTime=0x1d4cd89, nFileSizeHigh=0x0, nFileSizeLow=0x18e38, dwReserved0=0x0, dwReserved1=0x0, cFileName="n0n _myNdMvr9i.rtf", cAlternateFileName="N0N_MY~1.RTF")) returned 1 [0138.621] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.621] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.621] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/0qqT.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\0qqt.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.622] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.622] ReadFile (in: hFile=0x144, lpBuffer=0x124c0000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.623] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/0sV0pYP16jqJm.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\0sv0pyp16jqjm.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.623] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.623] ReadFile (in: hFile=0xfc, lpBuffer=0x124c0200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c0200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.624] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/1zDEJQ7IF9i.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\1zdejq7if9i.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0138.624] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.624] ReadFile (in: hFile=0x120, lpBuffer=0x124c0400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c0400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.625] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.625] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.625] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/Fb_AJFIS_ruXp.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\fb_ajfis_ruxp.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.625] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.625] ReadFile (in: hFile=0x27c, lpBuffer=0x124c0500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c0500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.626] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/ezUZg.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\ezuzg.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.626] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.627] ReadFile (in: hFile=0x190, lpBuffer=0x124c0600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c0600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.628] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/n0n _myNdMvr9i.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\n0n _myndmvr9i.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.628] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.628] ReadFile (in: hFile=0x154, lpBuffer=0x124c0700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c0700*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.629] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/0qqT.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\0qqt.odt"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1bb6f70, ftCreationTime.dwHighDateTime=0x1d4d532, ftLastAccessTime.dwLowDateTime=0x8689ffb0, ftLastAccessTime.dwHighDateTime=0x1d4c904, ftLastWriteTime.dwLowDateTime=0x8689ffb0, ftLastWriteTime.dwHighDateTime=0x1d4c904, nFileSizeHigh=0x0, nFileSizeLow=0x144d4)) returned 1 [0138.629] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/0qqT.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\0qqt.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.629] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.629] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124422e0 | out: pbBuffer=0x124422e0) returned 1 [0138.630] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c0802 | out: pbBuffer=0x124c0802) returned 1 [0138.631] SetEvent (hEvent=0xa8) returned 1 [0138.631] ReadFile (in: hFile=0x15c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x144d4, lpOverlapped=0x0) returned 1 [0138.632] GetFileType (hFile=0x15c) returned 0x1 [0138.632] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.632] WriteFile (in: hFile=0x15c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x144d4, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x144d4, lpOverlapped=0x12429aac) returned 1 [0138.633] GetFileType (hFile=0x15c) returned 0x1 [0138.633] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x144d4, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.633] ReadFile (in: hFile=0x15c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.633] CloseHandle (hObject=0x15c) returned 1 [0138.633] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/0qqT.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\0qqt.odt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.633] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.633] WriteFile (in: hFile=0x15c, lpBuffer=0x12573b00*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12573b00*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.633] CloseHandle (hObject=0x15c) returned 1 [0138.634] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fc000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fc000*, lpNumberOfCharsWritten=0x12429774*=0x55) returned 1 [0138.634] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/0sV0pYP16jqJm.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\0sv0pyp16jqjm.ppt"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50d8cae0, ftCreationTime.dwHighDateTime=0x1d4cc97, ftLastAccessTime.dwLowDateTime=0x6f3f1f90, ftLastAccessTime.dwHighDateTime=0x1d4c8e9, ftLastWriteTime.dwLowDateTime=0x6f3f1f90, ftLastWriteTime.dwHighDateTime=0x1d4c8e9, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c)) returned 1 [0138.634] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/0sV0pYP16jqJm.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\0sv0pyp16jqjm.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.634] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.634] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.635] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b8002 | out: pbBuffer=0x124b8002) returned 1 [0138.635] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b8012 | out: pbBuffer=0x124b8012) returned 1 [0138.635] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b8076 | out: pbBuffer=0x124b8076) returned 1 [0138.636] CloseHandle (hObject=0x154) returned 1 [0138.636] CloseHandle (hObject=0x190) returned 1 [0138.636] CloseHandle (hObject=0x27c) returned 1 [0138.636] CloseHandle (hObject=0x120) returned 1 [0138.637] CloseHandle (hObject=0xfc) returned 1 [0138.637] CloseHandle (hObject=0x144) returned 1 [0138.637] SwitchToThread () returned 1 [0138.637] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.639] SetEvent (hEvent=0xb8) returned 1 [0138.639] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.641] SetEvent (hEvent=0xb8) returned 1 [0138.641] SwitchToThread () returned 1 [0138.641] SetEvent (hEvent=0xb8) returned 1 [0138.642] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.643] SetEvent (hEvent=0xa8) returned 1 [0138.644] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.645] SetEvent (hEvent=0xa8) returned 1 [0138.645] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0138.647] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.647] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.647] SetEvent (hEvent=0xac) returned 1 [0138.647] SetEvent (hEvent=0xa8) returned 1 [0138.647] ReadFile (in: hFile=0x15c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xa63a, lpOverlapped=0x0) returned 1 [0138.648] GetFileType (hFile=0x15c) returned 0x1 [0138.648] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.648] WriteFile (in: hFile=0x15c, lpBuffer=0x12566000*, nNumberOfBytesToWrite=0xa63a, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12566000*, lpNumberOfBytesWritten=0x12429aa0*=0xa63a, lpOverlapped=0x12429aac) returned 1 [0138.648] GetFileType (hFile=0x15c) returned 0x1 [0138.649] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0xa63a, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.649] ReadFile (in: hFile=0x15c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.649] CloseHandle (hObject=0x15c) returned 1 [0138.649] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/Fb_AJFIS_ruXp.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\fb_ajfis_ruxp.odp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.649] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.649] WriteFile (in: hFile=0x15c, lpBuffer=0x12576240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12576240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.649] CloseHandle (hObject=0x15c) returned 1 [0138.649] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0x5e, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x12429774*=0x5e) returned 1 [0138.650] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/ezUZg.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\ezuzg.pptx"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce108300, ftCreationTime.dwHighDateTime=0x1d4d439, ftLastAccessTime.dwLowDateTime=0x78ede80, ftLastAccessTime.dwHighDateTime=0x1d4c6b9, ftLastWriteTime.dwLowDateTime=0x78ede80, ftLastWriteTime.dwHighDateTime=0x1d4c6b9, nFileSizeHigh=0x0, nFileSizeLow=0xe84)) returned 1 [0138.650] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/ezUZg.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\ezuzg.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.650] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.650] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.651] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0138.652] SwitchToThread () returned 1 [0138.652] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.654] SetEvent (hEvent=0xb8) returned 1 [0138.654] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.656] SetEvent (hEvent=0xb8) returned 1 [0138.656] SwitchToThread () returned 1 [0138.657] SetEvent (hEvent=0xb8) returned 1 [0138.657] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.659] SetEvent (hEvent=0xa8) returned 1 [0138.659] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.660] SetEvent (hEvent=0xa8) returned 1 [0138.660] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.664] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.753] SetEvent (hEvent=0xa8) returned 1 [0138.753] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.757] SetEvent (hEvent=0xa8) returned 1 [0138.758] SwitchToThread () returned 1 [0138.758] SetEvent (hEvent=0xa8) returned 1 [0138.758] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.760] SetEvent (hEvent=0xb8) returned 1 [0138.760] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.761] SetEvent (hEvent=0xb8) returned 1 [0138.761] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.765] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.778] SetEvent (hEvent=0xb8) returned 1 [0138.778] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.781] SetEvent (hEvent=0xb8) returned 1 [0138.781] SwitchToThread () returned 1 [0138.781] SetEvent (hEvent=0xb8) returned 1 [0138.781] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.784] SetEvent (hEvent=0xa8) returned 1 [0138.784] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.785] SetEvent (hEvent=0xa8) returned 1 [0138.785] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.787] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.787] SetEvent (hEvent=0xa8) returned 1 [0138.787] ReadFile (in: hFile=0xc0, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xf6fa, lpOverlapped=0x0) returned 1 [0138.788] GetFileType (hFile=0xc0) returned 0x1 [0138.788] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.788] WriteFile (in: hFile=0xc0, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0xf6fa, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x12429aa0*=0xf6fa, lpOverlapped=0x12429aac) returned 1 [0138.788] GetFileType (hFile=0xc0) returned 0x1 [0138.788] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0xf6fa, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.788] ReadFile (in: hFile=0xc0, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.788] CloseHandle (hObject=0xc0) returned 1 [0138.789] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/oPB20v.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\opb20v.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.789] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.789] WriteFile (in: hFile=0xc0, lpBuffer=0x127c86c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c86c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.789] CloseHandle (hObject=0xc0) returned 1 [0138.789] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b60c0*, nNumberOfCharsToWrite=0x5a, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124b60c0*, lpNumberOfCharsWritten=0x12429774*=0x5a) returned 1 [0138.790] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/rBdRZqLp4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\rbdrzqlp4.wav"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb0d8ec0, ftCreationTime.dwHighDateTime=0x1d4cf4e, ftLastAccessTime.dwLowDateTime=0x2251160, ftLastAccessTime.dwHighDateTime=0x1d4d1b0, ftLastWriteTime.dwLowDateTime=0x2251160, ftLastWriteTime.dwHighDateTime=0x1d4d1b0, nFileSizeHigh=0x0, nFileSizeLow=0xb654)) returned 1 [0138.790] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/rBdRZqLp4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\rbdrzqlp4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.790] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.790] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.791] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0138.791] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.792] SwitchToThread () returned 1 [0138.792] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.795] SetEvent (hEvent=0xb8) returned 1 [0138.795] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.797] SetEvent (hEvent=0xb8) returned 1 [0138.797] SwitchToThread () returned 1 [0138.799] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.811] SetEvent (hEvent=0xb8) returned 1 [0138.811] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.812] SetEvent (hEvent=0xb8) returned 1 [0138.812] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0138.815] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.815] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0138.815] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.815] SetEvent (hEvent=0xac) returned 1 [0138.816] SetEvent (hEvent=0xb8) returned 1 [0138.816] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x1769e, lpOverlapped=0x0) returned 1 [0138.817] GetFileType (hFile=0x10c) returned 0x1 [0138.817] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.817] WriteFile (in: hFile=0x10c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x1769e, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x1769e, lpOverlapped=0x12429aac) returned 1 [0138.817] GetFileType (hFile=0x10c) returned 0x1 [0138.817] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x1769e, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.817] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.817] CloseHandle (hObject=0x10c) returned 1 [0138.818] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/OLWODKkQh9dbJOE6IwI.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\olwodkkqh9dbjoe6iwi.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.818] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.818] WriteFile (in: hFile=0x10c, lpBuffer=0x127fa240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127fa240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.818] CloseHandle (hObject=0x10c) returned 1 [0138.818] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12576000*, nNumberOfCharsToWrite=0x6c, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x12576000*, lpNumberOfCharsWritten=0x12429774*=0x6c) returned 1 [0138.819] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/XiJn_Boi12aW.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\xijn_boi12aw.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0078100, ftCreationTime.dwHighDateTime=0x1d4c950, ftLastAccessTime.dwLowDateTime=0x1e9ca8b0, ftLastAccessTime.dwHighDateTime=0x1d4d2d4, ftLastWriteTime.dwLowDateTime=0x1e9ca8b0, ftLastWriteTime.dwHighDateTime=0x1d4d2d4, nFileSizeHigh=0x0, nFileSizeLow=0x178c9)) returned 1 [0138.819] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/XiJn_Boi12aW.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\xijn_boi12aw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.819] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.819] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.820] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0138.820] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127c8002 | out: pbBuffer=0x127c8002) returned 1 [0138.821] SwitchToThread () returned 1 [0138.821] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.825] SetEvent (hEvent=0xa8) returned 1 [0138.825] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.827] SetEvent (hEvent=0xa8) returned 1 [0138.827] SwitchToThread () returned 1 [0138.827] SetEvent (hEvent=0xa8) returned 1 [0138.827] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.829] SetEvent (hEvent=0xb8) returned 1 [0138.829] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.830] SetEvent (hEvent=0xb8) returned 1 [0138.830] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0138.833] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.833] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.833] SetEvent (hEvent=0xac) returned 1 [0138.833] SetEvent (hEvent=0xb8) returned 1 [0138.833] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x2995, lpOverlapped=0x0) returned 1 [0138.834] GetFileType (hFile=0x10c) returned 0x1 [0138.834] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.834] WriteFile (in: hFile=0x10c, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x2995, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429aa0*=0x2995, lpOverlapped=0x12429aac) returned 1 [0138.834] GetFileType (hFile=0x10c) returned 0x1 [0138.834] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2995, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.834] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.834] CloseHandle (hObject=0x10c) returned 1 [0138.834] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/pNV1BVXi7eetUz02o_.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\pnv1bvxi7eetuz02o_.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.834] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.835] WriteFile (in: hFile=0x10c, lpBuffer=0x127fa6c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127fa6c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.835] CloseHandle (hObject=0x10c) returned 1 [0138.835] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12800000*, nNumberOfCharsToWrite=0x6b, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x12800000*, lpNumberOfCharsWritten=0x12429774*=0x6b) returned 1 [0138.835] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/v8dQ7Bpi2st2HLcyuzL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\v8dq7bpi2st2hlcyuzl.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb5562a0, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0xa004c820, ftLastAccessTime.dwHighDateTime=0x1d4d4a4, ftLastWriteTime.dwLowDateTime=0xa004c820, ftLastWriteTime.dwHighDateTime=0x1d4d4a4, nFileSizeHigh=0x0, nFileSizeLow=0x2cb6)) returned 1 [0138.835] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/v8dQ7Bpi2st2HLcyuzL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\v8dq7bpi2st2hlcyuzl.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.835] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.836] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.836] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0138.836] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.837] SwitchToThread () returned 1 [0138.838] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.840] SetEvent (hEvent=0xa8) returned 1 [0138.840] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.841] SetEvent (hEvent=0xa8) returned 1 [0138.841] SwitchToThread () returned 1 [0138.844] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.861] SetEvent (hEvent=0xa8) returned 1 [0138.861] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0138.862] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.862] SetEvent (hEvent=0xa8) returned 1 [0138.862] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0138.865] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.865] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.865] SetEvent (hEvent=0xac) returned 1 [0138.865] SetEvent (hEvent=0xa8) returned 1 [0138.865] ReadFile (in: hFile=0x18c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0xc39a, lpOverlapped=0x0) returned 1 [0138.866] GetFileType (hFile=0x18c) returned 0x1 [0138.866] SetFilePointerEx (in: hFile=0x18c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.866] WriteFile (in: hFile=0x18c, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xc39a, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x124299f8*=0xc39a, lpOverlapped=0x12429a04) returned 1 [0138.866] GetFileType (hFile=0x18c) returned 0x1 [0138.867] SetFilePointerEx (in: hFile=0x18c, liDistanceToMove=0xc39a, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.867] ReadFile (in: hFile=0x18c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0138.867] CloseHandle (hObject=0x18c) returned 1 [0138.867] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/PZ8XEYGkQGC2ae.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\pz8xeygkqgc2ae.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.867] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.867] WriteFile (in: hFile=0x18c, lpBuffer=0x127fe240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x127fe240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0138.867] CloseHandle (hObject=0x18c) returned 1 [0138.868] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x128000e0*, nNumberOfCharsToWrite=0x6c, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x128000e0*, lpNumberOfCharsWritten=0x124296cc*=0x6c) returned 1 [0138.868] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/_ar9g.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\_ar9g.wav"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ad6dd20, ftCreationTime.dwHighDateTime=0x1d4ca19, ftLastAccessTime.dwLowDateTime=0x94194710, ftLastAccessTime.dwHighDateTime=0x1d4cb4a, ftLastWriteTime.dwLowDateTime=0x94194710, ftLastWriteTime.dwHighDateTime=0x1d4cb4a, nFileSizeHigh=0x0, nFileSizeLow=0x10fe9)) returned 1 [0138.868] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/_ar9g.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\_ar9g.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.868] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.868] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.869] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0138.869] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0138.869] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c204b | out: pbBuffer=0x124c204b) returned 1 [0138.869] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c20d7 | out: pbBuffer=0x124c20d7) returned 1 [0138.870] SwitchToThread () returned 1 [0138.870] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.873] SetEvent (hEvent=0xb8) returned 1 [0138.873] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.875] SetEvent (hEvent=0xb8) returned 1 [0138.875] SwitchToThread () returned 1 [0138.876] SetEvent (hEvent=0xb8) returned 1 [0138.876] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.878] SetEvent (hEvent=0xa8) returned 1 [0138.878] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.879] SetEvent (hEvent=0xa8) returned 1 [0138.880] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.883] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.897] SetEvent (hEvent=0xa8) returned 1 [0138.897] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.900] SetEvent (hEvent=0xa8) returned 1 [0138.900] SwitchToThread () returned 1 [0138.900] SetEvent (hEvent=0xa8) returned 1 [0138.900] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.902] SetEvent (hEvent=0xb8) returned 1 [0138.902] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.903] SetEvent (hEvent=0xb8) returned 1 [0138.903] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.906] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.906] SetEvent (hEvent=0xb8) returned 1 [0138.906] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x1770, lpOverlapped=0x0) returned 1 [0138.907] GetFileType (hFile=0x19c) returned 0x1 [0138.907] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0138.907] WriteFile (in: hFile=0x19c, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1770, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429950*=0x1770, lpOverlapped=0x1242995c) returned 1 [0138.907] GetFileType (hFile=0x19c) returned 0x1 [0138.907] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1770, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0138.907] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0138.907] CloseHandle (hObject=0x19c) returned 1 [0138.907] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/ae5Z0r-mfCz KH.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\ae5z0r-mfcz kh.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.907] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0138.908] WriteFile (in: hFile=0x19c, lpBuffer=0x124c26c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x124c26c0*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0138.908] CloseHandle (hObject=0x19c) returned 1 [0138.908] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1249c000*, nNumberOfCharsToWrite=0x71, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x1249c000*, lpNumberOfCharsWritten=0x12429624*=0x71) returned 1 [0138.908] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/nLM3T.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\nlm3t.wav"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa8a450, ftCreationTime.dwHighDateTime=0x1d4c95a, ftLastAccessTime.dwLowDateTime=0x716ffeb0, ftLastAccessTime.dwHighDateTime=0x1d4cc1d, ftLastWriteTime.dwLowDateTime=0x716ffeb0, ftLastWriteTime.dwHighDateTime=0x1d4cc1d, nFileSizeHigh=0x0, nFileSizeLow=0x12b92)) returned 1 [0138.908] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/nLM3T.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\nlm3t.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.908] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0138.909] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.910] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0138.910] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.910] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc0af | out: pbBuffer=0x124bc0af) returned 1 [0138.910] SwitchToThread () returned 1 [0138.911] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.913] SetEvent (hEvent=0xa8) returned 1 [0138.914] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.916] SetEvent (hEvent=0xa8) returned 1 [0138.916] SwitchToThread () returned 1 [0138.916] SetEvent (hEvent=0xa8) returned 1 [0138.916] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.918] SetEvent (hEvent=0xb8) returned 1 [0138.918] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.920] SetEvent (hEvent=0xb8) returned 1 [0138.920] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0138.922] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0138.922] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0138.922] SetEvent (hEvent=0xac) returned 1 [0138.922] SetEvent (hEvent=0xb8) returned 1 [0138.922] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0xfde3, lpOverlapped=0x0) returned 1 [0138.923] GetFileType (hFile=0x19c) returned 0x1 [0138.923] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0138.923] WriteFile (in: hFile=0x19c, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0xfde3, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x12429950*=0xfde3, lpOverlapped=0x1242995c) returned 1 [0138.924] GetFileType (hFile=0x19c) returned 0x1 [0138.924] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xfde3, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0138.924] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0138.924] CloseHandle (hObject=0x19c) returned 1 [0138.929] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/wp zn.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\wp zn.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.929] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0138.929] WriteFile (in: hFile=0x19c, lpBuffer=0x124c2240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x124c2240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0138.929] CloseHandle (hObject=0x19c) returned 1 [0138.929] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1249c000*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x1249c000*, lpNumberOfCharsWritten=0x12429624*=0x68) returned 1 [0138.930] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.930] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.930] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.930] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.930] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.930] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.930] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0138.931] CloseHandle (hObject=0x19c) returned 1 [0138.931] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/My Documents\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.931] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/My Documents\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.931] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/My Documents\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.931] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/My Documents\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.931] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/My Documents\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents\\@_read_to_recover_files_@.txt")) returned 0x21 [0138.931] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/My Documents\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.931] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/My Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.931] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/My Documents\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.931] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.932] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.932] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.932] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.932] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.932] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.932] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.932] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.932] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.932] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.932] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.932] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.932] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.933] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429c4c | out: lpMode=0x12429c4c) returned 0 [0138.933] CloseHandle (hObject=0x19c) returned 1 [0138.933] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.933] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.933] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.933] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.934] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.934] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.934] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429c4c | out: lpMode=0x12429c4c) returned 0 [0138.934] CloseHandle (hObject=0x19c) returned 1 [0138.934] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.934] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.934] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.935] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.935] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.935] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.935] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429c4c | out: lpMode=0x12429c4c) returned 0 [0138.935] CloseHandle (hObject=0x19c) returned 1 [0138.935] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NetHood\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.935] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NetHood\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.935] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NetHood\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.936] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0138.936] WriteFile (in: hFile=0x19c, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0138.937] CloseHandle (hObject=0x19c) returned 1 [0138.937] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NetHood\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood\\@_read_to_recover_files_@.txt")) returned 0x2020 [0138.937] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NetHood\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0138.938] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NetHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.938] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/NetHood\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.938] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.938] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.938] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.938] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.938] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\@_read_to_recover_files_@.txt")) returned 0x21 [0138.938] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.938] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.939] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3e99570, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3e99570, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3e99570, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3e99570, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8265c0d0, ftCreationTime.dwHighDateTime=0x1d4d15c, ftLastAccessTime.dwLowDateTime=0x6205e8e0, ftLastAccessTime.dwHighDateTime=0x1d4c88f, ftLastWriteTime.dwLowDateTime=0x6205e8e0, ftLastWriteTime.dwHighDateTime=0x1d4c88f, nFileSizeHigh=0x0, nFileSizeLow=0xe1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-zFpm NX6fmjp 4HQ.gif", cAlternateFileName="-ZFPMN~1.GIF")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e535a80, ftCreationTime.dwHighDateTime=0x1d4c9e9, ftLastAccessTime.dwLowDateTime=0xde39c960, ftLastAccessTime.dwHighDateTime=0x1d4c88d, ftLastWriteTime.dwLowDateTime=0xde39c960, ftLastWriteTime.dwHighDateTime=0x1d4c88d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1-p1L", cAlternateFileName="")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310a35c0, ftCreationTime.dwHighDateTime=0x1d4cea7, ftLastAccessTime.dwLowDateTime=0x4e93f920, ftLastAccessTime.dwHighDateTime=0x1d4d328, ftLastWriteTime.dwLowDateTime=0x4e93f920, ftLastWriteTime.dwHighDateTime=0x1d4d328, nFileSizeHigh=0x0, nFileSizeLow=0x1342d, dwReserved0=0x0, dwReserved1=0x0, cFileName="40tXee.gif", cAlternateFileName="")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x3e99570, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x3e99570, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3ebf6d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0b4fb00, ftCreationTime.dwHighDateTime=0x1d4c55e, ftLastAccessTime.dwLowDateTime=0x3dba5280, ftLastAccessTime.dwHighDateTime=0x1d4d002, ftLastWriteTime.dwLowDateTime=0x3dba5280, ftLastWriteTime.dwHighDateTime=0x1d4d002, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fMU3F.gif", cAlternateFileName="")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765ca450, ftCreationTime.dwHighDateTime=0x1d4d0c3, ftLastAccessTime.dwLowDateTime=0xcda617f0, ftLastAccessTime.dwHighDateTime=0x1d4ced4, ftLastWriteTime.dwLowDateTime=0xcda617f0, ftLastWriteTime.dwHighDateTime=0x1d4ced4, nFileSizeHigh=0x0, nFileSizeLow=0x93ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="HwY sLofzoj9C.bmp", cAlternateFileName="HWYSLO~1.BMP")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfe778e0, ftCreationTime.dwHighDateTime=0x1d4d341, ftLastAccessTime.dwLowDateTime=0xc64d9100, ftLastAccessTime.dwHighDateTime=0x1d4cdd4, ftLastWriteTime.dwLowDateTime=0xc64d9100, ftLastWriteTime.dwHighDateTime=0x1d4cdd4, nFileSizeHigh=0x0, nFileSizeLow=0xf957, dwReserved0=0x0, dwReserved1=0x0, cFileName="J3cl8fSofuZEp2v.bmp", cAlternateFileName="J3CL8F~1.BMP")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc032c40, ftCreationTime.dwHighDateTime=0x1d4c9eb, ftLastAccessTime.dwLowDateTime=0x75727fb0, ftLastAccessTime.dwHighDateTime=0x1d4ce84, ftLastWriteTime.dwLowDateTime=0x75727fb0, ftLastWriteTime.dwHighDateTime=0x1d4ce84, nFileSizeHigh=0x0, nFileSizeLow=0xd7a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="k H-An6yQBLh8gyVNG.bmp", cAlternateFileName="KH-AN6~1.BMP")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74c314b0, ftCreationTime.dwHighDateTime=0x1d4c814, ftLastAccessTime.dwLowDateTime=0xe62f44d0, ftLastAccessTime.dwHighDateTime=0x1d4d41b, ftLastWriteTime.dwLowDateTime=0xe62f44d0, ftLastWriteTime.dwHighDateTime=0x1d4d41b, nFileSizeHigh=0x0, nFileSizeLow=0x10686, dwReserved0=0x0, dwReserved1=0x0, cFileName="mibGrCxeLlA.png", cAlternateFileName="MIBGRC~1.PNG")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70faebb0, ftCreationTime.dwHighDateTime=0x1d4c86d, ftLastAccessTime.dwLowDateTime=0xc6ffd200, ftLastAccessTime.dwHighDateTime=0x1d4cfed, ftLastWriteTime.dwLowDateTime=0xc6ffd200, ftLastWriteTime.dwHighDateTime=0x1d4cfed, nFileSizeHigh=0x0, nFileSizeLow=0x5dde, dwReserved0=0x0, dwReserved1=0x0, cFileName="qIm 6 ynK.png", cAlternateFileName="QIM6YN~1.PNG")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x693d6500, ftCreationTime.dwHighDateTime=0x1d4d59d, ftLastAccessTime.dwLowDateTime=0x4153c310, ftLastAccessTime.dwHighDateTime=0x1d4c795, ftLastWriteTime.dwLowDateTime=0x4153c310, ftLastWriteTime.dwHighDateTime=0x1d4c795, nFileSizeHigh=0x0, nFileSizeLow=0x5d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="UGhSJo.png", cAlternateFileName="")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d4ccdd0, ftCreationTime.dwHighDateTime=0x1d4c8db, ftLastAccessTime.dwLowDateTime=0xeda3d350, ftLastAccessTime.dwHighDateTime=0x1d4d26a, ftLastWriteTime.dwLowDateTime=0xeda3d350, ftLastWriteTime.dwHighDateTime=0x1d4d26a, nFileSizeHigh=0x0, nFileSizeLow=0x1335e, dwReserved0=0x0, dwReserved1=0x0, cFileName="urPhq_-EMN_.jpg", cAlternateFileName="URPHQ_~1.JPG")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933294c0, ftCreationTime.dwHighDateTime=0x1d4cdb4, ftLastAccessTime.dwLowDateTime=0x7cfc3a20, ftLastAccessTime.dwHighDateTime=0x1d4cf13, ftLastWriteTime.dwLowDateTime=0x7cfc3a20, ftLastWriteTime.dwHighDateTime=0x1d4cf13, nFileSizeHigh=0x0, nFileSizeLow=0x8300, dwReserved0=0x0, dwReserved1=0x0, cFileName="UwLO9wL4D5.png", cAlternateFileName="UWLO9W~1.PNG")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccecd470, ftCreationTime.dwHighDateTime=0x1d4c59c, ftLastAccessTime.dwLowDateTime=0x8a66d0a0, ftLastAccessTime.dwHighDateTime=0x1d4d308, ftLastWriteTime.dwLowDateTime=0x8a66d0a0, ftLastWriteTime.dwHighDateTime=0x1d4d308, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wI_U1JdmZjkkoc9Kd7", cAlternateFileName="WI_U1J~1")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd7d94d0, ftCreationTime.dwHighDateTime=0x1d4d418, ftLastAccessTime.dwLowDateTime=0x96862630, ftLastAccessTime.dwHighDateTime=0x1d4c8ca, ftLastWriteTime.dwLowDateTime=0x96862630, ftLastWriteTime.dwHighDateTime=0x1d4c8ca, nFileSizeHigh=0x0, nFileSizeLow=0x343c, dwReserved0=0x0, dwReserved1=0x0, cFileName="yulmPafaL.png", cAlternateFileName="YULMPA~1.PNG")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce7bdf80, ftCreationTime.dwHighDateTime=0x1d4cc58, ftLastAccessTime.dwLowDateTime=0x8a7d97c0, ftLastAccessTime.dwHighDateTime=0x1d4d26a, ftLastWriteTime.dwLowDateTime=0x8a7d97c0, ftLastWriteTime.dwHighDateTime=0x1d4d26a, nFileSizeHigh=0x0, nFileSizeLow=0xf843, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZijcOI_7_iSEf.gif", cAlternateFileName="ZIJCOI~1.GIF")) returned 1 [0138.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.940] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.940] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/-zFpm NX6fmjp 4HQ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-zfpm nx6fmjp 4hq.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.940] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.940] ReadFile (in: hFile=0x19c, lpBuffer=0x1265e800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1265e800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.941] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.941] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e535a80, ftCreationTime.dwHighDateTime=0x1d4c9e9, ftLastAccessTime.dwLowDateTime=0xde39c960, ftLastAccessTime.dwHighDateTime=0x1d4c88d, ftLastWriteTime.dwLowDateTime=0xde39c960, ftLastWriteTime.dwHighDateTime=0x1d4c88d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.941] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.941] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/40tXee.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\40txee.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.941] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.942] ReadFile (in: hFile=0x18c, lpBuffer=0x1265e900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1265e900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.943] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.943] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.943] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/HwY sLofzoj9C.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hwy slofzoj9c.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.943] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.943] ReadFile (in: hFile=0x10c, lpBuffer=0x1265ea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1265ea00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.944] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/J3cl8fSofuZEp2v.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\j3cl8fsofuzep2v.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.944] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.944] ReadFile (in: hFile=0xc0, lpBuffer=0x1265eb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1265eb00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.945] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/UGhSJo.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ughsjo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0138.945] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.945] ReadFile (in: hFile=0x110, lpBuffer=0x1265ec00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1265ec00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.946] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/UwLO9wL4D5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwlo9wl4d5.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0138.946] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.946] ReadFile (in: hFile=0x168, lpBuffer=0x1265ed00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1265ed00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.947] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/ZijcOI_7_iSEf.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zijcoi_7_isef.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0138.947] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.947] ReadFile (in: hFile=0xd0, lpBuffer=0x1265ee00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1265ee00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.948] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0138.948] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.948] ReadFile (in: hFile=0xc8, lpBuffer=0x1265ef00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1265ef00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.949] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/fMU3F.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fmu3f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0138.949] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.949] ReadFile (in: hFile=0x118, lpBuffer=0x1265f000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1265f000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.950] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/k H-An6yQBLh8gyVNG.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\k h-an6yqblh8gyvng.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0138.950] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.950] ReadFile (in: hFile=0x180, lpBuffer=0x1265f200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1265f200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.951] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/mibGrCxeLlA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mibgrcxella.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.952] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.952] ReadFile (in: hFile=0x190, lpBuffer=0x1265f300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1265f300*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.952] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/qIm 6 ynK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qim 6 ynk.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.953] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.953] ReadFile (in: hFile=0x154, lpBuffer=0x1265f400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1265f400*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.953] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/urPhq_-EMN_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\urphq_-emn_.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0138.954] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.954] ReadFile (in: hFile=0x104, lpBuffer=0x1265f500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1265f500*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.955] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.955] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccecd470, ftCreationTime.dwHighDateTime=0x1d4c59c, ftLastAccessTime.dwLowDateTime=0x8a66d0a0, ftLastAccessTime.dwHighDateTime=0x1d4d308, ftLastWriteTime.dwLowDateTime=0x8a66d0a0, ftLastWriteTime.dwHighDateTime=0x1d4d308, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.955] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.955] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/yulmPafaL.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\yulmpafal.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0138.955] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.955] ReadFile (in: hFile=0xf0, lpBuffer=0x1265f600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1265f600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.956] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/-zFpm NX6fmjp 4HQ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-zfpm nx6fmjp 4hq.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8265c0d0, ftCreationTime.dwHighDateTime=0x1d4d15c, ftLastAccessTime.dwLowDateTime=0x6205e8e0, ftLastAccessTime.dwHighDateTime=0x1d4c88f, ftLastWriteTime.dwLowDateTime=0x6205e8e0, ftLastWriteTime.dwHighDateTime=0x1d4c88f, nFileSizeHigh=0x0, nFileSizeLow=0xe1e0)) returned 1 [0138.956] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/-zFpm NX6fmjp 4HQ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-zfpm nx6fmjp 4hq.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0138.956] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.956] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e260 | out: pbBuffer=0x1249e260) returned 1 [0138.957] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124463f0 | out: pbBuffer=0x124463f0) returned 1 [0138.957] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1265f902 | out: pbBuffer=0x1265f902) returned 1 [0138.958] SetEvent (hEvent=0xa8) returned 1 [0138.958] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0xe1e0, lpOverlapped=0x0) returned 1 [0138.959] GetFileType (hFile=0xe4) returned 0x1 [0138.959] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.959] WriteFile (in: hFile=0xe4, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0xe1e0, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x12429b48*=0xe1e0, lpOverlapped=0x12429b54) returned 1 [0138.960] GetFileType (hFile=0xe4) returned 0x1 [0138.960] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0xe1e0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.960] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.960] CloseHandle (hObject=0xe4) returned 1 [0138.960] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/-zFpm NX6fmjp 4HQ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-zfpm nx6fmjp 4hq.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0138.960] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.960] WriteFile (in: hFile=0xe4, lpBuffer=0x124c2fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x124c2fc0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.960] CloseHandle (hObject=0xe4) returned 1 [0138.961] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6300*, nNumberOfCharsToWrite=0x5a, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124b6300*, lpNumberOfCharsWritten=0x1242981c*=0x5a) returned 1 [0138.961] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/40tXee.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\40txee.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310a35c0, ftCreationTime.dwHighDateTime=0x1d4cea7, ftLastAccessTime.dwLowDateTime=0x4e93f920, ftLastAccessTime.dwHighDateTime=0x1d4d328, ftLastWriteTime.dwLowDateTime=0x4e93f920, ftLastWriteTime.dwHighDateTime=0x1d4d328, nFileSizeHigh=0x0, nFileSizeLow=0x1342d)) returned 1 [0138.961] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/40tXee.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\40txee.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0138.961] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.962] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.963] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0138.963] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1265e002 | out: pbBuffer=0x1265e002) returned 1 [0138.963] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1265e00a | out: pbBuffer=0x1265e00a) returned 1 [0138.963] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1265e070 | out: pbBuffer=0x1265e070) returned 1 [0139.022] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0139.720] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0139.888] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.030] SetEvent (hEvent=0x7c) returned 1 [0141.030] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.033] SetEvent (hEvent=0x7c) returned 1 [0141.033] SetEvent (hEvent=0xb8) returned 1 [0141.033] SwitchToThread () returned 1 [0141.037] SetEvent (hEvent=0x7c) returned 1 [0141.037] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.102] SetEvent (hEvent=0xb8) returned 1 [0141.102] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0141.155] SetEvent (hEvent=0xb8) returned 1 [0141.155] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0141.158] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.158] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.508] SetEvent (hEvent=0xb8) returned 1 [0141.508] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.509] SetEvent (hEvent=0xb8) returned 1 [0141.509] SetEvent (hEvent=0x7c) returned 1 [0141.509] CloseHandle (hObject=0x1ac) returned 1 [0141.509] CloseHandle (hObject=0x1a8) returned 1 [0141.509] CloseHandle (hObject=0x1a4) returned 1 [0141.509] CloseHandle (hObject=0x1a0) returned 1 [0141.509] CloseHandle (hObject=0x194) returned 1 [0141.509] CloseHandle (hObject=0x184) returned 1 [0141.509] CloseHandle (hObject=0xec) returned 1 [0141.509] CloseHandle (hObject=0xe0) returned 1 [0141.509] CloseHandle (hObject=0xcc) returned 1 [0141.509] CloseHandle (hObject=0xd8) returned 1 [0141.509] CloseHandle (hObject=0xf0) returned 1 [0141.509] CloseHandle (hObject=0x104) returned 1 [0141.509] CloseHandle (hObject=0x154) returned 1 [0141.510] CloseHandle (hObject=0x190) returned 1 [0141.510] CloseHandle (hObject=0x110) returned 1 [0141.510] CloseHandle (hObject=0xc0) returned 1 [0141.510] CloseHandle (hObject=0x18c) returned 1 [0141.510] CloseHandle (hObject=0x19c) returned 1 [0141.510] CloseHandle (hObject=0xe4) returned 1 [0141.510] CloseHandle (hObject=0x148) returned 1 [0141.510] CloseHandle (hObject=0x168) returned 1 [0141.510] CloseHandle (hObject=0x124) returned 1 [0141.510] CloseHandle (hObject=0x128) returned 1 [0141.510] CloseHandle (hObject=0x27c) returned 1 [0141.510] CloseHandle (hObject=0x120) returned 1 [0141.510] CloseHandle (hObject=0xfc) returned 1 [0141.510] CloseHandle (hObject=0x144) returned 1 [0141.510] CloseHandle (hObject=0x15c) returned 1 [0141.510] CloseHandle (hObject=0x198) returned 1 [0141.510] CloseHandle (hObject=0x12c) returned 1 [0141.510] CloseHandle (hObject=0x178) returned 1 [0141.510] CloseHandle (hObject=0x16c) returned 1 [0141.510] CloseHandle (hObject=0x10c) returned 1 [0141.510] CloseHandle (hObject=0x118) returned 1 [0141.511] CloseHandle (hObject=0xc8) returned 1 [0141.511] CloseHandle (hObject=0xd0) returned 1 [0141.511] CloseHandle (hObject=0x180) returned 1 [0141.511] CloseHandle (hObject=0x138) returned 1 [0141.511] CloseHandle (hObject=0x17c) returned 1 [0141.511] CloseHandle (hObject=0xdc) returned 1 [0141.511] CloseHandle (hObject=0x108) returned 1 [0141.511] CloseHandle (hObject=0x140) returned 1 [0141.511] CloseHandle (hObject=0x14c) returned 1 [0141.511] CloseHandle (hObject=0xf4) returned 1 [0141.511] CloseHandle (hObject=0x174) returned 1 [0141.511] CloseHandle (hObject=0x170) returned 1 [0141.511] CloseHandle (hObject=0x11c) returned 1 [0141.511] CloseHandle (hObject=0x13c) returned 1 [0141.511] CloseHandle (hObject=0x100) returned 1 [0141.511] CloseHandle (hObject=0x98) returned 1 [0141.511] CloseHandle (hObject=0x150) returned 1 [0141.511] CloseHandle (hObject=0x188) returned 1 [0141.511] CloseHandle (hObject=0x134) returned 1 [0141.511] CloseHandle (hObject=0x130) returned 1 [0141.512] CloseHandle (hObject=0xf8) returned 1 [0141.512] CloseHandle (hObject=0x158) returned 1 [0141.512] CloseHandle (hObject=0x164) returned 1 [0141.512] CloseHandle (hObject=0x160) returned 1 [0141.512] CloseHandle (hObject=0x114) returned 1 [0141.512] CloseHandle (hObject=0xe8) returned 1 [0141.512] CloseHandle (hObject=0xbc) returned 1 [0141.512] SwitchToThread () returned 1 [0141.513] SetEvent (hEvent=0xb8) returned 1 [0141.513] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.607] SetEvent (hEvent=0x7c) returned 1 [0141.607] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0141.608] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.608] SetEvent (hEvent=0x7c) returned 1 [0141.608] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0141.609] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.609] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.621] SetEvent (hEvent=0x7c) returned 1 [0141.622] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.623] SetEvent (hEvent=0x7c) returned 1 [0141.623] SetEvent (hEvent=0xa8) returned 1 [0141.623] CloseHandle (hObject=0x1b0) returned 1 [0141.626] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.648] SetEvent (hEvent=0xa8) returned 1 [0141.648] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0141.648] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.649] SetEvent (hEvent=0xa8) returned 1 [0141.649] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0141.650] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.650] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.918] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.941] SetEvent (hEvent=0x7c) returned 1 [0141.941] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0141.943] SetEvent (hEvent=0x7c) returned 1 [0141.943] SetEvent (hEvent=0xa8) returned 1 [0141.943] CloseHandle (hObject=0x158) returned 1 [0141.943] CloseHandle (hObject=0x164) returned 1 [0141.943] CloseHandle (hObject=0xf8) returned 1 [0141.943] SwitchToThread () returned 1 [0141.946] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0142.417] SetEvent (hEvent=0xa8) returned 1 [0142.417] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0142.418] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0142.418] SetEvent (hEvent=0xa8) returned 1 [0142.418] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0142.419] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0142.419] CloseHandle (hObject=0x10c) returned 1 [0142.419] CloseHandle (hObject=0x118) returned 1 [0142.419] CloseHandle (hObject=0xc8) returned 1 [0142.419] CloseHandle (hObject=0xd0) returned 1 [0142.419] CloseHandle (hObject=0x180) returned 1 [0142.419] CloseHandle (hObject=0x138) returned 1 [0142.419] CloseHandle (hObject=0x17c) returned 1 [0142.419] CloseHandle (hObject=0xdc) returned 1 [0142.420] CloseHandle (hObject=0x108) returned 1 [0142.420] CloseHandle (hObject=0x140) returned 1 [0142.420] CloseHandle (hObject=0x14c) returned 1 [0142.420] CloseHandle (hObject=0xf4) returned 1 [0142.420] CloseHandle (hObject=0x174) returned 1 [0142.420] CloseHandle (hObject=0x170) returned 1 [0142.420] CloseHandle (hObject=0x11c) returned 1 [0142.420] CloseHandle (hObject=0x13c) returned 1 [0142.420] CloseHandle (hObject=0x100) returned 1 [0142.420] CloseHandle (hObject=0x98) returned 1 [0142.420] CloseHandle (hObject=0x150) returned 1 [0142.420] CloseHandle (hObject=0x188) returned 1 [0142.420] CloseHandle (hObject=0x134) returned 1 [0142.420] CloseHandle (hObject=0x130) returned 1 [0142.420] CloseHandle (hObject=0xbc) returned 1 [0142.420] CloseHandle (hObject=0x1b0) returned 1 [0142.420] CloseHandle (hObject=0x160) returned 1 [0142.420] CloseHandle (hObject=0x114) returned 1 [0142.420] CloseHandle (hObject=0x158) returned 1 [0142.420] CloseHandle (hObject=0x164) returned 1 [0142.420] CloseHandle (hObject=0xf8) returned 1 [0142.421] CloseHandle (hObject=0xe8) returned 1 [0142.421] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0142.836] SetEvent (hEvent=0xb8) returned 1 [0142.836] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0142.838] SetEvent (hEvent=0xb8) returned 1 [0142.838] SetEvent (hEvent=0xa8) returned 1 [0142.838] SwitchToThread () returned 1 [0142.839] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0142.849] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0142.955] SetEvent (hEvent=0xa8) returned 1 [0142.956] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0142.986] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0142.987] SetEvent (hEvent=0xa8) returned 1 [0142.987] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0142.989] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0143.579] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0143.711] SetEvent (hEvent=0xb8) returned 1 [0143.711] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0143.712] SetEvent (hEvent=0xb8) returned 1 [0143.712] SetEvent (hEvent=0xa8) returned 1 [0143.712] CloseHandle (hObject=0x158) returned 1 [0143.712] CloseHandle (hObject=0x164) returned 1 [0143.712] SwitchToThread () returned 1 [0143.713] SetEvent (hEvent=0xb8) returned 1 [0143.713] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0143.812] SetEvent (hEvent=0xa8) returned 1 [0143.812] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0143.813] SetEvent (hEvent=0xa8) returned 1 [0143.813] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0143.817] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0143.836] SetEvent (hEvent=0xa8) returned 1 [0143.836] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0143.841] SetEvent (hEvent=0xa8) returned 1 [0143.841] SwitchToThread () returned 1 [0143.841] SetEvent (hEvent=0xa8) returned 1 [0143.841] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0143.849] SetEvent (hEvent=0xb8) returned 1 [0143.849] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0143.851] SetEvent (hEvent=0xb8) returned 1 [0143.851] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0143.855] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0143.878] SetEvent (hEvent=0xb8) returned 1 [0143.878] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0143.884] SetEvent (hEvent=0xb8) returned 1 [0143.884] SwitchToThread () returned 1 [0143.885] SetEvent (hEvent=0xb8) returned 1 [0143.885] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0143.892] SetEvent (hEvent=0xa8) returned 1 [0143.892] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0143.894] SetEvent (hEvent=0xa8) returned 1 [0143.894] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0143.899] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0143.973] SetEvent (hEvent=0xa8) returned 1 [0143.973] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0144.055] SetEvent (hEvent=0xa8) returned 1 [0144.055] SwitchToThread () returned 1 [0144.055] SetEvent (hEvent=0xa8) returned 1 [0144.055] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0144.056] SetEvent (hEvent=0xa8) returned 1 [0144.056] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0144.056] SetEvent (hEvent=0xa8) returned 1 [0144.056] SwitchToThread () returned 1 [0144.057] SetEvent (hEvent=0xa8) returned 1 [0144.057] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0144.153] SetEvent (hEvent=0xb8) returned 1 [0144.153] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0144.359] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0144.361] SetEvent (hEvent=0xb8) returned 1 [0144.362] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0144.447] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0144.448] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.169] SetEvent (hEvent=0xb8) returned 1 [0145.169] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.169] SetEvent (hEvent=0xb8) returned 1 [0145.169] SetEvent (hEvent=0xa8) returned 1 [0145.169] CloseHandle (hObject=0x164) returned 1 [0145.169] CloseHandle (hObject=0x178) returned 1 [0145.222] GetFileType (hFile=0x158) returned 0x1 [0145.222] SetFilePointerEx (in: hFile=0x158, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0145.222] WriteFile (in: hFile=0x158, lpBuffer=0x13da6000*, nNumberOfBytesToWrite=0x4b4520, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x13da6000*, lpNumberOfBytesWritten=0x12429950*=0x4b4520, lpOverlapped=0x1242995c) returned 1 [0145.276] GetFileType (hFile=0x158) returned 0x1 [0145.276] SetFilePointerEx (in: hFile=0x158, liDistanceToMove=0x4b4520, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0145.276] ReadFile (in: hFile=0x158, lpBuffer=0x135a6000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x135a6000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0145.276] CloseHandle (hObject=0x158) returned 1 [0145.276] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0145.276] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0145.286] WriteFile (in: hFile=0x158, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0145.286] CloseHandle (hObject=0x158) returned 1 [0145.286] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x9a, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x12429624*=0x9a) returned 1 [0145.287] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86/vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1 [0145.287] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.287] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.287] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.287] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.287] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.287] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0145.287] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0145.287] CloseHandle (hObject=0x158) returned 1 [0145.288] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.288] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.288] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0145.290] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0145.290] WriteFile (in: hFile=0x158, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0145.291] CloseHandle (hObject=0x158) returned 1 [0145.291] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\@_read_to_recover_files_@.txt")) returned 0x20 [0145.291] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0145.291] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.291] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x7e8d690, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7e8d690, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x7e8d690, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7e8d690, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x7e8af80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7e8af80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7e924b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfe3882c0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0145.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0145.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.292] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.292] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.292] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.292] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}/state.rsm" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0145.293] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0145.293] ReadFile (in: hFile=0x158, lpBuffer=0x1255e100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1255e100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0145.294] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}/vcredist_x64.exe" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0145.294] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0145.295] ReadFile (in: hFile=0x178, lpBuffer=0x1255e200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1255e200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0145.297] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}/state.rsm" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfe3882c0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e)) returned 1 [0145.297] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}/vcredist_x64.exe" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398)) returned 1 [0145.298] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.298] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.298] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.298] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.298] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.298] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.299] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0145.299] CloseHandle (hObject=0x164) returned 1 [0145.299] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.299] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.299] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.301] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0145.301] WriteFile (in: hFile=0x164, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0145.302] CloseHandle (hObject=0x164) returned 1 [0145.302] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\@_read_to_recover_files_@.txt")) returned 0x20 [0145.302] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0145.302] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.302] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x7ea8440, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7ea8440, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x7ea8440, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7ea8440, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x7ea5d30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7ea5d30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7ead260, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xe9f9cff0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0145.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0145.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.303] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.303] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.303] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.303] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}/VC_redist.x64.exe" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.303] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0145.304] ReadFile (in: hFile=0x164, lpBuffer=0x1255e300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1255e300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0145.306] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}/state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0145.306] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0145.307] ReadFile (in: hFile=0xe8, lpBuffer=0x1255e400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1255e400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0145.309] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}/VC_redist.x64.exe" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38)) returned 1 [0145.309] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}/state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xe9f9cff0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe)) returned 1 [0145.309] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.309] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.309] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.309] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.309] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.309] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0145.309] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0145.310] CloseHandle (hObject=0xf8) returned 1 [0145.310] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.310] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.310] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0145.312] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0145.312] WriteFile (in: hFile=0xf8, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0145.313] CloseHandle (hObject=0xf8) returned 1 [0145.313] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\@_read_to_recover_files_@.txt")) returned 0x20 [0145.313] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0145.313] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.313] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x7ec31f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7ec31f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x7ec31f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7ec31f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x7ec0ae0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7ec0ae0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7ec8010, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad7040, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x105e7220, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0145.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0145.313] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.313] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.314] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.314] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.314] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}/state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0145.314] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0145.314] ReadFile (in: hFile=0xf8, lpBuffer=0x1255e500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1255e500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0145.315] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}/vcredist_x86.exe" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0145.316] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0145.316] ReadFile (in: hFile=0x114, lpBuffer=0x1255e600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1255e600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0145.318] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}/state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad7040, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x105e7220, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a)) returned 1 [0145.318] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}/vcredist_x86.exe" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080)) returned 1 [0145.319] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.320] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.320] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.320] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.320] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.320] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0145.320] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0145.320] CloseHandle (hObject=0x160) returned 1 [0145.320] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.320] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.320] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0145.322] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0145.322] WriteFile (in: hFile=0x160, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0145.323] CloseHandle (hObject=0x160) returned 1 [0145.323] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\@_read_to_recover_files_@.txt")) returned 0x20 [0145.324] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0145.324] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.324] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x7eddfa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7eddfa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.324] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0x7eddfa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7eddfa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.324] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x7ed9180, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7ed9180, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7ee06b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.324] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93efac0, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6601040, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0145.324] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0145.324] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.324] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.324] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.324] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.324] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}/VC_redist.x86.exe" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0145.325] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0145.325] ReadFile (in: hFile=0x160, lpBuffer=0x1255e700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1255e700*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0145.327] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}/state.rsm" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.328] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0145.328] ReadFile (in: hFile=0x1b0, lpBuffer=0x1255e800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1255e800*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0145.330] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}/VC_redist.x86.exe" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30)) returned 1 [0145.330] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}/state.rsm" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93efac0, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6601040, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x2fe)) returned 1 [0145.330] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.330] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.330] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.330] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.330] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.330] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.330] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0145.331] CloseHandle (hObject=0xbc) returned 1 [0145.331] CreateFileW (lpFileName="C:/Users/All Users/Start Menu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\start menu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.331] FindFirstFileW (in: lpFileName="C:/Users/All Users/Start Menu\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.331] CreateFileW (lpFileName="C:/Users/All Users/Start Menu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\start menu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.332] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0145.332] WriteFile (in: hFile=0xbc, lpBuffer=0x12491300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12491300*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0145.333] CloseHandle (hObject=0xbc) returned 1 [0145.333] GetFileAttributesW (lpFileName="C:/Users/All Users/Start Menu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\start menu\\@_read_to_recover_files_@.txt")) returned 0x20 [0145.334] SetFileAttributesW (lpFileName="C:/Users/All Users/Start Menu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0145.334] CreateFileW (lpFileName="C:/Users/All Users/Start Menu" (normalized: "c:\\users\\all users\\start menu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.334] FindFirstFileW (in: lpFileName="C:/Users/All Users/Start Menu\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.334] CreateFileW (lpFileName="C:/Users/All Users/Sun\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.334] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.334] CreateFileW (lpFileName="C:/Users/All Users/Sun\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.335] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0145.335] WriteFile (in: hFile=0xbc, lpBuffer=0x12492600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12492600*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0145.336] CloseHandle (hObject=0xbc) returned 1 [0145.336] GetFileAttributesW (lpFileName="C:/Users/All Users/Sun\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.336] SetFileAttributesW (lpFileName="C:/Users/All Users/Sun\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.336] CreateFileW (lpFileName="C:/Users/All Users/Sun" (normalized: "c:\\users\\all users\\sun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.336] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7efb460, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7efb460, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.337] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7efb460, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7efb460, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.337] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x7efb460, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7efb460, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7efdb70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.337] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0145.337] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.337] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.337] CreateFileW (lpFileName="C:/Users/All Users/Sun/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.337] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.337] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java" (normalized: "c:\\users\\all users\\sun\\java"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.337] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/Java\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.337] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.337] CreateFileW (lpFileName="C:/Users/All Users/Sun/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.337] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.337] CreateFileW (lpFileName="C:/Users/All Users/Sun/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.338] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.338] GetFileAttributesW (lpFileName="C:/Users/All Users/Sun/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.338] CreateFileW (lpFileName="C:/Users/All Users/Sun/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.338] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0145.338] CloseHandle (hObject=0xbc) returned 1 [0145.338] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.338] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/Java\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.338] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.339] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0145.339] WriteFile (in: hFile=0xbc, lpBuffer=0x12494c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12494c00*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0145.340] CloseHandle (hObject=0xbc) returned 1 [0145.340] GetFileAttributesW (lpFileName="C:/Users/All Users/Sun/Java\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.340] SetFileAttributesW (lpFileName="C:/Users/All Users/Sun/Java\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.340] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java" (normalized: "c:\\users\\all users\\sun\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.340] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/Java\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7f02990, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7f02990, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.340] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7f02990, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7f02990, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.341] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x7f02990, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7f02990, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7f077b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.341] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0145.341] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.341] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.341] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.341] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.341] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java/Java Update" (normalized: "c:\\users\\all users\\sun\\java\\java update"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.341] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/Java/Java Update\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.341] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.341] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.342] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.342] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.342] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.342] GetFileAttributesW (lpFileName="C:/Users/All Users/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.342] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.342] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0145.342] CloseHandle (hObject=0xbc) returned 1 [0145.342] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java/Java Update\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\java update\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.342] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/Java/Java Update\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.342] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java/Java Update\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\java update\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.343] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0145.343] WriteFile (in: hFile=0xbc, lpBuffer=0x12773300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12773300*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0145.344] CloseHandle (hObject=0xbc) returned 1 [0145.344] GetFileAttributesW (lpFileName="C:/Users/All Users/Sun/Java/Java Update\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\java update\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.344] SetFileAttributesW (lpFileName="C:/Users/All Users/Sun/Java/Java Update\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.344] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java/Java Update" (normalized: "c:\\users\\all users\\sun\\java\\java update"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.344] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/Java/Java Update\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7f0c5d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7f0c5d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.345] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7f0c5d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7f0c5d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.345] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x7f0c5d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7f0c5d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7f113f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.345] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1 [0145.345] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.345] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.345] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java/Java Update/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\java update\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.345] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/Java/Java Update/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.345] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java/Java Update/jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.346] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0145.346] ReadFile (in: hFile=0xbc, lpBuffer=0x1255ea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1255ea00*, lpNumberOfBytesRead=0x12429b30*=0x77, lpOverlapped=0x0) returned 1 [0145.347] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Sun/Java/Java Update/jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77)) returned 1 [0145.347] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java/Java Update/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\java update\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.347] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/Java/Java Update/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.347] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java/Java Update/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\java update\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.347] FindFirstFileW (in: lpFileName="C:/Users/All Users/Sun/Java/Java Update/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.347] GetFileAttributesW (lpFileName="C:/Users/All Users/Sun/Java/Java Update/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\java update\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.347] CreateFileW (lpFileName="C:/Users/All Users/Sun/Java/Java Update/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\sun\\java\\java update\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0145.348] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0145.348] CloseHandle (hObject=0x130) returned 1 [0145.348] CreateFileW (lpFileName="C:/Users/All Users/Templates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\templates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.348] FindFirstFileW (in: lpFileName="C:/Users/All Users/Templates\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.349] CreateFileW (lpFileName="C:/Users/All Users/Templates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\templates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0145.349] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0145.349] WriteFile (in: hFile=0x130, lpBuffer=0x12775900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12775900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0145.351] CloseHandle (hObject=0x130) returned 1 [0145.351] GetFileAttributesW (lpFileName="C:/Users/All Users/Templates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\templates\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.351] SetFileAttributesW (lpFileName="C:/Users/All Users/Templates\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.351] CreateFileW (lpFileName="C:/Users/All Users/Templates" (normalized: "c:\\users\\all users\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.351] FindFirstFileW (in: lpFileName="C:/Users/All Users/Templates\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.351] CreateFileW (lpFileName="C:/Users/Default\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.351] FindFirstFileW (in: lpFileName="C:/Users/Default\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429af8 | out: lpFindFileData=0x12429af8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.351] CreateFileW (lpFileName="C:/Users/Default\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0145.357] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429db8 | out: lpMode=0x12429db8) returned 0 [0145.357] WriteFile (in: hFile=0x130, lpBuffer=0x12776c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429dbc, lpOverlapped=0x0 | out: lpBuffer=0x12776c00*, lpNumberOfBytesWritten=0x12429dbc*=0x1033, lpOverlapped=0x0) returned 1 [0145.358] CloseHandle (hObject=0x130) returned 1 [0145.358] GetFileAttributesW (lpFileName="C:/Users/Default\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\@_read_to_recover_files_@.txt")) returned 0x20 [0145.358] SetFileAttributesW (lpFileName="C:/Users/Default\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0145.358] CreateFileW (lpFileName="C:/Users/Default" (normalized: "c:\\users\\default"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.358] FindFirstFileW (in: lpFileName="C:/Users/Default\\*", lpFindFileData=0x12429a2c | out: lpFindFileData=0x12429a2c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7f22560, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7f22560, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.358] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7f22560, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7f22560, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.358] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x7f22560, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7f22560, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7f336d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.358] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0145.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0145.360] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0145.360] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0145.360] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.360] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.360] CreateFileW (lpFileName="C:/Users/Default/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.360] FindFirstFileW (in: lpFileName="C:/Users/Default/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.360] CreateFileW (lpFileName="C:/Users/Default/AppData" (normalized: "c:\\users\\default\\appdata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.360] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.360] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.360] CreateFileW (lpFileName="C:/Users/Default/Application Data" (normalized: "c:\\users\\default\\application data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.361] FindFirstFileW (in: lpFileName="C:/Users/Default/Application Data\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.361] CreateFileW (lpFileName="C:/Users/Default/Contacts" (normalized: "c:\\users\\default\\contacts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.361] FindFirstFileW (in: lpFileName="C:/Users/Default/Contacts\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.361] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.361] CreateFileW (lpFileName="C:/Users/Default/Cookies" (normalized: "c:\\users\\default\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.361] FindFirstFileW (in: lpFileName="C:/Users/Default/Cookies\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.361] CreateFileW (lpFileName="C:/Users/Default/Desktop" (normalized: "c:\\users\\default\\desktop"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.361] FindFirstFileW (in: lpFileName="C:/Users/Default/Desktop\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.362] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.362] CreateFileW (lpFileName="C:/Users/Default/Documents" (normalized: "c:\\users\\default\\documents"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.362] FindFirstFileW (in: lpFileName="C:/Users/Default/Documents\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.363] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.363] CreateFileW (lpFileName="C:/Users/Default/Downloads" (normalized: "c:\\users\\default\\downloads"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.363] FindFirstFileW (in: lpFileName="C:/Users/Default/Downloads\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.364] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.364] CreateFileW (lpFileName="C:/Users/Default/Favorites" (normalized: "c:\\users\\default\\favorites"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.364] FindFirstFileW (in: lpFileName="C:/Users/Default/Favorites\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.366] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.366] CreateFileW (lpFileName="C:/Users/Default/Links" (normalized: "c:\\users\\default\\links"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.367] FindFirstFileW (in: lpFileName="C:/Users/Default/Links\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.368] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.369] CreateFileW (lpFileName="C:/Users/Default/Local Settings" (normalized: "c:\\users\\default\\local settings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.369] FindFirstFileW (in: lpFileName="C:/Users/Default/Local Settings\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.369] CreateFileW (lpFileName="C:/Users/Default/Music" (normalized: "c:\\users\\default\\music"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.369] FindFirstFileW (in: lpFileName="C:/Users/Default/Music\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.369] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.369] CreateFileW (lpFileName="C:/Users/Default/My Documents" (normalized: "c:\\users\\default\\my documents"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.369] FindFirstFileW (in: lpFileName="C:/Users/Default/My Documents\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.370] CreateFileW (lpFileName="C:/Users/Default/NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0145.371] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429d18 | out: lpMode=0x12429d18) returned 0 [0145.371] ReadFile (in: hFile=0x130, lpBuffer=0x1255ec00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429d28, lpOverlapped=0x0 | out: lpBuffer=0x1255ec00*, lpNumberOfBytesRead=0x12429d28*=0x100, lpOverlapped=0x0) returned 1 [0145.373] CreateFileW (lpFileName="C:/Users/Default/NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0145.374] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429d18 | out: lpMode=0x12429d18) returned 0 [0145.374] ReadFile (in: hFile=0x134, lpBuffer=0x1255ee00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429d28, lpOverlapped=0x0 | out: lpBuffer=0x1255ee00*, lpNumberOfBytesRead=0x12429d28*=0x100, lpOverlapped=0x0) returned 1 [0145.376] CreateFileW (lpFileName="C:/Users/Default/NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0145.376] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12429d18 | out: lpMode=0x12429d18) returned 0 [0145.376] ReadFile (in: hFile=0x188, lpBuffer=0x1255ef00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429d28, lpOverlapped=0x0 | out: lpBuffer=0x1255ef00*, lpNumberOfBytesRead=0x12429d28*=0x100, lpOverlapped=0x0) returned 1 [0145.379] CreateFileW (lpFileName="C:/Users/Default/NTUSER.DAT.LOG2" (normalized: "c:\\users\\default\\ntuser.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0145.379] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x12429d18 | out: lpMode=0x12429d18) returned 0 [0145.380] ReadFile (in: hFile=0x150, lpBuffer=0x1255f000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429d28, lpOverlapped=0x0 | out: lpBuffer=0x1255f000*, lpNumberOfBytesRead=0x12429d28*=0x0, lpOverlapped=0x0) returned 1 [0145.380] CreateFileW (lpFileName="C:/Users/Default/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0145.380] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429d18 | out: lpMode=0x12429d18) returned 0 [0145.380] ReadFile (in: hFile=0x98, lpBuffer=0x1255f100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429d28, lpOverlapped=0x0 | out: lpBuffer=0x1255f100*, lpNumberOfBytesRead=0x12429d28*=0x100, lpOverlapped=0x0) returned 1 [0145.382] CreateFileW (lpFileName="C:/Users/Default/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0145.383] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429d18 | out: lpMode=0x12429d18) returned 0 [0145.383] ReadFile (in: hFile=0x100, lpBuffer=0x1255f200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429d28, lpOverlapped=0x0 | out: lpBuffer=0x1255f200*, lpNumberOfBytesRead=0x12429d28*=0x100, lpOverlapped=0x0) returned 1 [0145.385] CreateFileW (lpFileName="C:/Users/Default/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0145.386] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x12429d18 | out: lpMode=0x12429d18) returned 0 [0145.386] ReadFile (in: hFile=0x13c, lpBuffer=0x1255f300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429d28, lpOverlapped=0x0 | out: lpBuffer=0x1255f300*, lpNumberOfBytesRead=0x12429d28*=0x100, lpOverlapped=0x0) returned 1 [0145.389] CreateFileW (lpFileName="C:/Users/Default/NetHood" (normalized: "c:\\users\\default\\nethood"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.389] FindFirstFileW (in: lpFileName="C:/Users/Default/NetHood\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.389] CreateFileW (lpFileName="C:/Users/Default/Pictures" (normalized: "c:\\users\\default\\pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.389] FindFirstFileW (in: lpFileName="C:/Users/Default/Pictures\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.390] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.390] CreateFileW (lpFileName="C:/Users/Default/PrintHood" (normalized: "c:\\users\\default\\printhood"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.390] FindFirstFileW (in: lpFileName="C:/Users/Default/PrintHood\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.390] CreateFileW (lpFileName="C:/Users/Default/Recent" (normalized: "c:\\users\\default\\recent"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.391] FindFirstFileW (in: lpFileName="C:/Users/Default/Recent\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.391] CreateFileW (lpFileName="C:/Users/Default/Saved Games" (normalized: "c:\\users\\default\\saved games"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.391] FindFirstFileW (in: lpFileName="C:/Users/Default/Saved Games\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.391] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.391] CreateFileW (lpFileName="C:/Users/Default/Searches" (normalized: "c:\\users\\default\\searches"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.391] FindFirstFileW (in: lpFileName="C:/Users/Default/Searches\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.393] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.393] CreateFileW (lpFileName="C:/Users/Default/SendTo" (normalized: "c:\\users\\default\\sendto"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.393] FindFirstFileW (in: lpFileName="C:/Users/Default/SendTo\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.394] CreateFileW (lpFileName="C:/Users/Default/Start Menu" (normalized: "c:\\users\\default\\start menu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.394] FindFirstFileW (in: lpFileName="C:/Users/Default/Start Menu\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.394] CreateFileW (lpFileName="C:/Users/Default/Templates" (normalized: "c:\\users\\default\\templates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.394] FindFirstFileW (in: lpFileName="C:/Users/Default/Templates\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.394] CreateFileW (lpFileName="C:/Users/Default/Videos" (normalized: "c:\\users\\default\\videos"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.394] FindFirstFileW (in: lpFileName="C:/Users/Default/Videos\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.394] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.394] CreateFileW (lpFileName="C:/Users/Default/ntuser.ini" (normalized: "c:\\users\\default\\ntuser.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0145.395] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429d18 | out: lpMode=0x12429d18) returned 0 [0145.395] ReadFile (in: hFile=0x11c, lpBuffer=0x1255f400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429d28, lpOverlapped=0x0 | out: lpBuffer=0x1255f400*, lpNumberOfBytesRead=0x12429d28*=0x14, lpOverlapped=0x0) returned 1 [0145.396] GetFileAttributesExW (in: lpFileName="C:/Users/Default/NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429b00 | out: lpFileInformation=0x12429b00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000)) returned 1 [0145.396] CreateFileW (lpFileName="C:/Users/Default/NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0145.396] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429bfc | out: lpMode=0x12429bfc) returned 0 [0145.396] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249f240 | out: pbBuffer=0x1249f240) returned 1 [0145.397] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2760 | out: pbBuffer=0x124e2760) returned 1 [0145.397] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1255f502 | out: pbBuffer=0x1255f502) returned 1 [0145.399] SetEvent (hEvent=0xa8) returned 1 [0145.399] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429c0c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429c0c*=0xc0000, lpOverlapped=0x0) returned 1 [0145.414] GetFileType (hFile=0x170) returned 0x1 [0145.414] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429bd4 | out: lpNewFilePointer=0x0) returned 1 [0145.414] WriteFile (in: hFile=0x170, lpBuffer=0x12662000*, nNumberOfBytesToWrite=0xc0000, lpNumberOfBytesWritten=0x12429bf0, lpOverlapped=0x12429bfc | out: lpBuffer=0x12662000*, lpNumberOfBytesWritten=0x12429bf0*=0xc0000, lpOverlapped=0x12429bfc) returned 1 [0145.416] GetFileType (hFile=0x170) returned 0x1 [0145.416] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xc0000, lpNewFilePointer=0x0, dwMoveMethod=0x12429bd4 | out: lpNewFilePointer=0x0) returned 1 [0145.416] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429c0c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429c0c*=0x0, lpOverlapped=0x0) returned 1 [0145.416] CloseHandle (hObject=0x170) returned 1 [0145.416] SwitchToThread () returned 1 [0145.418] CreateFileW (lpFileName="C:/Users/Default/NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.418] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429bfc | out: lpMode=0x12429bfc) returned 0 [0145.418] WriteFile (in: hFile=0x1b0, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429c00, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429c00*=0x108, lpOverlapped=0x0) returned 1 [0145.419] CloseHandle (hObject=0x1b0) returned 1 [0145.419] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12400280*, nNumberOfCharsToWrite=0x39, lpNumberOfCharsWritten=0x124298c4, lpReserved=0x0 | out: lpBuffer=0x12400280*, lpNumberOfCharsWritten=0x124298c4*=0x39) returned 1 [0145.419] GetFileAttributesExW (in: lpFileName="C:/Users/Default/NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), fInfoLevelId=0x0, lpFileInformation=0x12429b00 | out: lpFileInformation=0x12429b00*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0145.420] CreateFileW (lpFileName="C:/Users/Default/NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.420] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429bfc | out: lpMode=0x12429bfc) returned 0 [0145.420] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0145.421] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2090 | out: pbBuffer=0x124e2090) returned 1 [0145.421] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1255e002 | out: pbBuffer=0x1255e002) returned 1 [0145.421] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1255e0a2 | out: pbBuffer=0x1255e0a2) returned 1 [0145.422] SetEvent (hEvent=0xb8) returned 1 [0145.422] ReadFile (in: hFile=0x1b0, lpBuffer=0x130ca000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429c0c, lpOverlapped=0x0 | out: lpBuffer=0x130ca000*, lpNumberOfBytesRead=0x12429c0c*=0x400, lpOverlapped=0x0) returned 1 [0145.422] GetFileType (hFile=0x1b0) returned 0x1 [0145.422] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429bd4 | out: lpNewFilePointer=0x0) returned 1 [0145.422] WriteFile (in: hFile=0x1b0, lpBuffer=0x1277c400*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x12429bf0, lpOverlapped=0x12429bfc | out: lpBuffer=0x1277c400*, lpNumberOfBytesWritten=0x12429bf0*=0x400, lpOverlapped=0x12429bfc) returned 1 [0145.423] GetFileType (hFile=0x1b0) returned 0x1 [0145.423] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x400, lpNewFilePointer=0x0, dwMoveMethod=0x12429bd4 | out: lpNewFilePointer=0x0) returned 1 [0145.423] ReadFile (in: hFile=0x1b0, lpBuffer=0x130ca000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429c0c, lpOverlapped=0x0 | out: lpBuffer=0x130ca000*, lpNumberOfBytesRead=0x12429c0c*=0x0, lpOverlapped=0x0) returned 1 [0145.423] CloseHandle (hObject=0x1b0) returned 1 [0145.423] CreateFileW (lpFileName="C:/Users/Default/NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.423] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429bfc | out: lpMode=0x12429bfc) returned 0 [0145.423] WriteFile (in: hFile=0x1b0, lpBuffer=0x1247cfc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429c00, lpOverlapped=0x0 | out: lpBuffer=0x1247cfc0*, lpNumberOfBytesWritten=0x12429c00*=0x108, lpOverlapped=0x0) returned 1 [0145.423] CloseHandle (hObject=0x1b0) returned 1 [0145.423] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12400300*, nNumberOfCharsToWrite=0x3d, lpNumberOfCharsWritten=0x124298c4, lpReserved=0x0 | out: lpBuffer=0x12400300*, lpNumberOfCharsWritten=0x124298c4*=0x3d) returned 1 [0145.424] GetFileAttributesExW (in: lpFileName="C:/Users/Default/NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x12429b00 | out: lpFileInformation=0x12429b00*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400)) returned 1 [0145.424] GetFileAttributesExW (in: lpFileName="C:/Users/Default/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x12429b00 | out: lpFileInformation=0x12429b00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0145.424] GetFileAttributesExW (in: lpFileName="C:/Users/Default/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429b00 | out: lpFileInformation=0x12429b00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0145.424] GetFileAttributesExW (in: lpFileName="C:/Users/Default/NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429b00 | out: lpFileInformation=0x12429b00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0145.424] GetFileAttributesExW (in: lpFileName="C:/Users/Default/ntuser.ini" (normalized: "c:\\users\\default\\ntuser.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429b00 | out: lpFileInformation=0x12429b00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1 [0145.424] CreateFileW (lpFileName="C:/Users/Default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.424] FindFirstFileW (in: lpFileName="C:/Users/Default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.424] CreateFileW (lpFileName="C:/Users/Default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.425] FindFirstFileW (in: lpFileName="C:/Users/Default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.425] GetFileAttributesW (lpFileName="C:/Users/Default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.425] CreateFileW (lpFileName="C:/Users/Default/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.425] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429c4c | out: lpMode=0x12429c4c) returned 0 [0145.425] CloseHandle (hObject=0x1b0) returned 1 [0145.425] CreateFileW (lpFileName="C:/Users/Default/AppData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.425] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.425] CreateFileW (lpFileName="C:/Users/Default/AppData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.426] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0145.426] WriteFile (in: hFile=0x1b0, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0145.427] CloseHandle (hObject=0x1b0) returned 1 [0145.427] GetFileAttributesW (lpFileName="C:/Users/Default/AppData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.428] SetFileAttributesW (lpFileName="C:/Users/Default/AppData\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.428] CreateFileW (lpFileName="C:/Users/Default/AppData" (normalized: "c:\\users\\default\\appdata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.428] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7fd48f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7fd48f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.428] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7fd48f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7fd48f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.428] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x7fd48f0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7fd48f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7fd9710, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.428] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0145.428] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0145.428] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0145.428] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.428] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.428] CreateFileW (lpFileName="C:/Users/Default/AppData/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.428] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.428] CreateFileW (lpFileName="C:/Users/Default/AppData/Local" (normalized: "c:\\users\\default\\appdata\\local"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.429] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.429] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.430] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow" (normalized: "c:\\users\\default\\appdata\\locallow"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.430] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.430] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.431] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming" (normalized: "c:\\users\\default\\appdata\\roaming"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.431] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.432] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.432] CreateFileW (lpFileName="C:/Users/Default/AppData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.432] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.432] CreateFileW (lpFileName="C:/Users/Default/AppData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.432] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.432] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.432] CreateFileW (lpFileName="C:/Users/Default/AppData/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.432] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0145.432] CloseHandle (hObject=0x1b0) returned 1 [0145.432] CreateFileW (lpFileName="C:/Users/Default/AppData/Local\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.433] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.433] CreateFileW (lpFileName="C:/Users/Default/AppData/Local\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.434] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0145.434] WriteFile (in: hFile=0x1b0, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0145.435] CloseHandle (hObject=0x1b0) returned 1 [0145.435] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.435] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.435] CreateFileW (lpFileName="C:/Users/Default/AppData/Local" (normalized: "c:\\users\\default\\appdata\\local"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.435] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7fe8170, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7fe8170, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7fe8170, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7fe8170, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x7fe8170, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7fe8170, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7fecf90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0145.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0145.436] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0145.436] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0145.436] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0145.436] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0145.436] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.436] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.436] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.436] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.436] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Application Data" (normalized: "c:\\users\\default\\appdata\\local\\application data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.436] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Application Data\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.436] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/History" (normalized: "c:\\users\\default\\appdata\\local\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.436] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/History\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.436] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.437] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0145.438] ReadFile (in: hFile=0x1b0, lpBuffer=0x12466600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12466600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0145.440] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft" (normalized: "c:\\users\\default\\appdata\\local\\microsoft"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.440] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.442] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.443] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temp" (normalized: "c:\\users\\default\\appdata\\local\\temp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.443] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Temp\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.443] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.443] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temporary Internet Files" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.443] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Temporary Internet Files\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.443] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0)) returned 1 [0145.443] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.443] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0145.444] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e380 | out: pbBuffer=0x1249e380) returned 1 [0145.444] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2240 | out: pbBuffer=0x124e2240) returned 1 [0145.444] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12466702 | out: pbBuffer=0x12466702) returned 1 [0145.444] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124667da | out: pbBuffer=0x124667da) returned 1 [0145.446] SetEvent (hEvent=0x7c) returned 1 [0145.446] ReadFile (in: hFile=0xbc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xbd7f0, lpOverlapped=0x0) returned 1 [0145.457] CloseHandle (hObject=0x1b0) returned 1 [0145.457] SwitchToThread () returned 1 [0145.457] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.465] SetEvent (hEvent=0xb8) returned 1 [0145.465] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.469] SetEvent (hEvent=0xb8) returned 1 [0145.469] SwitchToThread () returned 1 [0145.473] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.551] SetEvent (hEvent=0xb8) returned 1 [0145.551] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0145.552] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.552] SetEvent (hEvent=0xb8) returned 1 [0145.552] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0145.553] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.553] CloseHandle (hObject=0x164) returned 1 [0145.553] CloseHandle (hObject=0x178) returned 1 [0145.553] CloseHandle (hObject=0x158) returned 1 [0145.553] CloseHandle (hObject=0x1b0) returned 1 [0145.553] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.684] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.833] SetEvent (hEvent=0x7c) returned 1 [0145.833] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.833] SetEvent (hEvent=0x7c) returned 1 [0145.833] SetEvent (hEvent=0xa8) returned 1 [0145.833] SwitchToThread () returned 1 [0145.834] SetEvent (hEvent=0x7c) returned 1 [0145.834] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.854] SetEvent (hEvent=0xa8) returned 1 [0145.854] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0145.871] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.871] SetEvent (hEvent=0xa8) returned 1 [0145.871] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0145.874] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0145.874] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.874] SetEvent (hEvent=0xac) returned 1 [0145.874] SetEvent (hEvent=0x7c) returned 1 [0145.874] ReadFile (in: hFile=0x138, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x200000, lpOverlapped=0x0) returned 1 [0145.909] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.910] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.948] SetEvent (hEvent=0xb8) returned 1 [0145.948] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.949] SetEvent (hEvent=0xb8) returned 1 [0145.949] SwitchToThread () returned 1 [0145.951] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.973] SetEvent (hEvent=0xb8) returned 1 [0145.973] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0145.974] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.974] SetEvent (hEvent=0xb8) returned 1 [0145.974] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0145.975] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0145.975] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0146.125] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0146.179] SetEvent (hEvent=0x7c) returned 1 [0146.179] SetEvent (hEvent=0xb8) returned 1 [0146.179] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0146.438] SetEvent (hEvent=0xa8) returned 1 [0146.438] SetEvent (hEvent=0xb8) returned 1 [0146.438] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0146.752] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0147.312] SetEvent (hEvent=0xa8) returned 1 [0147.312] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0147.313] SetEvent (hEvent=0xa8) returned 1 [0147.313] SetEvent (hEvent=0xb8) returned 1 [0147.313] CloseHandle (hObject=0x1ac) returned 1 [0147.313] CloseHandle (hObject=0x1a8) returned 1 [0147.313] CloseHandle (hObject=0x1a4) returned 1 [0147.313] CloseHandle (hObject=0x1a0) returned 1 [0147.313] CloseHandle (hObject=0x194) returned 1 [0147.313] CloseHandle (hObject=0x184) returned 1 [0147.313] CloseHandle (hObject=0xec) returned 1 [0147.314] CloseHandle (hObject=0x170) returned 1 [0147.314] CloseHandle (hObject=0x138) returned 1 [0147.315] CloseHandle (hObject=0x134) returned 1 [0147.315] CloseHandle (hObject=0xdc) returned 1 [0147.315] CloseHandle (hObject=0x108) returned 1 [0147.315] CloseHandle (hObject=0x17c) returned 1 [0147.315] CloseHandle (hObject=0x158) returned 1 [0147.315] CloseHandle (hObject=0x1b0) returned 1 [0147.315] CloseHandle (hObject=0x114) returned 1 [0147.315] CloseHandle (hObject=0x130) returned 1 [0147.315] CloseHandle (hObject=0x160) returned 1 [0147.315] CloseHandle (hObject=0xbc) returned 1 [0147.315] CloseHandle (hObject=0xf8) returned 1 [0147.315] CloseHandle (hObject=0xe8) returned 1 [0147.315] CloseHandle (hObject=0x164) returned 1 [0147.315] CloseHandle (hObject=0x178) returned 1 [0147.315] CloseHandle (hObject=0x150) returned 1 [0147.315] CloseHandle (hObject=0x188) returned 1 [0147.315] CloseHandle (hObject=0x11c) returned 1 [0147.315] CloseHandle (hObject=0x13c) returned 1 [0147.315] CloseHandle (hObject=0x100) returned 1 [0147.315] CloseHandle (hObject=0x98) returned 1 [0147.316] CloseHandle (hObject=0x15c) returned 1 [0147.316] CloseHandle (hObject=0x198) returned 1 [0147.316] CloseHandle (hObject=0x12c) returned 1 [0147.316] CloseHandle (hObject=0x16c) returned 1 [0147.316] CloseHandle (hObject=0x10c) returned 1 [0147.316] CloseHandle (hObject=0x118) returned 1 [0147.316] CloseHandle (hObject=0xc8) returned 1 [0147.316] CloseHandle (hObject=0xd0) returned 1 [0147.316] CloseHandle (hObject=0x180) returned 1 [0147.316] CloseHandle (hObject=0x140) returned 1 [0147.316] CloseHandle (hObject=0x14c) returned 1 [0147.316] CloseHandle (hObject=0xf4) returned 1 [0147.316] CloseHandle (hObject=0x174) returned 1 [0147.316] CloseHandle (hObject=0x19c) returned 1 [0147.316] CloseHandle (hObject=0xe4) returned 1 [0147.316] CloseHandle (hObject=0x148) returned 1 [0147.316] CloseHandle (hObject=0x168) returned 1 [0147.316] CloseHandle (hObject=0x124) returned 1 [0147.316] CloseHandle (hObject=0x128) returned 1 [0147.317] CloseHandle (hObject=0x27c) returned 1 [0147.317] CloseHandle (hObject=0x120) returned 1 [0147.317] CloseHandle (hObject=0xfc) returned 1 [0147.317] CloseHandle (hObject=0x144) returned 1 [0147.317] CloseHandle (hObject=0x110) returned 1 [0147.317] CloseHandle (hObject=0xc0) returned 1 [0147.317] CloseHandle (hObject=0x18c) returned 1 [0147.317] CloseHandle (hObject=0xe0) returned 1 [0147.317] CloseHandle (hObject=0xcc) returned 1 [0147.317] CloseHandle (hObject=0xd8) returned 1 [0147.317] CloseHandle (hObject=0xf0) returned 1 [0147.317] CloseHandle (hObject=0x104) returned 1 [0147.317] CloseHandle (hObject=0x154) returned 1 [0147.317] CloseHandle (hObject=0x190) returned 1 [0147.317] SwitchToThread () returned 1 [0147.317] SetEvent (hEvent=0xa8) returned 1 [0147.318] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0147.318] SetEvent (hEvent=0xa8) returned 1 [0147.318] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0147.318] SetEvent (hEvent=0xa8) returned 1 [0147.318] SwitchToThread () returned 1 [0147.320] SetEvent (hEvent=0xa8) returned 1 [0147.320] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0147.415] SetEvent (hEvent=0xb8) returned 1 [0147.416] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0147.512] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0147.512] SetEvent (hEvent=0xb8) returned 1 [0147.512] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0147.608] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0147.609] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0148.478] SetEvent (hEvent=0xb8) returned 1 [0148.478] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0148.531] SetEvent (hEvent=0xb8) returned 1 [0148.531] SwitchToThread () returned 1 [0148.586] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0148.717] SetEvent (hEvent=0xb8) returned 1 [0148.717] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0148.817] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0148.817] SetEvent (hEvent=0xb8) returned 1 [0148.818] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0148.826] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0148.826] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0148.938] SetEvent (hEvent=0xb8) returned 1 [0148.938] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0148.954] SetEvent (hEvent=0xb8) returned 1 [0148.954] SetEvent (hEvent=0x7c) returned 1 [0148.954] CloseHandle (hObject=0xc0) returned 1 [0148.954] CloseHandle (hObject=0x18c) returned 1 [0148.954] CloseHandle (hObject=0xe0) returned 1 [0148.954] CloseHandle (hObject=0xcc) returned 1 [0148.954] CloseHandle (hObject=0xd8) returned 1 [0148.954] CloseHandle (hObject=0xf0) returned 1 [0148.954] CloseHandle (hObject=0x104) returned 1 [0148.954] CloseHandle (hObject=0x154) returned 1 [0148.954] CloseHandle (hObject=0x190) returned 1 [0148.954] CloseHandle (hObject=0x1b4) returned 1 [0148.954] SwitchToThread () returned 1 [0148.955] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0148.962] SetEvent (hEvent=0x7c) returned 1 [0148.963] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0148.977] SetEvent (hEvent=0x7c) returned 1 [0148.977] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0148.978] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0148.978] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0148.987] SetEvent (hEvent=0x7c) returned 1 [0148.987] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0148.997] SetEvent (hEvent=0x7c) returned 1 [0148.997] SwitchToThread () returned 1 [0148.997] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0149.004] SetEvent (hEvent=0x7c) returned 1 [0149.005] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0149.014] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0149.018] SetEvent (hEvent=0x7c) returned 1 [0149.018] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x102 [0149.019] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0149.019] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0149.026] SetEvent (hEvent=0x7c) returned 1 [0149.026] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0149.039] SetEvent (hEvent=0x7c) returned 1 [0149.039] SwitchToThread () returned 1 [0149.039] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0149.044] SetEvent (hEvent=0x7c) returned 1 [0149.045] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0149.054] SetEvent (hEvent=0x7c) returned 1 [0149.054] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0149.055] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0149.063] SetEvent (hEvent=0x7c) returned 1 [0149.063] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0149.075] SetEvent (hEvent=0x7c) returned 1 [0149.075] SwitchToThread () returned 1 [0149.076] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0149.081] SetEvent (hEvent=0x7c) returned 1 [0149.081] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0149.082] SetEvent (hEvent=0x7c) returned 1 [0149.082] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0x1) returned 0x0 [0149.092] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0149.246] SetEvent (hEvent=0x7c) returned 1 [0149.246] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0149.398] SetEvent (hEvent=0x7c) returned 1 [0149.398] SwitchToThread () returned 1 [0149.399] SetEvent (hEvent=0x7c) returned 1 [0149.399] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0149.400] SetEvent (hEvent=0x7c) returned 1 [0149.400] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0149.400] SetEvent (hEvent=0x7c) returned 1 [0149.400] SwitchToThread () returned 1 [0149.495] SetEvent (hEvent=0xa8) returned 1 [0149.495] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0150.705] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0150.854] SetEvent (hEvent=0x7c) returned 1 [0150.854] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0150.854] SetEvent (hEvent=0x7c) returned 1 [0150.854] SwitchToThread () returned 1 [0150.986] SetEvent (hEvent=0xa8) returned 1 [0150.986] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0151.356] SetEvent (hEvent=0x6c) returned 1 [0151.357] ReadFile (hFile=0x190, lpBuffer=0x12560000, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x124f0eb8, lpOverlapped=0x0) Thread: id = 5 os_tid = 0x9ac [0030.648] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x325fff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x325fff38*=0xa4) returned 1 [0030.648] VirtualQuery (in: lpAddress=0x325fff48, lpBuffer=0x325fff48, dwLength=0x1c | out: lpBuffer=0x325fff48*(BaseAddress=0x325ff000, AllocationBase=0x32500000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0030.648] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xa8 [0030.648] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0030.681] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0030.698] SetEvent (hEvent=0xa0) returned 1 [0030.698] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0030.951] SetEvent (hEvent=0x7c) returned 1 [0030.951] ReadFile (in: hFile=0xbc, lpBuffer=0x124c0000, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x1241eeb8, lpOverlapped=0x0 | out: lpBuffer=0x124c0000, lpNumberOfBytesRead=0x1241eeb8*=0x0, lpOverlapped=0x0) returned 0 [0035.606] CloseHandle (hObject=0xbc) returned 1 [0035.606] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0035.608] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0035.625] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0035.726] SwitchToThread () returned 1 [0035.823] SetEvent (hEvent=0xa0) returned 1 [0035.823] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0036.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44c000, lpParameter=0x127c2000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4 [0036.885] CloseHandle (hObject=0xc4) returned 1 [0036.885] ReadFile (in: hFile=0x98, lpBuffer=0x127c8000, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x124f0eb8, lpOverlapped=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfBytesRead=0x124f0eb8*=0x26, lpOverlapped=0x0) returned 1 [0037.346] SetEvent (hEvent=0xac) returned 1 [0037.346] ReadFile (in: hFile=0x98, lpBuffer=0x124c2626, nNumberOfBytesToRead=0x5da, lpNumberOfBytesRead=0x124f0eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c2626, lpNumberOfBytesRead=0x124f0eb8*=0x0, lpOverlapped=0x0) returned 0 [0037.380] CloseHandle (hObject=0x98) returned 1 [0037.381] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0037.382] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0037.413] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0037.616] SetEvent (hEvent=0xa0) returned 1 [0037.617] ReadFile (in: hFile=0x98, lpBuffer=0x127c8200, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x1241feb8, lpOverlapped=0x0 | out: lpBuffer=0x127c8200, lpNumberOfBytesRead=0x1241feb8*=0x0, lpOverlapped=0x0) returned 0 [0040.053] SetEvent (hEvent=0xac) returned 1 [0040.053] CloseHandle (hObject=0x98) returned 1 [0040.053] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0042.088] SetEvent (hEvent=0xb8) returned 1 [0042.088] ReadFile (in: hFile=0xc8, lpBuffer=0x127c8400, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x124eaeb8, lpOverlapped=0x0 | out: lpBuffer=0x127c8400*, lpNumberOfBytesRead=0x124eaeb8*=0x29, lpOverlapped=0x0) returned 1 [0043.004] SetEvent (hEvent=0xac) returned 1 [0043.004] ReadFile (in: hFile=0xc8, lpBuffer=0x124c2c29, nNumberOfBytesToRead=0x5d7, lpNumberOfBytesRead=0x124eaeb8, lpOverlapped=0x0 | out: lpBuffer=0x124c2c29, lpNumberOfBytesRead=0x124eaeb8*=0x0, lpOverlapped=0x0) returned 0 [0043.059] CloseHandle (hObject=0xc8) returned 1 [0043.059] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0043.060] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0043.108] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0043.173] SetEvent (hEvent=0xa0) returned 1 [0043.173] ReadFile (in: hFile=0xc8, lpBuffer=0x127c8600, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x12421eb8, lpOverlapped=0x0 | out: lpBuffer=0x127c8600, lpNumberOfBytesRead=0x12421eb8*=0x0, lpOverlapped=0x0) returned 0 [0044.028] CloseHandle (hObject=0xc8) returned 1 [0044.028] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0044.029] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0044.052] SetEvent (hEvent=0x7c) returned 1 [0044.052] SetEvent (hEvent=0x6c) returned 1 [0044.052] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0044.053] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0044.054] SetEvent (hEvent=0x7c) returned 1 [0044.054] SetEvent (hEvent=0x6c) returned 1 [0044.054] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0044.055] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0044.059] SetEvent (hEvent=0x6c) returned 1 [0044.059] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0044.060] SetEvent (hEvent=0x6c) returned 1 [0044.060] SwitchToThread () returned 1 [0044.064] SetEvent (hEvent=0xa0) returned 1 [0044.064] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0044.152] SetEvent (hEvent=0xb8) returned 1 [0044.152] ReadFile (in: hFile=0x98, lpBuffer=0x12818000, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x124f0eb8, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f0eb8*=0x13, lpOverlapped=0x0) returned 1 [0044.710] SetEvent (hEvent=0xac) returned 1 [0044.710] ReadFile (in: hFile=0x98, lpBuffer=0x1281a013, nNumberOfBytesToRead=0x5ed, lpNumberOfBytesRead=0x124f0eb8, lpOverlapped=0x0 | out: lpBuffer=0x1281a013*, lpNumberOfBytesRead=0x124f0eb8*=0x27, lpOverlapped=0x0) returned 1 [0044.710] ReadFile (in: hFile=0x98, lpBuffer=0x1281a03a, nNumberOfBytesToRead=0x5c6, lpNumberOfBytesRead=0x124f0eb8, lpOverlapped=0x0 | out: lpBuffer=0x1281a03a, lpNumberOfBytesRead=0x124f0eb8*=0x0, lpOverlapped=0x0) returned 0 [0045.545] SetEvent (hEvent=0xac) returned 1 [0045.545] CloseHandle (hObject=0x98) returned 1 [0045.546] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0045.897] SetEvent (hEvent=0xb8) returned 1 [0045.898] SwitchToThread () returned 1 [0045.905] VirtualAlloc (lpAddress=0x127a0000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x127a0000 [0045.905] SetEvent (hEvent=0xb8) returned 1 [0045.905] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0045.908] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0045.908] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0046.178] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0046.575] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0046.771] SetEvent (hEvent=0xb8) returned 1 [0046.771] SetEvent (hEvent=0xa0) returned 1 [0046.771] SwitchToThread () returned 1 [0046.875] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0047.462] SetEvent (hEvent=0x6c) returned 1 [0047.462] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0047.462] SetEvent (hEvent=0x6c) returned 1 [0047.462] SwitchToThread () returned 1 [0047.565] SetEvent (hEvent=0xa0) returned 1 [0047.565] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0048.078] SetEvent (hEvent=0xa0) returned 1 [0048.078] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0048.078] SetEvent (hEvent=0xa0) returned 1 [0048.078] SetEvent (hEvent=0xb8) returned 1 [0048.078] CloseHandle (hObject=0x98) returned 1 [0048.078] CloseHandle (hObject=0xc8) returned 1 [0048.228] CloseHandle (hObject=0xd0) returned 1 [0048.228] CloseHandle (hObject=0xbc) returned 1 [0048.228] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0048.461] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0049.338] SetEvent (hEvent=0x6c) returned 1 [0049.338] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0049.339] SetEvent (hEvent=0x6c) returned 1 [0049.339] SwitchToThread () returned 1 [0049.472] SetEvent (hEvent=0xb8) returned 1 [0049.472] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0049.969] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0050.189] SetEvent (hEvent=0x6c) returned 1 [0050.189] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0050.190] SetEvent (hEvent=0x6c) returned 1 [0050.207] SwitchToThread () returned 1 [0050.297] SetEvent (hEvent=0xb8) returned 1 [0050.298] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0050.682] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0050.832] SetEvent (hEvent=0x6c) returned 1 [0050.836] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0050.849] SetEvent (hEvent=0x6c) returned 1 [0050.849] SwitchToThread () returned 1 [0050.855] SetEvent (hEvent=0xb8) returned 1 [0050.856] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0051.349] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0051.424] SetEvent (hEvent=0x6c) returned 1 [0051.424] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0051.424] SetEvent (hEvent=0x6c) returned 1 [0051.424] SwitchToThread () returned 1 [0051.450] SetEvent (hEvent=0xb8) returned 1 [0051.450] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0051.850] SetEvent (hEvent=0xb8) returned 1 [0051.850] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0051.947] SetEvent (hEvent=0xb8) returned 1 [0051.947] SwitchToThread () returned 1 [0052.036] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0052.242] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0052.339] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0052.419] SetEvent (hEvent=0xb8) returned 1 [0052.423] VirtualAlloc (lpAddress=0x12452000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x12452000 [0052.424] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0052.519] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0052.519] SetEvent (hEvent=0xb8) returned 1 [0052.519] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0052.527] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0052.527] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0052.535] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0052.535] SetEvent (hEvent=0xac) returned 1 [0052.535] SetEvent (hEvent=0xb8) returned 1 [0052.536] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0052.538] SetEvent (hEvent=0xb8) returned 1 [0052.538] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0052.554] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0052.555] SetEvent (hEvent=0xac) returned 1 [0052.559] SetEvent (hEvent=0xb8) returned 1 [0052.604] GetFileType (hFile=0x98) returned 0x1 [0052.604] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0052.604] WriteFile (in: hFile=0x98, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0052.706] GetFileType (hFile=0x98) returned 0x1 [0052.706] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0052.706] GetFileType (hFile=0x98) returned 0x1 [0052.706] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0052.706] WriteFile (in: hFile=0x98, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0052.803] GetFileType (hFile=0x98) returned 0x1 [0052.803] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0052.803] GetFileType (hFile=0x98) returned 0x1 [0052.803] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0052.804] WriteFile (in: hFile=0x98, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0052.912] GetFileType (hFile=0x98) returned 0x1 [0052.912] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0052.912] GetFileType (hFile=0x98) returned 0x1 [0052.912] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0052.912] WriteFile (in: hFile=0x98, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0053.015] GetFileType (hFile=0x98) returned 0x1 [0053.015] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0053.015] GetFileType (hFile=0x98) returned 0x1 [0053.015] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0053.015] WriteFile (in: hFile=0x98, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0053.122] GetFileType (hFile=0x98) returned 0x1 [0053.122] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0053.122] GetFileType (hFile=0x98) returned 0x1 [0053.122] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0053.122] WriteFile (in: hFile=0x98, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0053.217] GetFileType (hFile=0x98) returned 0x1 [0053.217] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0053.217] GetFileType (hFile=0x98) returned 0x1 [0053.217] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0053.217] WriteFile (in: hFile=0x98, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0053.309] GetFileType (hFile=0x98) returned 0x1 [0053.309] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0053.309] GetFileType (hFile=0x98) returned 0x1 [0053.309] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0053.309] WriteFile (in: hFile=0x98, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x1242fb48*=0x800000, lpOverlapped=0x1242fb54) returned 1 [0053.401] GetFileType (hFile=0x98) returned 0x1 [0053.401] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0053.401] ReadFile (in: hFile=0x98, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x1242fb64*=0x17f3f4, lpOverlapped=0x0) returned 1 [0053.418] VirtualAlloc (lpAddress=0x124f2000, dwSize=0x180000, flAllocationType=0x1000, flProtect=0x4) returned 0x124f2000 [0053.446] GetFileType (hFile=0x98) returned 0x1 [0053.446] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0053.446] WriteFile (in: hFile=0x98, lpBuffer=0x124f2000*, nNumberOfBytesToWrite=0x17f3f4, lpNumberOfBytesWritten=0x1242fb48, lpOverlapped=0x1242fb54 | out: lpBuffer=0x124f2000*, lpNumberOfBytesWritten=0x1242fb48*=0x17f3f4, lpOverlapped=0x1242fb54) returned 1 [0053.460] GetFileType (hFile=0x98) returned 0x1 [0053.460] SetFilePointerEx (in: hFile=0x98, liDistanceToMove=0x97f3f4, lpNewFilePointer=0x0, dwMoveMethod=0x1242fb2c | out: lpNewFilePointer=0x0) returned 1 [0053.460] ReadFile (in: hFile=0x98, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x1242fb64*=0x0, lpOverlapped=0x0) returned 1 [0053.461] CloseHandle (hObject=0x98) returned 1 [0053.651] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0053.651] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x1242fb54 | out: lpMode=0x1242fb54) returned 0 [0053.651] WriteFile (in: hFile=0x98, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x1242fb58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x1242fb58*=0x108, lpOverlapped=0x0) returned 1 [0053.651] CloseHandle (hObject=0x98) returned 1 [0053.819] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12706000*, nNumberOfCharsToWrite=0x66, lpNumberOfCharsWritten=0x1242f81c, lpReserved=0x0 | out: lpBuffer=0x12706000*, lpNumberOfCharsWritten=0x1242f81c*=0x66) returned 1 [0053.819] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), fInfoLevelId=0x0, lpFileInformation=0x1242fa58 | out: lpFileInformation=0x1242fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00)) returned 1 [0053.819] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1242fa58 | out: lpFileInformation=0x1242fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0053.819] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x1242fa58 | out: lpFileInformation=0x1242fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648)) returned 1 [0053.820] VirtualAlloc (lpAddress=0x12496000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12496000 [0053.820] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0053.820] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242f9a8 | out: lpFindFileData=0x1242f9a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0053.820] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0053.820] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242f9a0 | out: lpFindFileData=0x1242f9a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0053.820] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0053.820] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0019-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0053.820] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x1242fba4 | out: lpMode=0x1242fba4) returned 0 [0053.821] CloseHandle (hObject=0x98) returned 1 [0053.821] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0053.822] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242fa50 | out: lpFindFileData=0x1242fa50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0053.822] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0053.822] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x1242fd10 | out: lpMode=0x1242fd10) returned 0 [0053.822] WriteFile (in: hFile=0x98, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242fd14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242fd14*=0x1033, lpOverlapped=0x0) returned 1 [0053.823] CloseHandle (hObject=0x98) returned 1 [0053.824] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0053.824] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0053.824] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0053.824] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x1242f984 | out: lpFindFileData=0x1242f984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd310cae0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd310cae0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0053.824] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd310cae0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd310cae0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.824] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xd310cae0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xd310cae0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd3111900, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0053.824] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0053.824] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0053.824] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0053.824] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0053.824] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x1242fa00 | out: lpFindFileData=0x1242fa00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0053.824] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0053.824] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0053.825] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x1242f9a8 | out: lpFindFileData=0x1242f9a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0053.825] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0053.825] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x1242fc70 | out: lpMode=0x1242fc70) returned 0 [0053.825] ReadFile (in: hFile=0x98, lpBuffer=0x12778700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242fc80, lpOverlapped=0x0 | out: lpBuffer=0x12778700*, lpNumberOfBytesRead=0x1242fc80*=0x100, lpOverlapped=0x0) returned 1 [0053.829] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0053.829] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x1242fc70 | out: lpMode=0x1242fc70) returned 0 [0053.829] ReadFile (in: hFile=0xc0, lpBuffer=0x12778800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242fc80, lpOverlapped=0x0 | out: lpBuffer=0x12778800*, lpNumberOfBytesRead=0x1242fc80*=0x100, lpOverlapped=0x0) returned 1 [0053.832] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0053.832] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x1242fc70 | out: lpMode=0x1242fc70) returned 0 [0053.832] ReadFile (in: hFile=0xbc, lpBuffer=0x12778900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242fc80, lpOverlapped=0x0 | out: lpBuffer=0x12778900*, lpNumberOfBytesRead=0x1242fc80*=0x100, lpOverlapped=0x0) returned 1 [0053.834] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0053.835] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x1242fc70 | out: lpMode=0x1242fc70) returned 0 [0053.835] ReadFile (in: hFile=0xd0, lpBuffer=0x12778a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1242fc80, lpOverlapped=0x0 | out: lpBuffer=0x12778a00*, lpNumberOfBytesRead=0x1242fc80*=0x100, lpOverlapped=0x0) returned 1 [0053.836] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), fInfoLevelId=0x0, lpFileInformation=0x1242fa58 | out: lpFileInformation=0x1242fa58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc)) returned 1 [0053.837] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0053.837] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x1242fb54 | out: lpMode=0x1242fb54) returned 0 [0053.837] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e380 | out: pbBuffer=0x1240e380) returned 1 [0053.838] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12778b02 | out: pbBuffer=0x12778b02) returned 1 [0053.840] SetEvent (hEvent=0xa0) returned 1 [0053.840] ReadFile (in: hFile=0xc8, lpBuffer=0x13c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242fb64, lpOverlapped=0x0 | out: lpBuffer=0x13c00000*, lpNumberOfBytesRead=0x1242fb64*=0x800000, lpOverlapped=0x0) returned 1 [0054.059] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0054.061] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0054.110] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0054.255] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0055.070] SetEvent (hEvent=0x6c) returned 1 [0055.071] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0055.088] SetEvent (hEvent=0xa0) returned 1 [0055.088] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0055.090] SetEvent (hEvent=0xa0) returned 1 [0055.090] SetEvent (hEvent=0x6c) returned 1 [0055.091] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x32f00000 [0055.126] GetFileType (hFile=0xc8) returned 0x1 [0055.126] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0055.126] WriteFile (in: hFile=0xc8, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x621fcc, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x621fcc, lpOverlapped=0x12429b54) returned 1 [0055.219] GetFileType (hFile=0xc8) returned 0x1 [0055.219] SetFilePointerEx (in: hFile=0xc8, liDistanceToMove=0xe21fcc, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0055.220] ReadFile (in: hFile=0xc8, lpBuffer=0x13c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x13c00000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0055.220] CloseHandle (hObject=0xc8) returned 1 [0055.555] SetEvent (hEvent=0xac) returned 1 [0055.555] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0055.555] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0055.563] WriteFile (in: hFile=0xc8, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0055.572] CloseHandle (hObject=0xc8) returned 1 [0055.855] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12706000*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x12706000*, lpNumberOfCharsWritten=0x1242981c*=0x68) returned 1 [0055.858] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00)) returned 1 [0055.858] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72)) returned 1 [0055.858] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f)) returned 1 [0055.858] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0055.858] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0055.859] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0055.859] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0055.859] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0055.859] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001A-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0055.859] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0055.865] CloseHandle (hObject=0xc8) returned 1 [0055.865] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0055.866] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0055.866] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0055.881] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0055.882] WriteFile (in: hFile=0xc8, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0055.883] CloseHandle (hObject=0xc8) returned 1 [0055.883] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0055.883] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0055.883] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0055.883] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd4330b90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd4330b90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x745e00 [0055.883] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd4330b90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd4330b90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.883] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xd43136d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xd43136d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xd43380c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0055.883] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0055.884] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0055.884] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0055.884] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0055.884] FindNextFileW (in: hFindFile=0x745e00, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0055.884] FindClose (in: hFindFile=0x745e00 | out: hFindFile=0x745e00) returned 1 [0055.884] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0055.884] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0055.884] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0055.884] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0055.898] ReadFile (in: hFile=0xc8, lpBuffer=0x12778600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12778600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0055.902] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0055.903] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0055.903] ReadFile (in: hFile=0x98, lpBuffer=0x12778700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12778700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0055.905] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0055.905] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0055.906] ReadFile (in: hFile=0xc0, lpBuffer=0x12778800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12778800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0055.908] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0055.908] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0055.909] ReadFile (in: hFile=0xbc, lpBuffer=0x12778900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12778900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0055.911] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978)) returned 1 [0055.911] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd)) returned 1 [0055.911] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-001B-0409-1000-0000000FF1CE}-C/WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0055.911] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0055.911] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e320 | out: pbBuffer=0x1240e320) returned 1 [0055.912] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12778a02 | out: pbBuffer=0x12778a02) returned 1 [0055.912] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12778a26 | out: pbBuffer=0x12778a26) returned 1 [0055.913] SetEvent (hEvent=0x6c) returned 1 [0055.913] ReadFile (in: hFile=0xd0, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0056.096] SwitchToThread () returned 1 [0056.097] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0056.297] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0057.110] SetEvent (hEvent=0x6c) returned 1 [0057.110] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0057.121] SetEvent (hEvent=0x6c) returned 1 [0057.121] SwitchToThread () returned 1 [0057.229] SetEvent (hEvent=0xa0) returned 1 [0057.229] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0057.681] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0057.767] SetEvent (hEvent=0x6c) returned 1 [0057.767] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0057.773] SetEvent (hEvent=0x6c) returned 1 [0057.773] SwitchToThread () returned 1 [0057.806] SetEvent (hEvent=0xa0) returned 1 [0057.807] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0058.254] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0058.595] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0058.869] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0058.961] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0059.192] SetEvent (hEvent=0xa0) returned 1 [0059.192] VirtualAlloc (lpAddress=0x127b4000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x127b4000 [0059.253] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.859] SetEvent (hEvent=0xb8) returned 1 [0134.859] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.861] SetEvent (hEvent=0xb8) returned 1 [0134.861] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.862] SetEvent (hEvent=0xb8) returned 1 [0134.862] SetEvent (hEvent=0x7c) returned 1 [0134.863] SwitchToThread () returned 1 [0134.863] SetEvent (hEvent=0xb8) returned 1 [0134.863] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.864] SetEvent (hEvent=0xb8) returned 1 [0134.864] SetEvent (hEvent=0x7c) returned 1 [0134.864] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.866] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.870] SetEvent (hEvent=0xb8) returned 1 [0134.870] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.870] SetEvent (hEvent=0xb8) returned 1 [0134.870] SetEvent (hEvent=0x7c) returned 1 [0134.870] SwitchToThread () returned 1 [0134.871] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.875] SetEvent (hEvent=0xb8) returned 1 [0134.875] SetEvent (hEvent=0x7c) returned 1 [0134.875] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.877] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.882] SetEvent (hEvent=0xb8) returned 1 [0134.882] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.882] SetEvent (hEvent=0xb8) returned 1 [0134.882] SetEvent (hEvent=0x7c) returned 1 [0134.882] SwitchToThread () returned 1 [0134.883] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.887] SetEvent (hEvent=0xb8) returned 1 [0134.887] SetEvent (hEvent=0x7c) returned 1 [0134.887] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.889] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.893] SetEvent (hEvent=0xb8) returned 1 [0134.893] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.893] SetEvent (hEvent=0xb8) returned 1 [0134.893] SetEvent (hEvent=0x7c) returned 1 [0134.893] SwitchToThread () returned 1 [0134.894] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.898] SetEvent (hEvent=0xb8) returned 1 [0134.898] SetEvent (hEvent=0x7c) returned 1 [0134.898] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.899] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.903] SetEvent (hEvent=0xb8) returned 1 [0134.903] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.903] SetEvent (hEvent=0xb8) returned 1 [0134.903] SetEvent (hEvent=0x7c) returned 1 [0134.903] SwitchToThread () returned 1 [0134.904] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.908] SetEvent (hEvent=0xb8) returned 1 [0134.908] SetEvent (hEvent=0x7c) returned 1 [0134.908] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.910] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.913] SetEvent (hEvent=0xb8) returned 1 [0134.913] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.913] SetEvent (hEvent=0xb8) returned 1 [0134.913] SetEvent (hEvent=0x7c) returned 1 [0134.913] SwitchToThread () returned 1 [0134.915] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.918] SetEvent (hEvent=0xb8) returned 1 [0134.918] SetEvent (hEvent=0x7c) returned 1 [0134.918] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.920] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.923] SetEvent (hEvent=0xb8) returned 1 [0134.923] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.924] SetEvent (hEvent=0xb8) returned 1 [0134.924] SetEvent (hEvent=0x7c) returned 1 [0134.924] SwitchToThread () returned 1 [0134.925] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.929] SetEvent (hEvent=0xb8) returned 1 [0134.929] SetEvent (hEvent=0x7c) returned 1 [0134.929] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.931] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.935] SetEvent (hEvent=0xb8) returned 1 [0134.935] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.935] SetEvent (hEvent=0xb8) returned 1 [0134.935] SetEvent (hEvent=0x7c) returned 1 [0134.935] SwitchToThread () returned 1 [0134.937] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.940] SetEvent (hEvent=0xb8) returned 1 [0134.940] SetEvent (hEvent=0x7c) returned 1 [0134.940] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.942] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.946] SetEvent (hEvent=0xb8) returned 1 [0134.946] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.946] SetEvent (hEvent=0xb8) returned 1 [0134.946] SetEvent (hEvent=0x7c) returned 1 [0134.946] SwitchToThread () returned 1 [0134.948] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.951] SetEvent (hEvent=0xb8) returned 1 [0134.951] SetEvent (hEvent=0x7c) returned 1 [0134.951] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.953] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.957] SetEvent (hEvent=0xb8) returned 1 [0134.957] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.957] SetEvent (hEvent=0xb8) returned 1 [0134.957] SetEvent (hEvent=0x7c) returned 1 [0134.957] SwitchToThread () returned 1 [0134.958] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.962] SetEvent (hEvent=0xb8) returned 1 [0134.962] SetEvent (hEvent=0x7c) returned 1 [0134.962] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.964] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.968] SetEvent (hEvent=0xb8) returned 1 [0134.968] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.968] SetEvent (hEvent=0xb8) returned 1 [0134.968] SetEvent (hEvent=0x7c) returned 1 [0134.968] SwitchToThread () returned 1 [0134.970] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.973] SetEvent (hEvent=0xb8) returned 1 [0134.973] SetEvent (hEvent=0x7c) returned 1 [0134.973] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.974] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.978] SetEvent (hEvent=0xb8) returned 1 [0134.978] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.978] SetEvent (hEvent=0xb8) returned 1 [0134.978] SetEvent (hEvent=0x7c) returned 1 [0134.978] SwitchToThread () returned 1 [0134.980] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.983] SetEvent (hEvent=0xb8) returned 1 [0134.983] SetEvent (hEvent=0x7c) returned 1 [0134.983] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.984] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.988] SetEvent (hEvent=0xb8) returned 1 [0134.988] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.988] SetEvent (hEvent=0xb8) returned 1 [0134.988] SetEvent (hEvent=0x7c) returned 1 [0134.988] SwitchToThread () returned 1 [0134.990] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.993] SetEvent (hEvent=0xb8) returned 1 [0134.994] SetEvent (hEvent=0x7c) returned 1 [0134.994] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.995] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.999] SetEvent (hEvent=0xb8) returned 1 [0134.999] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0134.999] SetEvent (hEvent=0xb8) returned 1 [0134.999] SetEvent (hEvent=0x7c) returned 1 [0135.000] SwitchToThread () returned 1 [0135.001] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.004] SetEvent (hEvent=0xb8) returned 1 [0135.004] SetEvent (hEvent=0x7c) returned 1 [0135.004] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.006] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.010] SetEvent (hEvent=0xb8) returned 1 [0135.010] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.010] SetEvent (hEvent=0xb8) returned 1 [0135.010] SetEvent (hEvent=0x7c) returned 1 [0135.010] SwitchToThread () returned 1 [0135.012] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.015] SetEvent (hEvent=0xb8) returned 1 [0135.015] SetEvent (hEvent=0x7c) returned 1 [0135.015] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.016] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.228] SetEvent (hEvent=0x7c) returned 1 [0135.229] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.282] SetEvent (hEvent=0x7c) returned 1 [0135.283] CloseHandle (hObject=0x27c) returned 1 [0135.283] SwitchToThread () returned 1 [0135.283] SetEvent (hEvent=0x7c) returned 1 [0135.283] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.349] SetEvent (hEvent=0xb8) returned 1 [0135.349] SetEvent (hEvent=0xa0) returned 1 [0135.349] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0135.351] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0135.352] SetEvent (hEvent=0xb8) returned 1 [0135.352] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0135.354] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.460] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.548] SetEvent (hEvent=0xa0) returned 1 [0135.548] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.550] SetEvent (hEvent=0xa0) returned 1 [0135.550] SetEvent (hEvent=0xb8) returned 1 [0135.550] CloseHandle (hObject=0x15c) returned 1 [0135.550] CloseHandle (hObject=0x27c) returned 1 [0135.550] CloseHandle (hObject=0x120) returned 1 [0135.550] CloseHandle (hObject=0x124) returned 1 [0135.550] CloseHandle (hObject=0xdc) returned 1 [0135.550] CloseHandle (hObject=0x108) returned 1 [0135.550] SwitchToThread () returned 1 [0135.553] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.637] SetEvent (hEvent=0xb8) returned 1 [0135.637] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0135.639] SetEvent (hEvent=0xb8) returned 1 [0135.639] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0135.640] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.640] CloseHandle (hObject=0x154) returned 1 [0135.640] CloseHandle (hObject=0xe4) returned 1 [0135.640] CloseHandle (hObject=0xf0) returned 1 [0135.640] CloseHandle (hObject=0x104) returned 1 [0135.640] CloseHandle (hObject=0xfc) returned 1 [0135.640] CloseHandle (hObject=0x190) returned 1 [0135.640] CloseHandle (hObject=0x15c) returned 1 [0135.640] CloseHandle (hObject=0x27c) returned 1 [0135.640] CloseHandle (hObject=0x120) returned 1 [0135.640] CloseHandle (hObject=0x178) returned 1 [0135.640] CloseHandle (hObject=0x124) returned 1 [0135.640] CloseHandle (hObject=0xdc) returned 1 [0135.640] CloseHandle (hObject=0x108) returned 1 [0135.640] CloseHandle (hObject=0x138) returned 1 [0135.640] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.783] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.789] SetEvent (hEvent=0xa0) returned 1 [0135.789] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.790] SetEvent (hEvent=0xa0) returned 1 [0135.790] SwitchToThread () returned 1 [0135.792] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.806] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.807] SetEvent (hEvent=0x7c) returned 1 [0135.807] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.809] SetEvent (hEvent=0x7c) returned 1 [0135.810] SwitchToThread () returned 1 [0135.810] SetEvent (hEvent=0x7c) returned 1 [0135.810] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.813] SetEvent (hEvent=0xa0) returned 1 [0135.813] SetEvent (hEvent=0xb8) returned 1 [0135.813] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0135.814] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0135.815] SetEvent (hEvent=0x7c) returned 1 [0135.815] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0135.816] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0135.817] SetEvent (hEvent=0x7c) returned 1 [0135.817] ReadFile (in: hFile=0x16c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x70000, lpOverlapped=0x0) returned 1 [0135.825] GetFileType (hFile=0x16c) returned 0x1 [0135.825] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.825] WriteFile (in: hFile=0x16c, lpBuffer=0x12662000*, nNumberOfBytesToWrite=0x70000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x12662000*, lpNumberOfBytesWritten=0x12429800*=0x70000, lpOverlapped=0x1242980c) returned 1 [0135.826] GetFileType (hFile=0x16c) returned 0x1 [0135.827] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x70000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.827] ReadFile (in: hFile=0x16c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0135.827] CloseHandle (hObject=0x16c) returned 1 [0135.827] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.827] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.827] WriteFile (in: hFile=0x16c, lpBuffer=0x124c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x124c0240*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0135.828] CloseHandle (hObject=0x16c) returned 1 [0135.828] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x87, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x124294d4*=0x87) returned 1 [0135.828] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4815eb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4815eb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0135.828] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.828] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.829] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e220 | out: pbBuffer=0x1240e220) returned 1 [0135.829] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12772002 | out: pbBuffer=0x12772002) returned 1 [0135.829] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12772064 | out: pbBuffer=0x12772064) returned 1 [0135.831] SetEvent (hEvent=0xb8) returned 1 [0135.831] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x4000, lpOverlapped=0x0) returned 1 [0135.831] GetFileType (hFile=0x16c) returned 0x1 [0135.831] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.831] WriteFile (in: hFile=0x16c, lpBuffer=0x1249a000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1249a000*, lpNumberOfBytesWritten=0x12429800*=0x4000, lpOverlapped=0x1242980c) returned 1 [0135.831] GetFileType (hFile=0x16c) returned 0x1 [0135.831] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.831] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0135.831] CloseHandle (hObject=0x16c) returned 1 [0135.832] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.832] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.832] WriteFile (in: hFile=0x16c, lpBuffer=0x124c0fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x124c0fc0*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0135.832] CloseHandle (hObject=0x16c) returned 1 [0135.832] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fe000*, nNumberOfCharsToWrite=0x7d, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x127fe000*, lpNumberOfCharsWritten=0x124294d4*=0x7d) returned 1 [0135.833] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/localstore.rdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\localstore.rdf"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x850d63f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x850d63f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x850d63f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x501)) returned 1 [0135.833] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39)) returned 1 [0135.833] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.833] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.833] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0135.834] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2074 | out: pbBuffer=0x124e2074) returned 1 [0135.834] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1257e002 | out: pbBuffer=0x1257e002) returned 1 [0135.834] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1257e083 | out: pbBuffer=0x1257e083) returned 1 [0135.834] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.835] SetEvent (hEvent=0xb8) returned 1 [0135.835] SetEvent (hEvent=0xa0) returned 1 [0135.836] SwitchToThread () returned 1 [0135.836] SetEvent (hEvent=0xb8) returned 1 [0135.836] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.837] SetEvent (hEvent=0xa0) returned 1 [0135.837] SetEvent (hEvent=0x7c) returned 1 [0135.837] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0135.838] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0135.839] SetEvent (hEvent=0xb8) returned 1 [0135.839] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0135.841] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0135.841] SetEvent (hEvent=0xb8) returned 1 [0135.841] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x10000, lpOverlapped=0x0) returned 1 [0135.842] GetFileType (hFile=0x16c) returned 0x1 [0135.842] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.842] WriteFile (in: hFile=0x16c, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x12429800*=0x10000, lpOverlapped=0x1242980c) returned 1 [0135.842] GetFileType (hFile=0x16c) returned 0x1 [0135.842] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.842] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0135.842] CloseHandle (hObject=0x16c) returned 1 [0135.842] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.842] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.843] WriteFile (in: hFile=0x16c, lpBuffer=0x12580240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x12580240*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0135.843] CloseHandle (hObject=0x16c) returned 1 [0135.843] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1257c000*, nNumberOfCharsToWrite=0x88, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x1257c000*, lpNumberOfCharsWritten=0x124294d4*=0x88) returned 1 [0135.844] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4c1a3d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4c1a3d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x82b58970, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa00000)) returned 1 [0135.844] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.844] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.844] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e040 | out: pbBuffer=0x1249e040) returned 1 [0135.845] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1257e102 | out: pbBuffer=0x1257e102) returned 1 [0135.845] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1257e135 | out: pbBuffer=0x1257e135) returned 1 [0135.845] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1257e175 | out: pbBuffer=0x1257e175) returned 1 [0135.845] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.846] SetEvent (hEvent=0xb8) returned 1 [0135.846] SetEvent (hEvent=0xa0) returned 1 [0135.847] SwitchToThread () returned 1 [0135.847] SetEvent (hEvent=0xb8) returned 1 [0135.847] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.893] SetEvent (hEvent=0xa0) returned 1 [0135.893] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0135.945] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0135.945] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0136.086] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0136.086] SetEvent (hEvent=0x7c) returned 1 [0136.086] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0136.130] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0136.131] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0136.137] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0136.137] SetEvent (hEvent=0xac) returned 1 [0136.137] SetEvent (hEvent=0x7c) returned 1 [0136.137] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0136.147] SetEvent (hEvent=0x7c) returned 1 [0136.147] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0136.208] GetFileType (hFile=0x16c) returned 0x1 [0136.208] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0136.208] WriteFile (in: hFile=0x16c, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429800*=0x800000, lpOverlapped=0x1242980c) returned 1 [0136.308] GetFileType (hFile=0x16c) returned 0x1 [0136.308] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0136.308] GetFileType (hFile=0x16c) returned 0x1 [0136.308] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0136.308] WriteFile (in: hFile=0x16c, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429800*=0x800000, lpOverlapped=0x1242980c) returned 1 [0136.409] GetFileType (hFile=0x16c) returned 0x1 [0136.409] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0136.409] GetFileType (hFile=0x16c) returned 0x1 [0136.409] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0136.409] WriteFile (in: hFile=0x16c, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429800*=0x800000, lpOverlapped=0x1242980c) returned 1 [0136.643] GetFileType (hFile=0x16c) returned 0x1 [0136.643] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0136.643] GetFileType (hFile=0x16c) returned 0x1 [0136.643] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0136.643] WriteFile (in: hFile=0x16c, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429800*=0x800000, lpOverlapped=0x1242980c) returned 1 [0136.740] GetFileType (hFile=0x16c) returned 0x1 [0136.740] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0136.740] GetFileType (hFile=0x16c) returned 0x1 [0136.740] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0136.740] WriteFile (in: hFile=0x16c, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429800*=0x800000, lpOverlapped=0x1242980c) returned 1 [0136.833] GetFileType (hFile=0x16c) returned 0x1 [0136.833] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0136.833] GetFileType (hFile=0x16c) returned 0x1 [0136.833] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0136.833] WriteFile (in: hFile=0x16c, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429800*=0x800000, lpOverlapped=0x1242980c) returned 1 [0136.932] GetFileType (hFile=0x16c) returned 0x1 [0136.932] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0136.932] GetFileType (hFile=0x16c) returned 0x1 [0136.932] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0136.932] WriteFile (in: hFile=0x16c, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429800*=0x800000, lpOverlapped=0x1242980c) returned 1 [0137.034] GetFileType (hFile=0x16c) returned 0x1 [0137.034] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.034] GetFileType (hFile=0x16c) returned 0x1 [0137.034] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.034] WriteFile (in: hFile=0x16c, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429800*=0x800000, lpOverlapped=0x1242980c) returned 1 [0137.182] GetFileType (hFile=0x16c) returned 0x1 [0137.183] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.183] ReadFile (in: hFile=0x16c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x200000, lpOverlapped=0x0) returned 1 [0137.204] SetEvent (hEvent=0xb8) returned 1 [0137.217] GetFileType (hFile=0x16c) returned 0x1 [0137.217] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.218] WriteFile (in: hFile=0x16c, lpBuffer=0x1400a000*, nNumberOfBytesToWrite=0x200000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1400a000*, lpNumberOfBytesWritten=0x12429800*=0x200000, lpOverlapped=0x1242980c) returned 1 [0137.240] GetFileType (hFile=0x16c) returned 0x1 [0137.240] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0xa00000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.240] ReadFile (in: hFile=0x16c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0137.240] CloseHandle (hObject=0x16c) returned 1 [0137.240] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.240] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.248] WriteFile (in: hFile=0x16c, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0137.257] CloseHandle (hObject=0x16c) returned 1 [0137.257] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d8000*, nNumberOfCharsToWrite=0x83, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x124d8000*, lpNumberOfCharsWritten=0x124294d4*=0x83) returned 1 [0137.263] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/pluginreg.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\pluginreg.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81fbde30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81fbde30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81fbde30, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe14)) returned 1 [0137.264] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/pluginreg.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\pluginreg.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.264] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.265] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0137.266] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1257e002 | out: pbBuffer=0x1257e002) returned 1 [0137.266] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1257e05d | out: pbBuffer=0x1257e05d) returned 1 [0137.268] SetEvent (hEvent=0x7c) returned 1 [0137.268] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0xe14, lpOverlapped=0x0) returned 1 [0137.269] GetFileType (hFile=0x16c) returned 0x1 [0137.269] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.269] WriteFile (in: hFile=0x16c, lpBuffer=0x1249c000*, nNumberOfBytesToWrite=0xe14, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1249c000*, lpNumberOfBytesWritten=0x12429800*=0xe14, lpOverlapped=0x1242980c) returned 1 [0137.269] GetFileType (hFile=0x16c) returned 0x1 [0137.269] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0xe14, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.269] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0137.269] CloseHandle (hObject=0x16c) returned 1 [0137.269] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/pluginreg.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\pluginreg.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.269] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.276] WriteFile (in: hFile=0x16c, lpBuffer=0x1247cfc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x1247cfc0*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0137.276] CloseHandle (hObject=0x16c) returned 1 [0137.276] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d86c0*, nNumberOfCharsToWrite=0x83, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x124d86c0*, lpNumberOfCharsWritten=0x124294d4*=0x83) returned 1 [0137.289] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c85c10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x853f60d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x12069be0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0xfde)) returned 1 [0137.290] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.290] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.293] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0137.297] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446124 | out: pbBuffer=0x12446124) returned 1 [0137.297] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a002 | out: pbBuffer=0x1244a002) returned 1 [0137.297] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a090 | out: pbBuffer=0x1244a090) returned 1 [0137.299] SwitchToThread () returned 1 [0137.307] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.324] SetEvent (hEvent=0xb8) returned 1 [0137.328] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.338] SetEvent (hEvent=0xb8) returned 1 [0137.338] SwitchToThread () returned 1 [0137.339] SetEvent (hEvent=0xb8) returned 1 [0137.339] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.346] SetEvent (hEvent=0x7c) returned 1 [0137.346] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0137.359] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.359] SetEvent (hEvent=0x7c) returned 1 [0137.359] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0137.363] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.363] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.368] SetEvent (hEvent=0x7c) returned 1 [0137.368] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.371] SetEvent (hEvent=0x7c) returned 1 [0137.371] SwitchToThread () returned 1 [0137.371] SetEvent (hEvent=0x7c) returned 1 [0137.371] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.373] SetEvent (hEvent=0xb8) returned 1 [0137.373] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.374] SetEvent (hEvent=0xb8) returned 1 [0137.374] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.376] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.376] SetEvent (hEvent=0xb8) returned 1 [0137.376] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x50000, lpOverlapped=0x0) returned 1 [0137.383] GetFileType (hFile=0x16c) returned 0x1 [0137.383] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.383] WriteFile (in: hFile=0x16c, lpBuffer=0x125b6000*, nNumberOfBytesToWrite=0x50000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x125b6000*, lpNumberOfBytesWritten=0x12429800*=0x50000, lpOverlapped=0x1242980c) returned 1 [0137.384] GetFileType (hFile=0x16c) returned 0x1 [0137.384] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x50000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.384] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0137.384] CloseHandle (hObject=0x16c) returned 1 [0137.384] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.384] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.385] WriteFile (in: hFile=0x16c, lpBuffer=0x127786c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x127786c0*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0137.385] CloseHandle (hObject=0x16c) returned 1 [0137.385] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c000*, nNumberOfCharsToWrite=0x84, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfCharsWritten=0x124294d4*=0x84) returned 1 [0137.385] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/times.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\times.json"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1d)) returned 1 [0137.385] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0137.386] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.386] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.386] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442040 | out: pbBuffer=0x12442040) returned 1 [0137.387] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2074 | out: pbBuffer=0x124e2074) returned 1 [0137.387] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12576102 | out: pbBuffer=0x12576102) returned 1 [0137.387] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12576125 | out: pbBuffer=0x12576125) returned 1 [0137.387] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12576132 | out: pbBuffer=0x12576132) returned 1 [0137.387] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12576135 | out: pbBuffer=0x12576135) returned 1 [0137.387] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12576172 | out: pbBuffer=0x12576172) returned 1 [0137.387] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x125761c0 | out: pbBuffer=0x125761c0) returned 1 [0137.388] SetEvent (hEvent=0xa0) returned 1 [0137.388] ReadFile (in: hFile=0x16c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x18000, lpOverlapped=0x0) returned 1 [0137.390] GetFileType (hFile=0x16c) returned 0x1 [0137.390] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.390] WriteFile (in: hFile=0x16c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x18000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429800*=0x18000, lpOverlapped=0x1242980c) returned 1 [0137.390] GetFileType (hFile=0x16c) returned 0x1 [0137.391] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x18000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.391] ReadFile (in: hFile=0x16c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0137.391] CloseHandle (hObject=0x16c) returned 1 [0137.391] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.391] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.391] WriteFile (in: hFile=0x16c, lpBuffer=0x12778fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x12778fc0*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0137.391] CloseHandle (hObject=0x16c) returned 1 [0137.391] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c6c0*, nNumberOfCharsToWrite=0x89, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x1247c6c0*, lpNumberOfCharsWritten=0x124294d4*=0x89) returned 1 [0137.392] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.392] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.392] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.392] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.392] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.392] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.392] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0137.393] CloseHandle (hObject=0x16c) returned 1 [0137.393] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.393] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.393] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.394] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0137.394] WriteFile (in: hFile=0x16c, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0137.395] CloseHandle (hObject=0x16c) returned 1 [0137.395] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\@_read_to_recover_files_@.txt")) returned 0x2020 [0137.395] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0137.396] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.396] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3519b30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3519b30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.396] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3519b30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3519b30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.396] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x3519b30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x3519b30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3519b30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0137.396] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc37c9330, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc37c9330, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc37df2c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-05_5.json", cAlternateFileName="BOOKMA~1.JSO")) returned 1 [0137.396] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85017d10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85017d10, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85017d10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-16_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 1 [0137.396] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.396] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.396] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.396] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.396] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups/bookmarks-2017-06-05_5.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.397] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0137.397] ReadFile (in: hFile=0x16c, lpBuffer=0x124c2000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c2000*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0137.399] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups/bookmarks-2017-06-16_5.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0137.400] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0137.400] ReadFile (in: hFile=0x144, lpBuffer=0x124c2100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x124c2100*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0137.401] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups/bookmarks-2017-06-05_5.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc37c9330, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc37c9330, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc37df2c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xbdb)) returned 1 [0137.402] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups/bookmarks-2017-06-16_5.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85017d10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85017d10, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85017d10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbdb)) returned 1 [0137.402] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.402] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.402] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.402] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.402] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.402] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/bookmarkbackups/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0137.402] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0137.402] CloseHandle (hObject=0x148) returned 1 [0137.402] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.402] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.403] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0137.403] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0137.403] WriteFile (in: hFile=0x148, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0137.404] CloseHandle (hObject=0x148) returned 1 [0137.404] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\@_read_to_recover_files_@.txt")) returned 0x2020 [0137.404] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0137.404] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.405] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x35498d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35498d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.405] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x35498d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35498d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.405] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x35498d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x35498d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x354bfe0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0137.405] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 1 [0137.405] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.405] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.405] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.405] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.405] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.405] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.405] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.405] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.406] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.406] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.406] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.406] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.406] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0137.406] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0137.406] CloseHandle (hObject=0x148) returned 1 [0137.406] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.406] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.407] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0137.408] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0137.409] WriteFile (in: hFile=0x148, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0137.410] CloseHandle (hObject=0x148) returned 1 [0137.410] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\@_read_to_recover_files_@.txt")) returned 0x2020 [0137.410] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0137.410] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.410] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3555c20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3555c20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.410] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x3555c20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3555c20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.410] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".metadata", cAlternateFileName="METADA~1")) returned 1 [0137.410] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x3553510, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x3553510, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x355aa40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0137.410] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 1 [0137.410] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.410] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.410] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/.metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\.metadata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0137.411] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124297d8 | out: lpMode=0x124297d8) returned 0 [0137.412] ReadFile (in: hFile=0x148, lpBuffer=0x124c2800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124297e8, lpOverlapped=0x0 | out: lpBuffer=0x124c2800*, lpNumberOfBytesRead=0x124297e8*=0x0, lpOverlapped=0x0) returned 1 [0137.412] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.412] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.412] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.412] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.414] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.415] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/.metadata\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\.metadata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.415] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/.metadata\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.415] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/.metadata\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\.metadata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.415] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/.metadata\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.415] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/.metadata\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\.metadata\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.416] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/.metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\.metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0137.416] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0137.416] CloseHandle (hObject=0x138) returned 1 [0137.416] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.416] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.416] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.416] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.416] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.416] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0137.416] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0137.416] CloseHandle (hObject=0x138) returned 1 [0137.417] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.417] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.417] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0137.418] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124297d0 | out: lpMode=0x124297d0) returned 0 [0137.418] WriteFile (in: hFile=0x138, lpBuffer=0x125ae000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124297d4, lpOverlapped=0x0 | out: lpBuffer=0x125ae000*, lpNumberOfBytesWritten=0x124297d4*=0x1033, lpOverlapped=0x0) returned 1 [0137.419] CloseHandle (hObject=0x138) returned 1 [0137.419] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\@_read_to_recover_files_@.txt")) returned 0x2020 [0137.419] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0137.419] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.419] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb\\*", lpFindFileData=0x12429444 | out: lpFindFileData=0x12429444*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x356e2c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x356e2c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.420] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x356e2c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x356e2c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.420] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht", cAlternateFileName="818200~1")) returned 1 [0137.420] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 1 [0137.420] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x356e2c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x356e2c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x35709d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0137.420] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.420] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.420] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.420] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.421] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.421] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0137.422] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429730 | out: lpMode=0x12429730) returned 0 [0137.422] ReadFile (in: hFile=0x138, lpBuffer=0x124c2e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429740, lpOverlapped=0x0 | out: lpBuffer=0x124c2e00*, lpNumberOfBytesRead=0x12429740*=0x100, lpOverlapped=0x0) returned 1 [0137.424] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.424] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.424] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0137.425] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/indexedDB/moz-safe-about+home/idb/818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.425] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0137.425] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124425e0 | out: pbBuffer=0x124425e0) returned 1 [0137.426] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2f02 | out: pbBuffer=0x124c2f02) returned 1 [0137.426] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c2f19 | out: pbBuffer=0x124c2f19) returned 1 [0137.427] SetEvent (hEvent=0x7c) returned 1 [0137.428] ReadFile (in: hFile=0x108, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0xa0000, lpOverlapped=0x0) returned 1 [0137.437] CloseHandle (hObject=0x148) returned 1 [0137.437] CloseHandle (hObject=0x144) returned 1 [0137.437] CloseHandle (hObject=0x16c) returned 1 [0137.437] CloseHandle (hObject=0x138) returned 1 [0137.437] SwitchToThread () returned 1 [0137.437] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.452] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.454] SetEvent (hEvent=0xa0) returned 1 [0137.454] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.458] SetEvent (hEvent=0xa0) returned 1 [0137.458] SetEvent (hEvent=0xb8) returned 1 [0137.458] SwitchToThread () returned 1 [0137.460] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.523] SetEvent (hEvent=0xb8) returned 1 [0137.523] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0137.524] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.524] SetEvent (hEvent=0xb8) returned 1 [0137.524] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.581] SwitchToThread () returned 1 [0137.598] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.606] SetEvent (hEvent=0xac) returned 1 [0137.606] SetEvent (hEvent=0xb8) returned 1 [0137.606] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x10c65, lpOverlapped=0x0) returned 1 [0137.607] GetFileType (hFile=0x17c) returned 0x1 [0137.607] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.607] WriteFile (in: hFile=0x17c, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x10c65, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x12429b48*=0x10c65, lpOverlapped=0x12429b54) returned 1 [0137.607] GetFileType (hFile=0x17c) returned 0x1 [0137.607] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x10c65, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.607] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.607] CloseHandle (hObject=0x17c) returned 1 [0137.608] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/5nwqcobOD2GK5MSR4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5nwqcobod2gk5msr4.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.608] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.678] WriteFile (in: hFile=0x17c, lpBuffer=0x1249a240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1249a240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.679] CloseHandle (hObject=0x17c) returned 1 [0137.679] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12650000*, nNumberOfCharsToWrite=0x59, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x12650000*, lpNumberOfCharsWritten=0x1242981c*=0x59) returned 1 [0137.679] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/8oMwPWOgMy.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\8omwpwogmy.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428d6690, ftCreationTime.dwHighDateTime=0x1d4cfcf, ftLastAccessTime.dwLowDateTime=0xf681a5a0, ftLastAccessTime.dwHighDateTime=0x1d4c9f1, ftLastWriteTime.dwLowDateTime=0xf681a5a0, ftLastWriteTime.dwHighDateTime=0x1d4c9f1, nFileSizeHigh=0x0, nFileSizeLow=0x54da)) returned 1 [0137.680] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/B91EP0IP3.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b91ep0ip3.bmp"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfee3d470, ftCreationTime.dwHighDateTime=0x1d4c54b, ftLastAccessTime.dwLowDateTime=0xdfa89370, ftLastAccessTime.dwHighDateTime=0x1d4c8c0, ftLastWriteTime.dwLowDateTime=0xdfa89370, ftLastWriteTime.dwHighDateTime=0x1d4c8c0, nFileSizeHigh=0x0, nFileSizeLow=0xa56b)) returned 1 [0137.680] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/BMnjicYt7vO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bmnjicyt7vo.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409aa5a0, ftCreationTime.dwHighDateTime=0x1d4cf7f, ftLastAccessTime.dwLowDateTime=0x275a2b0, ftLastAccessTime.dwHighDateTime=0x1d4d04d, ftLastWriteTime.dwLowDateTime=0x275a2b0, ftLastWriteTime.dwHighDateTime=0x1d4d04d, nFileSizeHigh=0x0, nFileSizeLow=0x95e9)) returned 1 [0137.680] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/DpnSvt_yYQN1ip.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dpnsvt_yyqn1ip.wav"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4261a300, ftCreationTime.dwHighDateTime=0x1d4caea, ftLastAccessTime.dwLowDateTime=0x1a831980, ftLastAccessTime.dwHighDateTime=0x1d4d4dc, ftLastWriteTime.dwLowDateTime=0x1a831980, ftLastWriteTime.dwHighDateTime=0x1d4d4dc, nFileSizeHigh=0x0, nFileSizeLow=0x10995)) returned 1 [0137.680] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/DpnSvt_yYQN1ip.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dpnsvt_yyqn1ip.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.680] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.680] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0137.681] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0137.681] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1249c002 | out: pbBuffer=0x1249c002) returned 1 [0137.682] SwitchToThread () returned 1 [0137.682] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.686] SetEvent (hEvent=0xa0) returned 1 [0137.686] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.689] SetEvent (hEvent=0xa0) returned 1 [0137.689] SwitchToThread () returned 1 [0137.689] SetEvent (hEvent=0xa0) returned 1 [0137.689] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.691] SetEvent (hEvent=0xb8) returned 1 [0137.691] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.693] SetEvent (hEvent=0xb8) returned 1 [0137.693] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0137.695] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.695] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.695] SetEvent (hEvent=0xac) returned 1 [0137.695] SetEvent (hEvent=0xb8) returned 1 [0137.695] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0xbaca, lpOverlapped=0x0) returned 1 [0137.696] GetFileType (hFile=0x17c) returned 0x1 [0137.696] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.696] WriteFile (in: hFile=0x17c, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0xbaca, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x12429b48*=0xbaca, lpOverlapped=0x12429b54) returned 1 [0137.697] GetFileType (hFile=0x17c) returned 0x1 [0137.697] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xbaca, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.697] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.697] CloseHandle (hObject=0x17c) returned 1 [0137.697] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/N399TRFUCOINN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\n399trfucoinn.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.697] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.698] WriteFile (in: hFile=0x17c, lpBuffer=0x1249a6c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1249a6c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.698] CloseHandle (hObject=0x17c) returned 1 [0137.698] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x55) returned 1 [0137.698] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PevCaQbO5-.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pevcaqbo5-.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cdf740, ftCreationTime.dwHighDateTime=0x1d4cd26, ftLastAccessTime.dwLowDateTime=0x26bbe8d0, ftLastAccessTime.dwHighDateTime=0x1d4d0a4, ftLastWriteTime.dwLowDateTime=0x26bbe8d0, ftLastWriteTime.dwHighDateTime=0x1d4d0a4, nFileSizeHigh=0x0, nFileSizeLow=0x18a32)) returned 1 [0137.698] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PevCaQbO5-.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pevcaqbo5-.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.698] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.699] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0137.700] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0137.700] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1249c002 | out: pbBuffer=0x1249c002) returned 1 [0137.700] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1249c07f | out: pbBuffer=0x1249c07f) returned 1 [0137.700] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1249c096 | out: pbBuffer=0x1249c096) returned 1 [0137.700] SwitchToThread () returned 1 [0137.701] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.704] SetEvent (hEvent=0xa0) returned 1 [0137.704] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.707] SetEvent (hEvent=0xa0) returned 1 [0137.707] SwitchToThread () returned 1 [0137.707] SetEvent (hEvent=0xa0) returned 1 [0137.707] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.712] SetEvent (hEvent=0xb8) returned 1 [0137.712] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0137.722] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.722] SetEvent (hEvent=0xb8) returned 1 [0137.722] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.724] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0137.725] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.725] SetEvent (hEvent=0xac) returned 1 [0137.725] SetEvent (hEvent=0xa0) returned 1 [0137.725] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0xaf30, lpOverlapped=0x0) returned 1 [0137.726] GetFileType (hFile=0x17c) returned 0x1 [0137.726] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.726] WriteFile (in: hFile=0x17c, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0xaf30, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x12429b48*=0xaf30, lpOverlapped=0x12429b54) returned 1 [0137.726] GetFileType (hFile=0x17c) returned 0x1 [0137.726] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xaf30, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.726] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.726] CloseHandle (hObject=0x17c) returned 1 [0137.727] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/WPbf3bW8zJzjM2KHJI7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wpbf3bw8zjzjm2khji7.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.727] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.727] WriteFile (in: hFile=0x17c, lpBuffer=0x12584240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12584240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.727] CloseHandle (hObject=0x17c) returned 1 [0137.728] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c2000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124c2000*, lpNumberOfCharsWritten=0x1242981c*=0x5b) returned 1 [0137.728] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0137.728] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/f4Qtm-9U_F.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f4qtm-9u_f.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead05850, ftCreationTime.dwHighDateTime=0x1d4c7f3, ftLastAccessTime.dwLowDateTime=0x88620350, ftLastAccessTime.dwHighDateTime=0x1d4d0c0, ftLastWriteTime.dwLowDateTime=0x88620350, ftLastWriteTime.dwHighDateTime=0x1d4d0c0, nFileSizeHigh=0x0, nFileSizeLow=0xa373)) returned 1 [0137.728] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/f4Qtm-9U_F.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f4qtm-9u_f.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.728] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.729] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0137.729] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2074 | out: pbBuffer=0x124e2074) returned 1 [0137.729] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0137.729] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc0ca | out: pbBuffer=0x124bc0ca) returned 1 [0137.730] SwitchToThread () returned 1 [0137.731] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.734] SetEvent (hEvent=0xb8) returned 1 [0137.734] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.736] SetEvent (hEvent=0xb8) returned 1 [0137.736] SwitchToThread () returned 1 [0137.736] SetEvent (hEvent=0xb8) returned 1 [0137.736] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.738] SetEvent (hEvent=0xa0) returned 1 [0137.738] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.739] SetEvent (hEvent=0xa0) returned 1 [0137.739] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.741] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.741] SetEvent (hEvent=0xa0) returned 1 [0137.741] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x14e8a, lpOverlapped=0x0) returned 1 [0137.743] GetFileType (hFile=0x17c) returned 0x1 [0137.743] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.743] WriteFile (in: hFile=0x17c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x14e8a, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429b48*=0x14e8a, lpOverlapped=0x12429b54) returned 1 [0137.743] GetFileType (hFile=0x17c) returned 0x1 [0137.743] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x14e8a, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.743] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.743] CloseHandle (hObject=0x17c) returned 1 [0137.744] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/ijOH8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ijoh8.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.744] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.744] WriteFile (in: hFile=0x17c, lpBuffer=0x125846c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x125846c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.744] CloseHandle (hObject=0x17c) returned 1 [0137.744] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12660140*, nNumberOfCharsToWrite=0x4d, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x12660140*, lpNumberOfCharsWritten=0x1242981c*=0x4d) returned 1 [0137.745] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/m74aEqfpjloC.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m74aeqfpjloc.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42538820, ftCreationTime.dwHighDateTime=0x1d4d20f, ftLastAccessTime.dwLowDateTime=0xa61cc050, ftLastAccessTime.dwHighDateTime=0x1d4ce73, ftLastWriteTime.dwLowDateTime=0xa61cc050, ftLastWriteTime.dwHighDateTime=0x1d4ce73, nFileSizeHigh=0x0, nFileSizeLow=0xc124)) returned 1 [0137.745] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/m74aEqfpjloC.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\m74aeqfpjloc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.745] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.745] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0137.746] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0137.746] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0137.746] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b60ac | out: pbBuffer=0x124b60ac) returned 1 [0137.747] SwitchToThread () returned 1 [0137.747] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.750] SetEvent (hEvent=0xb8) returned 1 [0137.750] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.752] SetEvent (hEvent=0xb8) returned 1 [0137.752] SwitchToThread () returned 1 [0137.753] SetEvent (hEvent=0xb8) returned 1 [0137.753] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.755] SetEvent (hEvent=0xa0) returned 1 [0137.755] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.756] SetEvent (hEvent=0xa0) returned 1 [0137.756] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0137.766] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.766] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.766] SetEvent (hEvent=0xac) returned 1 [0137.766] SetEvent (hEvent=0xa0) returned 1 [0137.766] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x13c4c, lpOverlapped=0x0) returned 1 [0137.768] GetFileType (hFile=0x17c) returned 0x1 [0137.768] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.768] WriteFile (in: hFile=0x17c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x13c4c, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429b48*=0x13c4c, lpOverlapped=0x12429b54) returned 1 [0137.768] GetFileType (hFile=0x17c) returned 0x1 [0137.768] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x13c4c, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.768] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.768] CloseHandle (hObject=0x17c) returned 1 [0137.775] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/rkFo7BF3eVJrKao.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rkfo7bf3evjrkao.csv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.776] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.776] WriteFile (in: hFile=0x17c, lpBuffer=0x12584240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12584240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.776] CloseHandle (hObject=0x17c) returned 1 [0137.776] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x57) returned 1 [0137.777] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/tm1Vh 1iu.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tm1vh 1iu.csv"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2b344b0, ftCreationTime.dwHighDateTime=0x1d4c944, ftLastAccessTime.dwLowDateTime=0x38f32e10, ftLastAccessTime.dwHighDateTime=0x1d4cb8f, ftLastWriteTime.dwLowDateTime=0x38f32e10, ftLastWriteTime.dwHighDateTime=0x1d4cb8f, nFileSizeHigh=0x0, nFileSizeLow=0x1039)) returned 1 [0137.777] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/tm1Vh 1iu.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tm1vh 1iu.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.777] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.777] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0137.778] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2074 | out: pbBuffer=0x124e2074) returned 1 [0137.778] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0137.778] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b60b6 | out: pbBuffer=0x124b60b6) returned 1 [0137.779] SwitchToThread () returned 1 [0137.779] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.782] SetEvent (hEvent=0xb8) returned 1 [0137.782] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.784] SetEvent (hEvent=0xb8) returned 1 [0137.784] SwitchToThread () returned 1 [0137.787] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.799] SetEvent (hEvent=0xb8) returned 1 [0137.799] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0137.801] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.801] SetEvent (hEvent=0xb8) returned 1 [0137.801] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0137.803] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.803] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.804] SetEvent (hEvent=0xac) returned 1 [0137.804] SetEvent (hEvent=0xb8) returned 1 [0137.804] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xc11b, lpOverlapped=0x0) returned 1 [0137.805] GetFileType (hFile=0xdc) returned 0x1 [0137.805] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0137.805] WriteFile (in: hFile=0xdc, lpBuffer=0x12566000*, nNumberOfBytesToWrite=0xc11b, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12566000*, lpNumberOfBytesWritten=0x12429aa0*=0xc11b, lpOverlapped=0x12429aac) returned 1 [0137.805] GetFileType (hFile=0xdc) returned 0x1 [0137.805] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0xc11b, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0137.805] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0137.805] CloseHandle (hObject=0xdc) returned 1 [0137.805] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/e6KCoElhmGt.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\e6kcoelhmgt.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0137.806] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0137.806] WriteFile (in: hFile=0xdc, lpBuffer=0x124c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0137.806] CloseHandle (hObject=0xdc) returned 1 [0137.806] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1245c0c0*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1245c0c0*, lpNumberOfCharsWritten=0x12429774*=0x5f) returned 1 [0137.807] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/vWfQ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\vwfq.gif"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453e6fa0, ftCreationTime.dwHighDateTime=0x1d4d2aa, ftLastAccessTime.dwLowDateTime=0x922493b0, ftLastAccessTime.dwHighDateTime=0x1d4cae1, ftLastWriteTime.dwLowDateTime=0x922493b0, ftLastWriteTime.dwHighDateTime=0x1d4cae1, nFileSizeHigh=0x0, nFileSizeLow=0x6811)) returned 1 [0137.807] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/vWfQ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\vwfq.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0137.807] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0137.807] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0137.808] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0137.809] SwitchToThread () returned 1 [0137.809] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.811] SetEvent (hEvent=0xa0) returned 1 [0137.811] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.813] SetEvent (hEvent=0xa0) returned 1 [0137.813] SwitchToThread () returned 1 [0137.813] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.824] SetEvent (hEvent=0xa0) returned 1 [0137.824] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.825] SetEvent (hEvent=0xa0) returned 1 [0137.825] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.827] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.827] SetEvent (hEvent=0xa0) returned 1 [0137.827] ReadFile (in: hFile=0x108, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0xa0b9, lpOverlapped=0x0) returned 1 [0137.828] GetFileType (hFile=0x108) returned 0x1 [0137.828] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0137.828] WriteFile (in: hFile=0x108, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0xa0b9, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x124299f8*=0xa0b9, lpOverlapped=0x12429a04) returned 1 [0137.828] GetFileType (hFile=0x108) returned 0x1 [0137.828] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0xa0b9, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0137.828] ReadFile (in: hFile=0x108, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0137.828] CloseHandle (hObject=0x108) returned 1 [0137.828] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/ZLawDb0.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\zlawdb0.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.829] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0137.829] WriteFile (in: hFile=0x108, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0137.829] CloseHandle (hObject=0x108) returned 1 [0137.829] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x6e, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x124296cc*=0x6e) returned 1 [0137.829] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.829] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.830] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.830] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.830] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.830] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.830] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0137.830] CloseHandle (hObject=0x108) returned 1 [0137.830] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.830] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.830] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.831] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0137.831] WriteFile (in: hFile=0x108, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0137.832] CloseHandle (hObject=0x108) returned 1 [0137.832] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\@_read_to_recover_files_@.txt")) returned 0x20 [0137.832] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0137.832] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.833] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd300b80, ftCreationTime.dwHighDateTime=0x1d4c53a, ftLastAccessTime.dwLowDateTime=0x3942270, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3942270, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.833] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd300b80, ftCreationTime.dwHighDateTime=0x1d4c53a, ftLastAccessTime.dwLowDateTime=0x3942270, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3942270, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.833] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7041770, ftCreationTime.dwHighDateTime=0x1d4cc95, ftLastAccessTime.dwLowDateTime=0x2e6ea0c0, ftLastAccessTime.dwHighDateTime=0x1d4d330, ftLastWriteTime.dwLowDateTime=0x2e6ea0c0, ftLastWriteTime.dwHighDateTime=0x1d4d330, nFileSizeHigh=0x0, nFileSizeLow=0x18d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="69qlelfBpq.mkv", cAlternateFileName="69QLEL~1.MKV")) returned 1 [0137.833] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x3942270, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x3942270, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3942270, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0137.833] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d61c0, ftCreationTime.dwHighDateTime=0x1d4cbd7, ftLastAccessTime.dwLowDateTime=0x7999a9b0, ftLastAccessTime.dwHighDateTime=0x1d4d2ee, ftLastWriteTime.dwLowDateTime=0x7999a9b0, ftLastWriteTime.dwHighDateTime=0x1d4d2ee, nFileSizeHigh=0x0, nFileSizeLow=0x5687, dwReserved0=0x0, dwReserved1=0x0, cFileName="Agg9L.mp4", cAlternateFileName="")) returned 1 [0137.833] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af290b0, ftCreationTime.dwHighDateTime=0x1d4c893, ftLastAccessTime.dwLowDateTime=0xd51f8f90, ftLastAccessTime.dwHighDateTime=0x1d4c66c, ftLastWriteTime.dwLowDateTime=0xd51f8f90, ftLastWriteTime.dwHighDateTime=0x1d4c66c, nFileSizeHigh=0x0, nFileSizeLow=0x17cad, dwReserved0=0x0, dwReserved1=0x0, cFileName="aRXLAJKWj Ly1 RHW7G9.jpg", cAlternateFileName="ARXLAJ~1.JPG")) returned 1 [0137.833] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b85370, ftCreationTime.dwHighDateTime=0x1d4c77a, ftLastAccessTime.dwLowDateTime=0x830daa20, ftLastAccessTime.dwHighDateTime=0x1d4cc39, ftLastWriteTime.dwLowDateTime=0x830daa20, ftLastWriteTime.dwHighDateTime=0x1d4cc39, nFileSizeHigh=0x0, nFileSizeLow=0x6d76, dwReserved0=0x0, dwReserved1=0x0, cFileName="lry5A.xlsx", cAlternateFileName="LRY5A~1.XLS")) returned 1 [0137.833] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500573e0, ftCreationTime.dwHighDateTime=0x1d4cd1c, ftLastAccessTime.dwLowDateTime=0x61cab490, ftLastAccessTime.dwHighDateTime=0x1d4d588, ftLastWriteTime.dwLowDateTime=0x61cab490, ftLastWriteTime.dwHighDateTime=0x1d4d588, nFileSizeHigh=0x0, nFileSizeLow=0xb357, dwReserved0=0x0, dwReserved1=0x0, cFileName="yOZr3pj_m.bmp", cAlternateFileName="YOZR3P~1.BMP")) returned 1 [0137.833] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.833] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.833] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/69qlelfBpq.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\69qlelfbpq.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.833] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0137.834] ReadFile (in: hFile=0x108, lpBuffer=0x124c8100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124c8100*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0137.834] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.834] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.835] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/Agg9L.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\agg9l.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0137.835] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0137.835] ReadFile (in: hFile=0xdc, lpBuffer=0x124c8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124c8200*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0137.836] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/aRXLAJKWj Ly1 RHW7G9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\arxlajkwj ly1 rhw7g9.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.836] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0137.836] ReadFile (in: hFile=0x17c, lpBuffer=0x124c8300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124c8300*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0137.837] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/lry5A.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\lry5a.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0137.837] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0137.837] ReadFile (in: hFile=0x138, lpBuffer=0x124c8400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124c8400*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0137.838] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/yOZr3pj_m.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\yozr3pj_m.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.838] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0137.838] ReadFile (in: hFile=0x16c, lpBuffer=0x124c8500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124c8500*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0137.839] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/69qlelfBpq.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\69qlelfbpq.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7041770, ftCreationTime.dwHighDateTime=0x1d4cc95, ftLastAccessTime.dwLowDateTime=0x2e6ea0c0, ftLastAccessTime.dwHighDateTime=0x1d4d330, ftLastWriteTime.dwLowDateTime=0x2e6ea0c0, ftLastWriteTime.dwHighDateTime=0x1d4d330, nFileSizeHigh=0x0, nFileSizeLow=0x18d6)) returned 1 [0137.839] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/Agg9L.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\agg9l.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d61c0, ftCreationTime.dwHighDateTime=0x1d4cbd7, ftLastAccessTime.dwLowDateTime=0x7999a9b0, ftLastAccessTime.dwHighDateTime=0x1d4d2ee, ftLastWriteTime.dwLowDateTime=0x7999a9b0, ftLastWriteTime.dwHighDateTime=0x1d4d2ee, nFileSizeHigh=0x0, nFileSizeLow=0x5687)) returned 1 [0137.839] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/Agg9L.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\agg9l.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0137.839] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0137.839] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e160 | out: pbBuffer=0x1249e160) returned 1 [0137.840] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8602 | out: pbBuffer=0x124c8602) returned 1 [0137.840] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c865b | out: pbBuffer=0x124c865b) returned 1 [0137.842] SetEvent (hEvent=0xb8) returned 1 [0137.842] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x5687, lpOverlapped=0x0) returned 1 [0137.843] GetFileType (hFile=0x144) returned 0x1 [0137.843] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0137.843] WriteFile (in: hFile=0x144, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x5687, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x124299f8*=0x5687, lpOverlapped=0x12429a04) returned 1 [0137.843] GetFileType (hFile=0x144) returned 0x1 [0137.843] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x5687, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0137.843] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0137.843] CloseHandle (hObject=0x144) returned 1 [0137.843] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/Agg9L.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\agg9l.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0137.843] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0137.844] WriteFile (in: hFile=0x144, lpBuffer=0x127c9b00*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x127c9b00*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0137.844] CloseHandle (hObject=0x144) returned 1 [0137.844] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fe0d0*, nNumberOfCharsToWrite=0x66, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x127fe0d0*, lpNumberOfCharsWritten=0x124296cc*=0x66) returned 1 [0137.844] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/aRXLAJKWj Ly1 RHW7G9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\arxlajkwj ly1 rhw7g9.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af290b0, ftCreationTime.dwHighDateTime=0x1d4c893, ftLastAccessTime.dwLowDateTime=0xd51f8f90, ftLastAccessTime.dwHighDateTime=0x1d4c66c, ftLastWriteTime.dwLowDateTime=0xd51f8f90, ftLastWriteTime.dwHighDateTime=0x1d4c66c, nFileSizeHigh=0x0, nFileSizeLow=0x17cad)) returned 1 [0137.844] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/aRXLAJKWj Ly1 RHW7G9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\arxlajkwj ly1 rhw7g9.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0137.844] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0137.845] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0137.845] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1249a002 | out: pbBuffer=0x1249a002) returned 1 [0137.845] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1249a036 | out: pbBuffer=0x1249a036) returned 1 [0137.846] CloseHandle (hObject=0x16c) returned 1 [0137.847] CloseHandle (hObject=0x138) returned 1 [0137.847] CloseHandle (hObject=0x17c) returned 1 [0137.847] CloseHandle (hObject=0xdc) returned 1 [0137.847] CloseHandle (hObject=0x108) returned 1 [0137.847] SwitchToThread () returned 1 [0137.847] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.851] SetEvent (hEvent=0xa0) returned 1 [0137.851] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.854] SetEvent (hEvent=0xa0) returned 1 [0137.854] SwitchToThread () returned 1 [0137.854] SetEvent (hEvent=0xa0) returned 1 [0137.854] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.856] SetEvent (hEvent=0xb8) returned 1 [0137.856] SetEvent (hEvent=0x7c) returned 1 [0137.856] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.857] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.859] SetEvent (hEvent=0xb8) returned 1 [0137.859] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0137.863] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.906] SetEvent (hEvent=0xb8) returned 1 [0137.906] SetEvent (hEvent=0x7c) returned 1 [0137.906] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.914] SetEvent (hEvent=0x7c) returned 1 [0137.914] SetEvent (hEvent=0xa0) returned 1 [0137.914] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.920] SetEvent (hEvent=0xb8) returned 1 [0137.920] SetEvent (hEvent=0xa0) returned 1 [0137.920] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.926] SetEvent (hEvent=0x7c) returned 1 [0137.926] SetEvent (hEvent=0xa0) returned 1 [0137.926] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.932] SetEvent (hEvent=0xb8) returned 1 [0137.932] SetEvent (hEvent=0xa0) returned 1 [0137.932] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0137.947] SetEvent (hEvent=0x7c) returned 1 [0137.947] SetEvent (hEvent=0xa0) returned 1 [0137.947] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.109] SetEvent (hEvent=0xb8) returned 1 [0138.109] SetEvent (hEvent=0xa0) returned 1 [0138.109] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.157] SetEvent (hEvent=0x7c) returned 1 [0138.157] SetEvent (hEvent=0xa0) returned 1 [0138.157] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.447] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.462] SetEvent (hEvent=0xb8) returned 1 [0138.462] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.463] SetEvent (hEvent=0xb8) returned 1 [0138.463] SetEvent (hEvent=0xa0) returned 1 [0138.463] CloseHandle (hObject=0x15c) returned 1 [0138.463] CloseHandle (hObject=0x154) returned 1 [0138.463] CloseHandle (hObject=0x190) returned 1 [0138.463] CloseHandle (hObject=0x144) returned 1 [0138.463] CloseHandle (hObject=0x27c) returned 1 [0138.463] CloseHandle (hObject=0x120) returned 1 [0138.463] SwitchToThread () returned 1 [0138.534] SwitchToThread () returned 1 [0138.534] SetEvent (hEvent=0xb8) returned 1 [0138.535] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.536] SetEvent (hEvent=0xa0) returned 1 [0138.537] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0138.537] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.537] SetEvent (hEvent=0xa0) returned 1 [0138.537] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0138.538] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.538] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.543] SetEvent (hEvent=0xa0) returned 1 [0138.543] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.546] SetEvent (hEvent=0xa0) returned 1 [0138.546] SwitchToThread () returned 1 [0138.546] SetEvent (hEvent=0xa0) returned 1 [0138.546] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.549] SetEvent (hEvent=0xb8) returned 1 [0138.549] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.550] SetEvent (hEvent=0xb8) returned 1 [0138.550] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.552] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.552] SetEvent (hEvent=0xb8) returned 1 [0138.552] ReadFile (in: hFile=0xfc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x184bf, lpOverlapped=0x0) returned 1 [0138.553] GetFileType (hFile=0xfc) returned 0x1 [0138.553] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.553] WriteFile (in: hFile=0xfc, lpBuffer=0x1274e000*, nNumberOfBytesToWrite=0x184bf, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1274e000*, lpNumberOfBytesWritten=0x12429aa0*=0x184bf, lpOverlapped=0x12429aac) returned 1 [0138.554] GetFileType (hFile=0xfc) returned 0x1 [0138.554] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x184bf, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.554] ReadFile (in: hFile=0xfc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.554] CloseHandle (hObject=0xfc) returned 1 [0138.554] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/dxlu_gWJuQJE0QfuQm.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\dxlu_gwjuqje0qfuqm.csv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.554] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.555] WriteFile (in: hFile=0xfc, lpBuffer=0x127c86c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c86c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.555] CloseHandle (hObject=0xfc) returned 1 [0138.555] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x125760e0*, nNumberOfCharsToWrite=0x6b, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x125760e0*, lpNumberOfCharsWritten=0x12429774*=0x6b) returned 1 [0138.555] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/xk82.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\xk82.docx"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c006ef0, ftCreationTime.dwHighDateTime=0x1d4d522, ftLastAccessTime.dwLowDateTime=0xed2afee0, ftLastAccessTime.dwHighDateTime=0x1d4d16f, ftLastWriteTime.dwLowDateTime=0xed2afee0, ftLastWriteTime.dwHighDateTime=0x1d4d16f, nFileSizeHigh=0x0, nFileSizeLow=0x189ae)) returned 1 [0138.555] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/xk82.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\xk82.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.555] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.555] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.556] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c0002 | out: pbBuffer=0x124c0002) returned 1 [0138.557] SwitchToThread () returned 1 [0138.557] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.561] SetEvent (hEvent=0xa0) returned 1 [0138.561] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.563] SetEvent (hEvent=0xa0) returned 1 [0138.563] SwitchToThread () returned 1 [0138.566] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.572] SetEvent (hEvent=0xa0) returned 1 [0138.573] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0138.606] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.606] SetEvent (hEvent=0xa0) returned 1 [0138.606] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0138.609] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.609] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0138.609] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.609] SetEvent (hEvent=0xac) returned 1 [0138.609] SetEvent (hEvent=0xa0) returned 1 [0138.610] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x14b00, lpOverlapped=0x0) returned 1 [0138.611] GetFileType (hFile=0x144) returned 0x1 [0138.611] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.611] WriteFile (in: hFile=0x144, lpBuffer=0x12596000*, nNumberOfBytesToWrite=0x14b00, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12596000*, lpNumberOfBytesWritten=0x124299f8*=0x14b00, lpOverlapped=0x12429a04) returned 1 [0138.611] GetFileType (hFile=0x144) returned 0x1 [0138.611] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x14b00, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.611] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0138.611] CloseHandle (hObject=0x144) returned 1 [0138.612] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/REvvSS_RAc2D.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\revvss_rac2d.pdf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.612] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.612] WriteFile (in: hFile=0x144, lpBuffer=0x12572240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x12572240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0138.612] CloseHandle (hObject=0x144) returned 1 [0138.612] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0x7a, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x124296cc*=0x7a) returned 1 [0138.613] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/j_avE.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\j_ave.ots"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37359b20, ftCreationTime.dwHighDateTime=0x1d4d117, ftLastAccessTime.dwLowDateTime=0x9d2d0e10, ftLastAccessTime.dwHighDateTime=0x1d4d296, ftLastWriteTime.dwLowDateTime=0x9d2d0e10, ftLastWriteTime.dwHighDateTime=0x1d4d296, nFileSizeHigh=0x0, nFileSizeLow=0x7be2)) returned 1 [0138.613] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/j_avE.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\j_ave.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.613] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.613] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.614] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0138.614] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c201c | out: pbBuffer=0x124c201c) returned 1 [0138.615] SwitchToThread () returned 1 [0138.615] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.617] SetEvent (hEvent=0xb8) returned 1 [0138.617] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.619] SetEvent (hEvent=0xb8) returned 1 [0138.619] SwitchToThread () returned 1 [0138.622] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.633] SetEvent (hEvent=0xb8) returned 1 [0138.633] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.634] SetEvent (hEvent=0xb8) returned 1 [0138.634] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.637] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.637] SetEvent (hEvent=0xb8) returned 1 [0138.637] ReadFile (in: hFile=0x15c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x1a8c, lpOverlapped=0x0) returned 1 [0138.637] GetFileType (hFile=0x15c) returned 0x1 [0138.638] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.638] WriteFile (in: hFile=0x15c, lpBuffer=0x12566000*, nNumberOfBytesToWrite=0x1a8c, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12566000*, lpNumberOfBytesWritten=0x12429aa0*=0x1a8c, lpOverlapped=0x12429aac) returned 1 [0138.638] GetFileType (hFile=0x15c) returned 0x1 [0138.638] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x1a8c, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.638] ReadFile (in: hFile=0x15c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.638] CloseHandle (hObject=0x15c) returned 1 [0138.638] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/0sV0pYP16jqJm.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\0sv0pyp16jqjm.ppt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.638] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.638] WriteFile (in: hFile=0x15c, lpBuffer=0x12576240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12576240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.638] CloseHandle (hObject=0x15c) returned 1 [0138.639] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0x5e, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x12429774*=0x5e) returned 1 [0138.639] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/1zDEJQ7IF9i.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\1zdejq7if9i.xls"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd07f980, ftCreationTime.dwHighDateTime=0x1d4ce7c, ftLastAccessTime.dwLowDateTime=0x84757c60, ftLastAccessTime.dwHighDateTime=0x1d4cd8a, ftLastWriteTime.dwLowDateTime=0x84757c60, ftLastWriteTime.dwHighDateTime=0x1d4cd8a, nFileSizeHigh=0x0, nFileSizeLow=0xb433)) returned 1 [0138.639] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/1zDEJQ7IF9i.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\1zdejq7if9i.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.639] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.639] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.640] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.641] SwitchToThread () returned 1 [0138.641] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.644] SetEvent (hEvent=0xa0) returned 1 [0138.644] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.647] SetEvent (hEvent=0xa0) returned 1 [0138.647] SwitchToThread () returned 1 [0138.647] SetEvent (hEvent=0xa0) returned 1 [0138.647] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.649] SetEvent (hEvent=0xb8) returned 1 [0138.649] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.650] SetEvent (hEvent=0xb8) returned 1 [0138.650] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.652] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.652] SetEvent (hEvent=0xb8) returned 1 [0138.652] ReadFile (in: hFile=0x15c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xe84, lpOverlapped=0x0) returned 1 [0138.653] GetFileType (hFile=0x15c) returned 0x1 [0138.653] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.653] WriteFile (in: hFile=0x15c, lpBuffer=0x124b6000*, nNumberOfBytesToWrite=0xe84, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124b6000*, lpNumberOfBytesWritten=0x12429aa0*=0xe84, lpOverlapped=0x12429aac) returned 1 [0138.653] GetFileType (hFile=0x15c) returned 0x1 [0138.653] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0xe84, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.653] ReadFile (in: hFile=0x15c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.653] CloseHandle (hObject=0x15c) returned 1 [0138.653] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/ezUZg.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\ezuzg.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.653] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.654] WriteFile (in: hFile=0x15c, lpBuffer=0x125766c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x125766c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.654] CloseHandle (hObject=0x15c) returned 1 [0138.654] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fc000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fc000*, lpNumberOfCharsWritten=0x12429774*=0x57) returned 1 [0138.654] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/n0n _myNdMvr9i.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\n0n _myndmvr9i.rtf"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c02bf00, ftCreationTime.dwHighDateTime=0x1d4c96d, ftLastAccessTime.dwLowDateTime=0xd11e8940, ftLastAccessTime.dwHighDateTime=0x1d4cd89, ftLastWriteTime.dwLowDateTime=0xd11e8940, ftLastWriteTime.dwHighDateTime=0x1d4cd89, nFileSizeHigh=0x0, nFileSizeLow=0x18e38)) returned 1 [0138.654] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/n0n _myNdMvr9i.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\n0n _myndmvr9i.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.654] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.655] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.655] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.656] SwitchToThread () returned 1 [0138.656] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.660] SetEvent (hEvent=0xa0) returned 1 [0138.660] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.661] SetEvent (hEvent=0xa0) returned 1 [0138.661] SwitchToThread () returned 1 [0138.664] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.753] SetEvent (hEvent=0xa0) returned 1 [0138.753] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.754] SetEvent (hEvent=0xa0) returned 1 [0138.754] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0138.758] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.758] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.758] SetEvent (hEvent=0xac) returned 1 [0138.758] SetEvent (hEvent=0xa0) returned 1 [0138.758] ReadFile (in: hFile=0x110, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0xfa4, lpOverlapped=0x0) returned 1 [0138.759] GetFileType (hFile=0x110) returned 0x1 [0138.759] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.759] WriteFile (in: hFile=0x110, lpBuffer=0x124d8000*, nNumberOfBytesToWrite=0xfa4, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124d8000*, lpNumberOfBytesWritten=0x12429b48*=0xfa4, lpOverlapped=0x12429b54) returned 1 [0138.759] GetFileType (hFile=0x110) returned 0x1 [0138.759] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xfa4, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.759] ReadFile (in: hFile=0x110, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.759] CloseHandle (hObject=0x110) returned 1 [0138.759] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/pTjvXozCEvI m.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ptjvxozcevi m.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0138.759] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.760] WriteFile (in: hFile=0x110, lpBuffer=0x125b2240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x125b2240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.760] CloseHandle (hObject=0x110) returned 1 [0138.760] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fc000*, nNumberOfCharsToWrite=0x53, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x127fc000*, lpNumberOfCharsWritten=0x1242981c*=0x53) returned 1 [0138.761] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.761] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.761] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.761] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.761] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.761] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0138.761] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0138.761] CloseHandle (hObject=0x110) returned 1 [0138.762] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.762] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.762] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0138.762] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.762] WriteFile (in: hFile=0x110, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.763] CloseHandle (hObject=0x110) returned 1 [0138.764] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.764] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.764] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.764] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06846f0, ftCreationTime.dwHighDateTime=0x1d4cf36, ftLastAccessTime.dwLowDateTime=0x420ca40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x420ca40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.764] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06846f0, ftCreationTime.dwHighDateTime=0x1d4cf36, ftLastAccessTime.dwLowDateTime=0x420ca40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x420ca40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.764] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe5c4330, ftCreationTime.dwHighDateTime=0x1d4cf36, ftLastAccessTime.dwLowDateTime=0x56641420, ftLastAccessTime.dwHighDateTime=0x1d4cca0, ftLastWriteTime.dwLowDateTime=0x56641420, ftLastWriteTime.dwHighDateTime=0x1d4cca0, nFileSizeHigh=0x0, nFileSizeLow=0xf67d, dwReserved0=0x0, dwReserved1=0x0, cFileName="17X6N1.m4a", cAlternateFileName="")) returned 1 [0138.764] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cedd320, ftCreationTime.dwHighDateTime=0x1d4d18e, ftLastAccessTime.dwLowDateTime=0x34940070, ftLastAccessTime.dwHighDateTime=0x1d4cd41, ftLastWriteTime.dwLowDateTime=0x34940070, ftLastWriteTime.dwHighDateTime=0x1d4cd41, nFileSizeHigh=0x0, nFileSizeLow=0x119e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="3GSZbNaBUf8CvVUe.m4a", cAlternateFileName="3GSZBN~1.M4A")) returned 1 [0138.764] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x420ca40, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x420ca40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x420ca40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.764] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c96860, ftCreationTime.dwHighDateTime=0x1d4d1b9, ftLastAccessTime.dwLowDateTime=0x8a23afb0, ftLastAccessTime.dwHighDateTime=0x1d4d361, ftLastWriteTime.dwLowDateTime=0x8a23afb0, ftLastWriteTime.dwHighDateTime=0x1d4d361, nFileSizeHigh=0x0, nFileSizeLow=0xa91b, dwReserved0=0x0, dwReserved1=0x0, cFileName="aQJvSPw70T2Bga.m4a", cAlternateFileName="AQJVSP~1.M4A")) returned 1 [0138.764] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c7b570, ftCreationTime.dwHighDateTime=0x1d4d065, ftLastAccessTime.dwLowDateTime=0xf9d3170, ftLastAccessTime.dwHighDateTime=0x1d4c778, ftLastWriteTime.dwLowDateTime=0xf9d3170, ftLastWriteTime.dwHighDateTime=0x1d4c778, nFileSizeHigh=0x0, nFileSizeLow=0x1710a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BFsENV6OhUwW4bQDS5VU.wav", cAlternateFileName="BFSENV~1.WAV")) returned 1 [0138.764] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2e3f00, ftCreationTime.dwHighDateTime=0x1d4c8b0, ftLastAccessTime.dwLowDateTime=0x62333860, ftLastAccessTime.dwHighDateTime=0x1d4c969, ftLastWriteTime.dwLowDateTime=0x62333860, ftLastWriteTime.dwHighDateTime=0x1d4c969, nFileSizeHigh=0x0, nFileSizeLow=0xdb63, dwReserved0=0x0, dwReserved1=0x0, cFileName="nqMcZdJ-.mp3", cAlternateFileName="")) returned 1 [0138.764] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x228a5040, ftCreationTime.dwHighDateTime=0x1d4d58a, ftLastAccessTime.dwLowDateTime=0xd8ddd880, ftLastAccessTime.dwHighDateTime=0x1d4c59a, ftLastWriteTime.dwLowDateTime=0xd8ddd880, ftLastWriteTime.dwHighDateTime=0x1d4c59a, nFileSizeHigh=0x0, nFileSizeLow=0xf6fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="oPB20v.mp3", cAlternateFileName="")) returned 1 [0138.764] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb0d8ec0, ftCreationTime.dwHighDateTime=0x1d4cf4e, ftLastAccessTime.dwLowDateTime=0x2251160, ftLastAccessTime.dwHighDateTime=0x1d4d1b0, ftLastWriteTime.dwLowDateTime=0x2251160, ftLastWriteTime.dwHighDateTime=0x1d4d1b0, nFileSizeHigh=0x0, nFileSizeLow=0xb654, dwReserved0=0x0, dwReserved1=0x0, cFileName="rBdRZqLp4.wav", cAlternateFileName="RBDRZQ~1.WAV")) returned 1 [0138.764] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.764] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.764] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/17X6N1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\17x6n1.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0138.765] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.765] ReadFile (in: hFile=0x110, lpBuffer=0x1249c100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1249c100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.766] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/3GSZbNaBUf8CvVUe.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\3gszbnabuf8cvvue.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0138.766] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.766] ReadFile (in: hFile=0x168, lpBuffer=0x1249c200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1249c200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.767] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.767] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.767] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/BFsENV6OhUwW4bQDS5VU.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\bfsenv6ohuww4bqds5vu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0138.767] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.767] ReadFile (in: hFile=0xd0, lpBuffer=0x1249c300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1249c300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.768] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/aQJvSPw70T2Bga.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\aqjvspw70t2bga.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0138.768] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.768] ReadFile (in: hFile=0xc8, lpBuffer=0x1249c400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1249c400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.769] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/nqMcZdJ-.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\nqmczdj-.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0138.769] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.770] ReadFile (in: hFile=0x118, lpBuffer=0x1249c600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1249c600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.770] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/oPB20v.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\opb20v.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.770] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.771] ReadFile (in: hFile=0x18c, lpBuffer=0x1249c800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1249c800*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.771] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/rBdRZqLp4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\rbdrzqlp4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.772] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.772] ReadFile (in: hFile=0x10c, lpBuffer=0x1249ca00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1249ca00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.772] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/17X6N1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\17x6n1.m4a"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe5c4330, ftCreationTime.dwHighDateTime=0x1d4cf36, ftLastAccessTime.dwLowDateTime=0x56641420, ftLastAccessTime.dwHighDateTime=0x1d4cca0, ftLastWriteTime.dwLowDateTime=0x56641420, ftLastWriteTime.dwHighDateTime=0x1d4cca0, nFileSizeHigh=0x0, nFileSizeLow=0xf67d)) returned 1 [0138.772] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/3GSZbNaBUf8CvVUe.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\3gszbnabuf8cvvue.m4a"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cedd320, ftCreationTime.dwHighDateTime=0x1d4d18e, ftLastAccessTime.dwLowDateTime=0x34940070, ftLastAccessTime.dwHighDateTime=0x1d4cd41, ftLastWriteTime.dwLowDateTime=0x34940070, ftLastWriteTime.dwHighDateTime=0x1d4cd41, nFileSizeHigh=0x0, nFileSizeLow=0x119e2)) returned 1 [0138.773] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/BFsENV6OhUwW4bQDS5VU.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\bfsenv6ohuww4bqds5vu.wav"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c7b570, ftCreationTime.dwHighDateTime=0x1d4d065, ftLastAccessTime.dwLowDateTime=0xf9d3170, ftLastAccessTime.dwHighDateTime=0x1d4c778, ftLastWriteTime.dwLowDateTime=0xf9d3170, ftLastWriteTime.dwHighDateTime=0x1d4c778, nFileSizeHigh=0x0, nFileSizeLow=0x1710a)) returned 1 [0138.773] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/BFsENV6OhUwW4bQDS5VU.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\bfsenv6ohuww4bqds5vu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.773] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.773] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124422a0 | out: pbBuffer=0x124422a0) returned 1 [0138.774] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1249cc02 | out: pbBuffer=0x1249cc02) returned 1 [0138.775] SetEvent (hEvent=0xb8) returned 1 [0138.775] ReadFile (in: hFile=0xc0, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x1710a, lpOverlapped=0x0) returned 1 [0138.776] GetFileType (hFile=0xc0) returned 0x1 [0138.776] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.776] WriteFile (in: hFile=0xc0, lpBuffer=0x12596000*, nNumberOfBytesToWrite=0x1710a, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12596000*, lpNumberOfBytesWritten=0x12429aa0*=0x1710a, lpOverlapped=0x12429aac) returned 1 [0138.777] GetFileType (hFile=0xc0) returned 0x1 [0138.777] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x1710a, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.777] ReadFile (in: hFile=0xc0, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.777] CloseHandle (hObject=0xc0) returned 1 [0138.777] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/BFsENV6OhUwW4bQDS5VU.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\bfsenv6ohuww4bqds5vu.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.777] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.777] WriteFile (in: hFile=0xc0, lpBuffer=0x125b2fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x125b2fc0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.777] CloseHandle (hObject=0xc0) returned 1 [0138.778] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fe340*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fe340*, lpNumberOfCharsWritten=0x12429774*=0x68) returned 1 [0138.778] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/aQJvSPw70T2Bga.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\aqjvspw70t2bga.m4a"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c96860, ftCreationTime.dwHighDateTime=0x1d4d1b9, ftLastAccessTime.dwLowDateTime=0x8a23afb0, ftLastAccessTime.dwHighDateTime=0x1d4d361, ftLastWriteTime.dwLowDateTime=0x8a23afb0, ftLastWriteTime.dwHighDateTime=0x1d4d361, nFileSizeHigh=0x0, nFileSizeLow=0xa91b)) returned 1 [0138.778] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/nqMcZdJ-.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\nqmczdj-.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2e3f00, ftCreationTime.dwHighDateTime=0x1d4c8b0, ftLastAccessTime.dwLowDateTime=0x62333860, ftLastAccessTime.dwHighDateTime=0x1d4c969, ftLastWriteTime.dwLowDateTime=0x62333860, ftLastWriteTime.dwHighDateTime=0x1d4c969, nFileSizeHigh=0x0, nFileSizeLow=0xdb63)) returned 1 [0138.778] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/nqMcZdJ-.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\nqmczdj-.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.778] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.778] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.779] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0138.779] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1249c002 | out: pbBuffer=0x1249c002) returned 1 [0138.779] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1249c0aa | out: pbBuffer=0x1249c0aa) returned 1 [0138.780] CloseHandle (hObject=0x10c) returned 1 [0138.781] CloseHandle (hObject=0x18c) returned 1 [0138.781] CloseHandle (hObject=0x118) returned 1 [0138.781] CloseHandle (hObject=0xc8) returned 1 [0138.781] CloseHandle (hObject=0xd0) returned 1 [0138.781] CloseHandle (hObject=0x168) returned 1 [0138.781] CloseHandle (hObject=0x110) returned 1 [0138.781] SwitchToThread () returned 1 [0138.781] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.784] SetEvent (hEvent=0xa0) returned 1 [0138.784] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.787] SetEvent (hEvent=0xa0) returned 1 [0138.787] SwitchToThread () returned 1 [0138.787] SetEvent (hEvent=0xa0) returned 1 [0138.787] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.789] SetEvent (hEvent=0xb8) returned 1 [0138.789] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.790] SetEvent (hEvent=0xb8) returned 1 [0138.790] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.792] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.792] SetEvent (hEvent=0xb8) returned 1 [0138.792] ReadFile (in: hFile=0xc0, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xb654, lpOverlapped=0x0) returned 1 [0138.793] GetFileType (hFile=0xc0) returned 0x1 [0138.793] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.793] WriteFile (in: hFile=0xc0, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xb654, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429aa0*=0xb654, lpOverlapped=0x12429aac) returned 1 [0138.793] GetFileType (hFile=0xc0) returned 0x1 [0138.793] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0xb654, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.793] ReadFile (in: hFile=0xc0, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.793] CloseHandle (hObject=0xc0) returned 1 [0138.794] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/rBdRZqLp4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\rbdrzqlp4.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.794] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.794] WriteFile (in: hFile=0xc0, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.794] CloseHandle (hObject=0xc0) returned 1 [0138.794] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x12429774*=0x5d) returned 1 [0138.795] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.795] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.795] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.795] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.795] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.795] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.795] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0138.796] CloseHandle (hObject=0xc0) returned 1 [0138.796] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.796] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.796] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.796] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.797] WriteFile (in: hFile=0xc0, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.798] CloseHandle (hObject=0xc0) returned 1 [0138.798] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.798] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.798] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.798] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3afdd0, ftCreationTime.dwHighDateTime=0x1d4d2c7, ftLastAccessTime.dwLowDateTime=0x4246420, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4246420, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.798] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3afdd0, ftCreationTime.dwHighDateTime=0x1d4d2c7, ftLastAccessTime.dwLowDateTime=0x4246420, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4246420, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.798] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb52e6e90, ftCreationTime.dwHighDateTime=0x1d4cafe, ftLastAccessTime.dwLowDateTime=0x52456a80, ftLastAccessTime.dwHighDateTime=0x1d4ca37, ftLastWriteTime.dwLowDateTime=0x52456a80, ftLastWriteTime.dwHighDateTime=0x1d4ca37, nFileSizeHigh=0x0, nFileSizeLow=0xc396, dwReserved0=0x0, dwReserved1=0x0, cFileName="80nGmZUOtE83o NS.m4a", cAlternateFileName="80NGMZ~1.M4A")) returned 1 [0138.798] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x4246420, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x4246420, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4246420, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.798] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eeda4a0, ftCreationTime.dwHighDateTime=0x1d4d47d, ftLastAccessTime.dwLowDateTime=0x5454b90, ftLastAccessTime.dwHighDateTime=0x1d4d09c, ftLastWriteTime.dwLowDateTime=0x5454b90, ftLastWriteTime.dwHighDateTime=0x1d4d09c, nFileSizeHigh=0x0, nFileSizeLow=0xd4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ehnj X3iuP.wav", cAlternateFileName="EHNJX3~1.WAV")) returned 1 [0138.798] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d5650c0, ftCreationTime.dwHighDateTime=0x1d4cf50, ftLastAccessTime.dwLowDateTime=0x596e1f0, ftLastAccessTime.dwHighDateTime=0x1d4cd02, ftLastWriteTime.dwLowDateTime=0x596e1f0, ftLastWriteTime.dwHighDateTime=0x1d4cd02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kqey", cAlternateFileName="")) returned 1 [0138.798] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb0ca790, ftCreationTime.dwHighDateTime=0x1d4cf52, ftLastAccessTime.dwLowDateTime=0x6717edf0, ftLastAccessTime.dwHighDateTime=0x1d4d321, ftLastWriteTime.dwLowDateTime=0x6717edf0, ftLastWriteTime.dwHighDateTime=0x1d4d321, nFileSizeHigh=0x0, nFileSizeLow=0xfecc, dwReserved0=0x0, dwReserved1=0x0, cFileName="mTC69BhN.mp3", cAlternateFileName="")) returned 1 [0138.798] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94278d20, ftCreationTime.dwHighDateTime=0x1d4c9c4, ftLastAccessTime.dwLowDateTime=0xe003c9e0, ftLastAccessTime.dwHighDateTime=0x1d4cd41, ftLastWriteTime.dwLowDateTime=0xe003c9e0, ftLastWriteTime.dwHighDateTime=0x1d4cd41, nFileSizeHigh=0x0, nFileSizeLow=0x1769e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLWODKkQh9dbJOE6IwI.wav", cAlternateFileName="OLWODK~1.WAV")) returned 1 [0138.798] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x292b7f50, ftCreationTime.dwHighDateTime=0x1d4d530, ftLastAccessTime.dwLowDateTime=0x95d26c80, ftLastAccessTime.dwHighDateTime=0x1d4cbbd, ftLastWriteTime.dwLowDateTime=0x95d26c80, ftLastWriteTime.dwHighDateTime=0x1d4cbbd, nFileSizeHigh=0x0, nFileSizeLow=0x2995, dwReserved0=0x0, dwReserved1=0x0, cFileName="pNV1BVXi7eetUz02o_.wav", cAlternateFileName="PNV1BV~1.WAV")) returned 1 [0138.799] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb5562a0, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0xa004c820, ftLastAccessTime.dwHighDateTime=0x1d4d4a4, ftLastWriteTime.dwLowDateTime=0xa004c820, ftLastWriteTime.dwHighDateTime=0x1d4d4a4, nFileSizeHigh=0x0, nFileSizeLow=0x2cb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="v8dQ7Bpi2st2HLcyuzL.mp3", cAlternateFileName="V8DQ7B~1.MP3")) returned 1 [0138.799] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0078100, ftCreationTime.dwHighDateTime=0x1d4c950, ftLastAccessTime.dwLowDateTime=0x1e9ca8b0, ftLastAccessTime.dwHighDateTime=0x1d4d2d4, ftLastWriteTime.dwLowDateTime=0x1e9ca8b0, ftLastWriteTime.dwHighDateTime=0x1d4d2d4, nFileSizeHigh=0x0, nFileSizeLow=0x178c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="XiJn_Boi12aW.mp3", cAlternateFileName="XIJN_B~1.MP3")) returned 1 [0138.799] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.799] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.799] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/80nGmZUOtE83o NS.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\80ngmzuote83o ns.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.799] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.800] ReadFile (in: hFile=0xc0, lpBuffer=0x127fa100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.800] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.800] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.801] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/Ehnj X3iuP.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\ehnj x3iup.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0138.801] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.801] ReadFile (in: hFile=0x110, lpBuffer=0x127fa200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.802] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/OLWODKkQh9dbJOE6IwI.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\olwodkkqh9dbjoe6iwi.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0138.802] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.802] ReadFile (in: hFile=0x168, lpBuffer=0x127fa300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.803] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/XiJn_Boi12aW.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\xijn_boi12aw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0138.803] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.803] ReadFile (in: hFile=0xd0, lpBuffer=0x127fa400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.804] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.804] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d5650c0, ftCreationTime.dwHighDateTime=0x1d4cf50, ftLastAccessTime.dwLowDateTime=0x596e1f0, ftLastAccessTime.dwHighDateTime=0x1d4cd02, ftLastWriteTime.dwLowDateTime=0x596e1f0, ftLastWriteTime.dwHighDateTime=0x1d4cd02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.804] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.804] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/mTC69BhN.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\mtc69bhn.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0138.804] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.805] ReadFile (in: hFile=0xc8, lpBuffer=0x127fa600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.805] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/pNV1BVXi7eetUz02o_.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\pnv1bvxi7eetuz02o_.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0138.805] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.806] ReadFile (in: hFile=0x118, lpBuffer=0x127fa700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa700*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.806] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/v8dQ7Bpi2st2HLcyuzL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\v8dq7bpi2st2hlcyuzl.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.806] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.807] ReadFile (in: hFile=0x18c, lpBuffer=0x127fa800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa800*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0138.807] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/80nGmZUOtE83o NS.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\80ngmzuote83o ns.m4a"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb52e6e90, ftCreationTime.dwHighDateTime=0x1d4cafe, ftLastAccessTime.dwLowDateTime=0x52456a80, ftLastAccessTime.dwHighDateTime=0x1d4ca37, ftLastWriteTime.dwLowDateTime=0x52456a80, ftLastWriteTime.dwHighDateTime=0x1d4ca37, nFileSizeHigh=0x0, nFileSizeLow=0xc396)) returned 1 [0138.807] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/Ehnj X3iuP.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\ehnj x3iup.wav"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eeda4a0, ftCreationTime.dwHighDateTime=0x1d4d47d, ftLastAccessTime.dwLowDateTime=0x5454b90, ftLastAccessTime.dwHighDateTime=0x1d4d09c, ftLastWriteTime.dwLowDateTime=0x5454b90, ftLastWriteTime.dwHighDateTime=0x1d4d09c, nFileSizeHigh=0x0, nFileSizeLow=0xd4b4)) returned 1 [0138.807] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/Ehnj X3iuP.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\ehnj x3iup.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.808] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.808] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124422e0 | out: pbBuffer=0x124422e0) returned 1 [0138.808] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127fa902 | out: pbBuffer=0x127fa902) returned 1 [0138.808] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fa948 | out: pbBuffer=0x127fa948) returned 1 [0138.809] SetEvent (hEvent=0xa0) returned 1 [0138.809] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xd4b4, lpOverlapped=0x0) returned 1 [0138.810] GetFileType (hFile=0x10c) returned 0x1 [0138.810] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.810] WriteFile (in: hFile=0x10c, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0xd4b4, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x12429aa0*=0xd4b4, lpOverlapped=0x12429aac) returned 1 [0138.811] GetFileType (hFile=0x10c) returned 0x1 [0138.811] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xd4b4, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.811] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.811] CloseHandle (hObject=0x10c) returned 1 [0138.811] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/Ehnj X3iuP.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\ehnj x3iup.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.811] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.811] WriteFile (in: hFile=0x10c, lpBuffer=0x127c8fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8fc0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.811] CloseHandle (hObject=0x10c) returned 1 [0138.812] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c2000*, nNumberOfCharsToWrite=0x64, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c2000*, lpNumberOfCharsWritten=0x12429774*=0x64) returned 1 [0138.812] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/OLWODKkQh9dbJOE6IwI.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\olwodkkqh9dbjoe6iwi.wav"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94278d20, ftCreationTime.dwHighDateTime=0x1d4c9c4, ftLastAccessTime.dwLowDateTime=0xe003c9e0, ftLastAccessTime.dwHighDateTime=0x1d4cd41, ftLastWriteTime.dwLowDateTime=0xe003c9e0, ftLastWriteTime.dwHighDateTime=0x1d4cd41, nFileSizeHigh=0x0, nFileSizeLow=0x1769e)) returned 1 [0138.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/OLWODKkQh9dbJOE6IwI.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\olwodkkqh9dbjoe6iwi.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.812] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.812] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.813] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0138.813] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1249a002 | out: pbBuffer=0x1249a002) returned 1 [0138.814] CloseHandle (hObject=0x18c) returned 1 [0138.814] CloseHandle (hObject=0x118) returned 1 [0138.814] CloseHandle (hObject=0xc8) returned 1 [0138.814] CloseHandle (hObject=0xd0) returned 1 [0138.814] CloseHandle (hObject=0x168) returned 1 [0138.815] CloseHandle (hObject=0x110) returned 1 [0138.815] CloseHandle (hObject=0xc0) returned 1 [0138.815] SwitchToThread () returned 1 [0138.815] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.819] SetEvent (hEvent=0xb8) returned 1 [0138.819] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.821] SetEvent (hEvent=0xb8) returned 1 [0138.821] SwitchToThread () returned 1 [0138.822] SetEvent (hEvent=0xb8) returned 1 [0138.822] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.824] SetEvent (hEvent=0xa0) returned 1 [0138.824] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.825] SetEvent (hEvent=0xa0) returned 1 [0138.825] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.827] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.827] SetEvent (hEvent=0xa0) returned 1 [0138.827] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xfecc, lpOverlapped=0x0) returned 1 [0138.828] GetFileType (hFile=0x10c) returned 0x1 [0138.828] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.828] WriteFile (in: hFile=0x10c, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0xfecc, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x12429aa0*=0xfecc, lpOverlapped=0x12429aac) returned 1 [0138.829] GetFileType (hFile=0x10c) returned 0x1 [0138.829] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfecc, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.829] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.829] CloseHandle (hObject=0x10c) returned 1 [0138.829] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/mTC69BhN.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\mtc69bhn.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.829] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.829] WriteFile (in: hFile=0x10c, lpBuffer=0x127fa240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127fa240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.829] CloseHandle (hObject=0x10c) returned 1 [0138.829] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fe0d0*, nNumberOfCharsToWrite=0x61, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fe0d0*, lpNumberOfCharsWritten=0x12429774*=0x61) returned 1 [0138.830] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/pNV1BVXi7eetUz02o_.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\pnv1bvxi7eetuz02o_.wav"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x292b7f50, ftCreationTime.dwHighDateTime=0x1d4d530, ftLastAccessTime.dwLowDateTime=0x95d26c80, ftLastAccessTime.dwHighDateTime=0x1d4cbbd, ftLastWriteTime.dwLowDateTime=0x95d26c80, ftLastWriteTime.dwHighDateTime=0x1d4cbbd, nFileSizeHigh=0x0, nFileSizeLow=0x2995)) returned 1 [0138.830] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/pNV1BVXi7eetUz02o_.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\pnv1bvxi7eetuz02o_.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.830] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.830] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.831] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.831] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc0a7 | out: pbBuffer=0x124bc0a7) returned 1 [0138.832] SwitchToThread () returned 1 [0138.833] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.835] SetEvent (hEvent=0xb8) returned 1 [0138.835] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.837] SetEvent (hEvent=0xb8) returned 1 [0138.837] SwitchToThread () returned 1 [0138.838] SetEvent (hEvent=0xb8) returned 1 [0138.838] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.839] SetEvent (hEvent=0xa0) returned 1 [0138.839] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.840] SetEvent (hEvent=0xa0) returned 1 [0138.840] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.844] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.862] SetEvent (hEvent=0xa0) returned 1 [0138.862] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.865] SetEvent (hEvent=0xa0) returned 1 [0138.865] SwitchToThread () returned 1 [0138.865] SetEvent (hEvent=0xa0) returned 1 [0138.865] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.867] SetEvent (hEvent=0xb8) returned 1 [0138.867] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.868] SetEvent (hEvent=0xb8) returned 1 [0138.868] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.870] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.870] SetEvent (hEvent=0xb8) returned 1 [0138.871] ReadFile (in: hFile=0x18c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x10fe9, lpOverlapped=0x0) returned 1 [0138.871] GetFileType (hFile=0x18c) returned 0x1 [0138.872] SetFilePointerEx (in: hFile=0x18c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.872] WriteFile (in: hFile=0x18c, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0x10fe9, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x124299f8*=0x10fe9, lpOverlapped=0x12429a04) returned 1 [0138.872] GetFileType (hFile=0x18c) returned 0x1 [0138.872] SetFilePointerEx (in: hFile=0x18c, liDistanceToMove=0x10fe9, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.872] ReadFile (in: hFile=0x18c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0138.872] CloseHandle (hObject=0x18c) returned 1 [0138.872] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/_ar9g.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\_ar9g.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.872] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.873] WriteFile (in: hFile=0x18c, lpBuffer=0x127fe6c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x127fe6c0*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0138.873] CloseHandle (hObject=0x18c) returned 1 [0138.873] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12576000*, nNumberOfCharsToWrite=0x63, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x12576000*, lpNumberOfCharsWritten=0x124296cc*=0x63) returned 1 [0138.873] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/d1HG5E.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\d1hg5e.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x797f4f10, ftCreationTime.dwHighDateTime=0x1d4d29a, ftLastAccessTime.dwLowDateTime=0x255bf1e0, ftLastAccessTime.dwHighDateTime=0x1d4cf6b, ftLastWriteTime.dwLowDateTime=0x255bf1e0, ftLastWriteTime.dwHighDateTime=0x1d4cf6b, nFileSizeHigh=0x0, nFileSizeLow=0x18e60)) returned 1 [0138.873] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/d1HG5E.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\d1hg5e.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.873] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.874] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.874] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.874] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc051 | out: pbBuffer=0x124bc051) returned 1 [0138.875] SwitchToThread () returned 1 [0138.875] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.879] SetEvent (hEvent=0xa0) returned 1 [0138.879] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.880] SetEvent (hEvent=0xa0) returned 1 [0138.881] SwitchToThread () returned 1 [0138.883] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.896] SetEvent (hEvent=0xa0) returned 1 [0138.896] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.897] SetEvent (hEvent=0xa0) returned 1 [0138.897] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0138.900] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.900] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.900] SetEvent (hEvent=0xac) returned 1 [0138.900] SetEvent (hEvent=0xa0) returned 1 [0138.900] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x1b97, lpOverlapped=0x0) returned 1 [0138.901] GetFileType (hFile=0x19c) returned 0x1 [0138.901] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0138.901] WriteFile (in: hFile=0x19c, lpBuffer=0x124d8000*, nNumberOfBytesToWrite=0x1b97, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x124d8000*, lpNumberOfBytesWritten=0x12429950*=0x1b97, lpOverlapped=0x1242995c) returned 1 [0138.901] GetFileType (hFile=0x19c) returned 0x1 [0138.901] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x1b97, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0138.901] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0138.901] CloseHandle (hObject=0x19c) returned 1 [0138.901] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/7XlCpsx.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\7xlcpsx.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.901] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0138.902] WriteFile (in: hFile=0x19c, lpBuffer=0x124c2240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x124c2240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0138.902] CloseHandle (hObject=0x19c) returned 1 [0138.902] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x6a, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x12429624*=0x6a) returned 1 [0138.902] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/KTctO3sRuhGMM Orm.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\ktcto3sruhgmm orm.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e4b3be0, ftCreationTime.dwHighDateTime=0x1d4d568, ftLastAccessTime.dwLowDateTime=0xd00b980, ftLastAccessTime.dwHighDateTime=0x1d4d28d, ftLastWriteTime.dwLowDateTime=0xd00b980, ftLastWriteTime.dwHighDateTime=0x1d4d28d, nFileSizeHigh=0x0, nFileSizeLow=0xacf9)) returned 1 [0138.903] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/Xo1_aI-9.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\xo1_ai-9.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87e5f70, ftCreationTime.dwHighDateTime=0x1d4cbcc, ftLastAccessTime.dwLowDateTime=0x1f8da3a0, ftLastAccessTime.dwHighDateTime=0x1d4d42d, ftLastWriteTime.dwLowDateTime=0x1f8da3a0, ftLastWriteTime.dwHighDateTime=0x1d4d42d, nFileSizeHigh=0x0, nFileSizeLow=0xc736)) returned 1 [0138.903] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/ae5Z0r-mfCz KH.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\ae5z0r-mfcz kh.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cb9a140, ftCreationTime.dwHighDateTime=0x1d4d4b7, ftLastAccessTime.dwLowDateTime=0x4c69f500, ftLastAccessTime.dwHighDateTime=0x1d4c676, ftLastWriteTime.dwLowDateTime=0x4c69f500, ftLastWriteTime.dwHighDateTime=0x1d4c676, nFileSizeHigh=0x0, nFileSizeLow=0x1770)) returned 1 [0138.903] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/ae5Z0r-mfCz KH.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\ae5z0r-mfcz kh.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.903] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0138.903] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.904] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.904] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c8007 | out: pbBuffer=0x124c8007) returned 1 [0138.904] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c8009 | out: pbBuffer=0x124c8009) returned 1 [0138.906] SwitchToThread () returned 1 [0138.906] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.908] SetEvent (hEvent=0xb8) returned 1 [0138.908] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.911] SetEvent (hEvent=0xb8) returned 1 [0138.911] SwitchToThread () returned 1 [0138.911] SetEvent (hEvent=0xb8) returned 1 [0138.911] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.913] SetEvent (hEvent=0xa0) returned 1 [0138.913] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.914] SetEvent (hEvent=0xa0) returned 1 [0138.914] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.916] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0138.916] SetEvent (hEvent=0xa0) returned 1 [0138.916] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x16df8, lpOverlapped=0x0) returned 1 [0138.917] GetFileType (hFile=0x19c) returned 0x1 [0138.917] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0138.918] WriteFile (in: hFile=0x19c, lpBuffer=0x12596000*, nNumberOfBytesToWrite=0x16df8, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x12596000*, lpNumberOfBytesWritten=0x12429950*=0x16df8, lpOverlapped=0x1242995c) returned 1 [0138.918] GetFileType (hFile=0x19c) returned 0x1 [0138.918] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x16df8, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0138.918] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0138.918] CloseHandle (hObject=0x19c) returned 1 [0138.918] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/s0xsAdksC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\s0xsadksc.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.918] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0138.919] WriteFile (in: hFile=0x19c, lpBuffer=0x124c26c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x124c26c0*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0138.919] CloseHandle (hObject=0x19c) returned 1 [0138.919] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b8000*, nNumberOfCharsToWrite=0x6c, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124b8000*, lpNumberOfCharsWritten=0x12429624*=0x6c) returned 1 [0138.919] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/wp zn.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\wp zn.wav"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15357be0, ftCreationTime.dwHighDateTime=0x1d4d4db, ftLastAccessTime.dwLowDateTime=0xc79a66f0, ftLastAccessTime.dwHighDateTime=0x1d4cf82, ftLastWriteTime.dwLowDateTime=0xc79a66f0, ftLastWriteTime.dwHighDateTime=0x1d4cf82, nFileSizeHigh=0x0, nFileSizeLow=0xfde3)) returned 1 [0138.919] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/wp zn.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\wp zn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.919] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0138.920] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.921] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.921] SwitchToThread () returned 1 [0138.922] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.930] SetEvent (hEvent=0xb8) returned 1 [0138.930] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.933] SetEvent (hEvent=0xb8) returned 1 [0138.933] SwitchToThread () returned 1 [0138.934] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.960] SetEvent (hEvent=0xb8) returned 1 [0138.960] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0138.961] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0138.961] SetEvent (hEvent=0xb8) returned 1 [0138.961] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0139.022] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.022] SwitchToThread () returned 1 [0139.022] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0139.022] SetEvent (hEvent=0xb8) returned 1 [0139.022] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x1342d, lpOverlapped=0x0) returned 1 [0139.024] GetFileType (hFile=0xe4) returned 0x1 [0139.024] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.024] WriteFile (in: hFile=0xe4, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x1342d, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429b48*=0x1342d, lpOverlapped=0x12429b54) returned 1 [0139.024] GetFileType (hFile=0xe4) returned 0x1 [0139.024] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x1342d, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.024] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0139.024] CloseHandle (hObject=0xe4) returned 1 [0139.025] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/40tXee.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\40txee.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.025] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.025] WriteFile (in: hFile=0xe4, lpBuffer=0x124d4240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x124d4240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0139.025] CloseHandle (hObject=0xe4) returned 1 [0139.025] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12660140*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x12660140*, lpNumberOfCharsWritten=0x1242981c*=0x4f) returned 1 [0139.026] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/HwY sLofzoj9C.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hwy slofzoj9c.bmp"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765ca450, ftCreationTime.dwHighDateTime=0x1d4d0c3, ftLastAccessTime.dwLowDateTime=0xcda617f0, ftLastAccessTime.dwHighDateTime=0x1d4ced4, ftLastWriteTime.dwLowDateTime=0xcda617f0, ftLastWriteTime.dwHighDateTime=0x1d4ced4, nFileSizeHigh=0x0, nFileSizeLow=0x93ce)) returned 1 [0139.026] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/J3cl8fSofuZEp2v.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\j3cl8fsofuzep2v.bmp"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfe778e0, ftCreationTime.dwHighDateTime=0x1d4d341, ftLastAccessTime.dwLowDateTime=0xc64d9100, ftLastAccessTime.dwHighDateTime=0x1d4cdd4, ftLastWriteTime.dwLowDateTime=0xc64d9100, ftLastWriteTime.dwHighDateTime=0x1d4cdd4, nFileSizeHigh=0x0, nFileSizeLow=0xf957)) returned 1 [0139.026] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/UGhSJo.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ughsjo.png"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x693d6500, ftCreationTime.dwHighDateTime=0x1d4d59d, ftLastAccessTime.dwLowDateTime=0x4153c310, ftLastAccessTime.dwHighDateTime=0x1d4c795, ftLastWriteTime.dwLowDateTime=0x4153c310, ftLastWriteTime.dwHighDateTime=0x1d4c795, nFileSizeHigh=0x0, nFileSizeLow=0x5d8c)) returned 1 [0139.026] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/UGhSJo.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ughsjo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.026] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.027] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0139.028] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d2002 | out: pbBuffer=0x124d2002) returned 1 [0139.028] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d2038 | out: pbBuffer=0x124d2038) returned 1 [0139.028] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d2064 | out: pbBuffer=0x124d2064) returned 1 [0139.028] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d20dc | out: pbBuffer=0x124d20dc) returned 1 [0139.029] SwitchToThread () returned 1 [0139.029] SetEvent (hEvent=0xb8) returned 1 [0139.029] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.193] SetEvent (hEvent=0x7c) returned 1 [0139.194] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0139.283] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.283] SetEvent (hEvent=0x7c) returned 1 [0139.284] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0139.285] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.285] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.321] SetEvent (hEvent=0x7c) returned 1 [0139.321] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.334] SetEvent (hEvent=0x7c) returned 1 [0139.335] SwitchToThread () returned 1 [0139.336] SetEvent (hEvent=0x7c) returned 1 [0139.336] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.348] SetEvent (hEvent=0xb8) returned 1 [0139.348] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0139.351] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.351] SetEvent (hEvent=0xb8) returned 1 [0139.351] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0139.354] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.354] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0139.355] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.355] SetEvent (hEvent=0xac) returned 1 [0139.355] SetEvent (hEvent=0xb8) returned 1 [0139.355] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x4ce8, lpOverlapped=0x0) returned 1 [0139.356] GetFileType (hFile=0xe4) returned 0x1 [0139.356] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.356] WriteFile (in: hFile=0xe4, lpBuffer=0x1257c000*, nNumberOfBytesToWrite=0x4ce8, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1257c000*, lpNumberOfBytesWritten=0x12429b48*=0x4ce8, lpOverlapped=0x12429b54) returned 1 [0139.356] GetFileType (hFile=0xe4) returned 0x1 [0139.356] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x4ce8, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.356] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0139.356] CloseHandle (hObject=0xe4) returned 1 [0139.356] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/fMU3F.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fmu3f.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.356] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.366] WriteFile (in: hFile=0xe4, lpBuffer=0x127c06c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127c06c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0139.367] CloseHandle (hObject=0xe4) returned 1 [0139.367] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12660140*, nNumberOfCharsToWrite=0x4e, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x12660140*, lpNumberOfCharsWritten=0x1242981c*=0x4e) returned 1 [0139.393] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/k H-An6yQBLh8gyVNG.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\k h-an6yqblh8gyvng.bmp"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc032c40, ftCreationTime.dwHighDateTime=0x1d4c9eb, ftLastAccessTime.dwLowDateTime=0x75727fb0, ftLastAccessTime.dwHighDateTime=0x1d4ce84, ftLastWriteTime.dwLowDateTime=0x75727fb0, ftLastWriteTime.dwHighDateTime=0x1d4ce84, nFileSizeHigh=0x0, nFileSizeLow=0xd7a7)) returned 1 [0139.393] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/mibGrCxeLlA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mibgrcxella.png"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74c314b0, ftCreationTime.dwHighDateTime=0x1d4c814, ftLastAccessTime.dwLowDateTime=0xe62f44d0, ftLastAccessTime.dwHighDateTime=0x1d4d41b, ftLastWriteTime.dwLowDateTime=0xe62f44d0, ftLastWriteTime.dwHighDateTime=0x1d4d41b, nFileSizeHigh=0x0, nFileSizeLow=0x10686)) returned 1 [0139.393] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/mibGrCxeLlA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mibgrcxella.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.394] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.398] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.399] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0139.399] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0139.399] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc067 | out: pbBuffer=0x124bc067) returned 1 [0139.399] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc090 | out: pbBuffer=0x124bc090) returned 1 [0139.400] SwitchToThread () returned 1 [0139.435] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.447] SetEvent (hEvent=0x7c) returned 1 [0139.447] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.451] SetEvent (hEvent=0x7c) returned 1 [0139.451] SwitchToThread () returned 1 [0139.452] SetEvent (hEvent=0x7c) returned 1 [0139.452] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.461] SetEvent (hEvent=0xb8) returned 1 [0139.461] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0139.462] SetEvent (hEvent=0xb8) returned 1 [0139.463] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0139.465] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0139.466] SetEvent (hEvent=0xac) returned 1 [0139.466] SetEvent (hEvent=0xb8) returned 1 [0139.466] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x1335e, lpOverlapped=0x0) returned 1 [0139.467] GetFileType (hFile=0xe4) returned 0x1 [0139.467] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.467] WriteFile (in: hFile=0xe4, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x1335e, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429b48*=0x1335e, lpOverlapped=0x12429b54) returned 1 [0139.468] GetFileType (hFile=0xe4) returned 0x1 [0139.468] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x1335e, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.468] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0139.468] CloseHandle (hObject=0xe4) returned 1 [0139.468] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/urPhq_-EMN_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\urphq_-emn_.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.468] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.471] WriteFile (in: hFile=0xe4, lpBuffer=0x127c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127c0240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0139.471] CloseHandle (hObject=0xe4) returned 1 [0139.471] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x54, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x54) returned 1 [0139.471] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/yulmPafaL.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\yulmpafal.png"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd7d94d0, ftCreationTime.dwHighDateTime=0x1d4d418, ftLastAccessTime.dwLowDateTime=0x96862630, ftLastAccessTime.dwHighDateTime=0x1d4c8ca, ftLastWriteTime.dwLowDateTime=0x96862630, ftLastWriteTime.dwHighDateTime=0x1d4c8ca, nFileSizeHigh=0x0, nFileSizeLow=0x343c)) returned 1 [0139.471] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/yulmPafaL.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\yulmpafal.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.472] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.472] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.473] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0139.473] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0139.473] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc095 | out: pbBuffer=0x124bc095) returned 1 [0139.473] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc0c9 | out: pbBuffer=0x124bc0c9) returned 1 [0139.474] SwitchToThread () returned 1 [0139.474] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.477] SetEvent (hEvent=0x7c) returned 1 [0139.477] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.482] SetEvent (hEvent=0x7c) returned 1 [0139.482] SwitchToThread () returned 1 [0139.485] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.642] SetEvent (hEvent=0x7c) returned 1 [0139.642] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0139.643] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.644] SetEvent (hEvent=0x7c) returned 1 [0139.644] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0139.719] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.719] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0139.720] SetEvent (hEvent=0xac) returned 1 [0139.720] SetEvent (hEvent=0xb8) returned 1 [0139.720] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xc0ef, lpOverlapped=0x0) returned 1 [0139.721] GetFileType (hFile=0x190) returned 0x1 [0139.722] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.722] WriteFile (in: hFile=0x190, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xc0ef, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429aa0*=0xc0ef, lpOverlapped=0x12429aac) returned 1 [0139.722] GetFileType (hFile=0x190) returned 0x1 [0139.722] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xc0ef, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.722] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0139.722] CloseHandle (hObject=0x190) returned 1 [0139.722] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/6 aGnHE.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\6 agnhe.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.722] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.725] WriteFile (in: hFile=0x190, lpBuffer=0x124c2240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c2240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0139.725] CloseHandle (hObject=0x190) returned 1 [0139.725] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x56, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x12429774*=0x56) returned 1 [0139.726] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/8q8b.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\8q8b.gif"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d04ce0, ftCreationTime.dwHighDateTime=0x1d4d18f, ftLastAccessTime.dwLowDateTime=0x407de3e0, ftLastAccessTime.dwHighDateTime=0x1d4c8f2, ftLastWriteTime.dwLowDateTime=0x407de3e0, ftLastWriteTime.dwHighDateTime=0x1d4c8f2, nFileSizeHigh=0x0, nFileSizeLow=0xdce4)) returned 1 [0139.726] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/8q8b.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\8q8b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.726] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.727] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.728] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0139.728] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d8002 | out: pbBuffer=0x124d8002) returned 1 [0139.729] SwitchToThread () returned 1 [0139.729] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.733] SetEvent (hEvent=0x7c) returned 1 [0139.733] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.737] SetEvent (hEvent=0x7c) returned 1 [0139.737] SwitchToThread () returned 1 [0139.738] SetEvent (hEvent=0x7c) returned 1 [0139.738] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.740] SetEvent (hEvent=0xb8) returned 1 [0139.740] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0139.742] SetEvent (hEvent=0xb8) returned 1 [0139.742] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0139.744] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0139.745] SetEvent (hEvent=0xb8) returned 1 [0139.745] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x16f0d, lpOverlapped=0x0) returned 1 [0139.746] GetFileType (hFile=0x190) returned 0x1 [0139.746] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.746] WriteFile (in: hFile=0x190, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x16f0d, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x16f0d, lpOverlapped=0x12429aac) returned 1 [0139.746] GetFileType (hFile=0x190) returned 0x1 [0139.746] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x16f0d, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.746] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0139.746] CloseHandle (hObject=0x190) returned 1 [0139.747] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/VuhibnqUI8oH.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\vuhibnqui8oh.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.747] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.747] WriteFile (in: hFile=0x190, lpBuffer=0x124c26c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c26c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0139.747] CloseHandle (hObject=0x190) returned 1 [0139.747] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12772000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x12772000*, lpNumberOfCharsWritten=0x12429774*=0x5b) returned 1 [0139.748] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/WCCTBi.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\wcctbi.png"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd92ad440, ftCreationTime.dwHighDateTime=0x1d4d536, ftLastAccessTime.dwLowDateTime=0xe2ea41c0, ftLastAccessTime.dwHighDateTime=0x1d4d093, ftLastWriteTime.dwLowDateTime=0xe2ea41c0, ftLastWriteTime.dwHighDateTime=0x1d4d093, nFileSizeHigh=0x0, nFileSizeLow=0xa0f3)) returned 1 [0139.748] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/WCCTBi.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\wcctbi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.748] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.748] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.749] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0139.749] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d8002 | out: pbBuffer=0x124d8002) returned 1 [0139.749] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d8098 | out: pbBuffer=0x124d8098) returned 1 [0139.749] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d80b7 | out: pbBuffer=0x124d80b7) returned 1 [0139.750] SwitchToThread () returned 1 [0139.753] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.758] SetEvent (hEvent=0x7c) returned 1 [0139.758] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.761] SetEvent (hEvent=0x7c) returned 1 [0139.761] SwitchToThread () returned 1 [0139.762] SetEvent (hEvent=0x7c) returned 1 [0139.762] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.764] SetEvent (hEvent=0xb8) returned 1 [0139.764] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0139.769] SetEvent (hEvent=0xb8) returned 1 [0139.769] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0139.771] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0139.772] SetEvent (hEvent=0xac) returned 1 [0139.772] SetEvent (hEvent=0xb8) returned 1 [0139.772] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x93fb, lpOverlapped=0x0) returned 1 [0139.772] GetFileType (hFile=0x190) returned 0x1 [0139.772] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.773] WriteFile (in: hFile=0x190, lpBuffer=0x1257c000*, nNumberOfBytesToWrite=0x93fb, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1257c000*, lpNumberOfBytesWritten=0x12429aa0*=0x93fb, lpOverlapped=0x12429aac) returned 1 [0139.773] GetFileType (hFile=0x190) returned 0x1 [0139.773] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x93fb, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.773] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0139.773] CloseHandle (hObject=0x190) returned 1 [0139.773] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/wFgc-JfDcGBq3h6f.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\wfgc-jfdcgbq3h6f.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.773] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.774] WriteFile (in: hFile=0x190, lpBuffer=0x124c2240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c2240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0139.774] CloseHandle (hObject=0x190) returned 1 [0139.774] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1249c0c0*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1249c0c0*, lpNumberOfCharsWritten=0x12429774*=0x5f) returned 1 [0139.774] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.774] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.775] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.775] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.775] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0139.775] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.775] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0139.775] CloseHandle (hObject=0x190) returned 1 [0139.775] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.775] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.775] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.775] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.776] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0139.776] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.776] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0139.776] CloseHandle (hObject=0x190) returned 1 [0139.776] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.776] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.776] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.777] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0139.790] WriteFile (in: hFile=0x190, lpBuffer=0x124d1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d1300*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0139.790] CloseHandle (hObject=0x190) returned 1 [0139.791] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\@_read_to_recover_files_@.txt")) returned 0x20 [0139.791] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0139.791] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.791] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccecd470, ftCreationTime.dwHighDateTime=0x1d4c59c, ftLastAccessTime.dwLowDateTime=0x4b58090, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4b58090, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0139.791] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccecd470, ftCreationTime.dwHighDateTime=0x1d4c59c, ftLastAccessTime.dwLowDateTime=0x4b58090, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4b58090, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.791] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3b91e0, ftCreationTime.dwHighDateTime=0x1d4cf56, ftLastAccessTime.dwLowDateTime=0x1b262740, ftLastAccessTime.dwHighDateTime=0x1d4d3df, ftLastWriteTime.dwLowDateTime=0x1b262740, ftLastWriteTime.dwHighDateTime=0x1d4d3df, nFileSizeHigh=0x0, nFileSizeLow=0x1244b, dwReserved0=0x0, dwReserved1=0x0, cFileName="9vKVXXneC8.jpg", cAlternateFileName="9VKVXX~1.JPG")) returned 1 [0139.791] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x4b58090, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x4b58090, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4b85720, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0139.791] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c1ab950, ftCreationTime.dwHighDateTime=0x1d4d454, ftLastAccessTime.dwLowDateTime=0x35cb9a50, ftLastAccessTime.dwHighDateTime=0x1d4d3c9, ftLastWriteTime.dwLowDateTime=0x35cb9a50, ftLastWriteTime.dwHighDateTime=0x1d4d3c9, nFileSizeHigh=0x0, nFileSizeLow=0xccd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GnW-yHtqkgwLpT.png", cAlternateFileName="GNW-YH~1.PNG")) returned 1 [0139.791] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc112960, ftCreationTime.dwHighDateTime=0x1d4d1c9, ftLastAccessTime.dwLowDateTime=0x7f6a8830, ftLastAccessTime.dwHighDateTime=0x1d4cea9, ftLastWriteTime.dwLowDateTime=0x7f6a8830, ftLastWriteTime.dwHighDateTime=0x1d4cea9, nFileSizeHigh=0x0, nFileSizeLow=0xc6ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="qhHhyMHY2sNRiVr.jpg", cAlternateFileName="QHHHYM~1.JPG")) returned 1 [0139.791] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc009db30, ftCreationTime.dwHighDateTime=0x1d4c84f, ftLastAccessTime.dwLowDateTime=0x206736b0, ftLastAccessTime.dwHighDateTime=0x1d4cdca, ftLastWriteTime.dwLowDateTime=0x206736b0, ftLastWriteTime.dwHighDateTime=0x1d4cdca, nFileSizeHigh=0x0, nFileSizeLow=0x36bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="t10YqxFIamR42xrgFb.bmp", cAlternateFileName="T10YQX~1.BMP")) returned 1 [0139.791] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c3bb0, ftCreationTime.dwHighDateTime=0x1d4cd81, ftLastAccessTime.dwLowDateTime=0x427eb380, ftLastAccessTime.dwHighDateTime=0x1d4ceb1, ftLastWriteTime.dwLowDateTime=0x427eb380, ftLastWriteTime.dwHighDateTime=0x1d4ceb1, nFileSizeHigh=0x0, nFileSizeLow=0x85f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TFYkEMF.gif", cAlternateFileName="")) returned 1 [0139.791] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5295710, ftCreationTime.dwHighDateTime=0x1d4ce5c, ftLastAccessTime.dwLowDateTime=0xbedd0760, ftLastAccessTime.dwHighDateTime=0x1d4c975, ftLastWriteTime.dwLowDateTime=0xbedd0760, ftLastWriteTime.dwHighDateTime=0x1d4c975, nFileSizeHigh=0x0, nFileSizeLow=0x4fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwMp7p4meHlML3mVIk_V.bmp", cAlternateFileName="WWMP7P~1.BMP")) returned 1 [0139.791] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.791] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0139.791] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/9vKVXXneC8.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\9vkvxxnec8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.792] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.792] ReadFile (in: hFile=0x190, lpBuffer=0x12800000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12800000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.793] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.793] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.793] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/GnW-yHtqkgwLpT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\gnw-yhtqkgwlpt.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.794] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.794] ReadFile (in: hFile=0xe4, lpBuffer=0x12800100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12800100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.795] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/TFYkEMF.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\tfykemf.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0139.795] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.795] ReadFile (in: hFile=0x19c, lpBuffer=0x12800200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12800200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.796] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/WwMp7p4meHlML3mVIk_V.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\wwmp7p4mehlml3mvik_v.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0139.796] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.796] ReadFile (in: hFile=0x18c, lpBuffer=0x12800300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12800300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.797] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/qhHhyMHY2sNRiVr.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\qhhhymhy2snrivr.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0139.797] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.800] ReadFile (in: hFile=0x10c, lpBuffer=0x12800400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12800400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.801] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/t10YqxFIamR42xrgFb.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\t10yqxfiamr42xrgfb.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0139.801] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.801] ReadFile (in: hFile=0xc0, lpBuffer=0x12800500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12800500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.802] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/9vKVXXneC8.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\9vkvxxnec8.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3b91e0, ftCreationTime.dwHighDateTime=0x1d4cf56, ftLastAccessTime.dwLowDateTime=0x1b262740, ftLastAccessTime.dwHighDateTime=0x1d4d3df, ftLastWriteTime.dwLowDateTime=0x1b262740, ftLastWriteTime.dwHighDateTime=0x1d4d3df, nFileSizeHigh=0x0, nFileSizeLow=0x1244b)) returned 1 [0139.802] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/9vKVXXneC8.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\9vkvxxnec8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0139.802] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.803] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e280 | out: pbBuffer=0x1249e280) returned 1 [0139.803] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12800602 | out: pbBuffer=0x12800602) returned 1 [0139.804] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12800660 | out: pbBuffer=0x12800660) returned 1 [0139.805] SetEvent (hEvent=0x7c) returned 1 [0139.805] ReadFile (in: hFile=0x110, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x1244b, lpOverlapped=0x0) returned 1 [0139.806] GetFileType (hFile=0x110) returned 0x1 [0139.806] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.806] WriteFile (in: hFile=0x110, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x1244b, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429aa0*=0x1244b, lpOverlapped=0x12429aac) returned 1 [0139.806] GetFileType (hFile=0x110) returned 0x1 [0139.806] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x1244b, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.806] ReadFile (in: hFile=0x110, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0139.806] CloseHandle (hObject=0x110) returned 1 [0139.807] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/9vKVXXneC8.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\9vkvxxnec8.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0139.807] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.807] WriteFile (in: hFile=0x110, lpBuffer=0x124c2fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c2fc0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0139.807] CloseHandle (hObject=0x110) returned 1 [0139.807] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c410*, nNumberOfCharsToWrite=0x66, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1248c410*, lpNumberOfCharsWritten=0x12429774*=0x66) returned 1 [0139.809] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/GnW-yHtqkgwLpT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\gnw-yhtqkgwlpt.png"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c1ab950, ftCreationTime.dwHighDateTime=0x1d4d454, ftLastAccessTime.dwLowDateTime=0x35cb9a50, ftLastAccessTime.dwHighDateTime=0x1d4d3c9, ftLastWriteTime.dwLowDateTime=0x35cb9a50, ftLastWriteTime.dwHighDateTime=0x1d4d3c9, nFileSizeHigh=0x0, nFileSizeLow=0xccd7)) returned 1 [0139.809] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/GnW-yHtqkgwLpT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\gnw-yhtqkgwlpt.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0139.809] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.810] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.811] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0139.811] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc0b1 | out: pbBuffer=0x124bc0b1) returned 1 [0139.888] SetEvent (hEvent=0x7c) returned 1 [0139.888] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.891] SetEvent (hEvent=0xb8) returned 1 [0139.891] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0139.892] SetEvent (hEvent=0xb8) returned 1 [0139.892] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0139.895] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0139.895] SetEvent (hEvent=0xb8) returned 1 [0139.895] ReadFile (in: hFile=0x110, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x85f4, lpOverlapped=0x0) returned 1 [0139.896] GetFileType (hFile=0x110) returned 0x1 [0139.896] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.896] WriteFile (in: hFile=0x110, lpBuffer=0x1257c000*, nNumberOfBytesToWrite=0x85f4, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1257c000*, lpNumberOfBytesWritten=0x12429aa0*=0x85f4, lpOverlapped=0x12429aac) returned 1 [0139.896] GetFileType (hFile=0x110) returned 0x1 [0139.896] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x85f4, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.896] ReadFile (in: hFile=0x110, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0139.896] CloseHandle (hObject=0x110) returned 1 [0139.896] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/TFYkEMF.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\tfykemf.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0139.896] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.897] WriteFile (in: hFile=0x110, lpBuffer=0x125766c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x125766c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0139.897] CloseHandle (hObject=0x110) returned 1 [0139.897] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0x63, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x12429774*=0x63) returned 1 [0139.897] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/WwMp7p4meHlML3mVIk_V.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\wwmp7p4mehlml3mvik_v.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5295710, ftCreationTime.dwHighDateTime=0x1d4ce5c, ftLastAccessTime.dwLowDateTime=0xbedd0760, ftLastAccessTime.dwHighDateTime=0x1d4c975, ftLastWriteTime.dwLowDateTime=0xbedd0760, ftLastWriteTime.dwHighDateTime=0x1d4c975, nFileSizeHigh=0x0, nFileSizeLow=0x4fed)) returned 1 [0139.898] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/qhHhyMHY2sNRiVr.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\qhhhymhy2snrivr.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc112960, ftCreationTime.dwHighDateTime=0x1d4d1c9, ftLastAccessTime.dwLowDateTime=0x7f6a8830, ftLastAccessTime.dwHighDateTime=0x1d4cea9, ftLastWriteTime.dwLowDateTime=0x7f6a8830, ftLastWriteTime.dwHighDateTime=0x1d4cea9, nFileSizeHigh=0x0, nFileSizeLow=0xc6ea)) returned 1 [0139.898] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/qhHhyMHY2sNRiVr.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\qhhhymhy2snrivr.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0139.898] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.898] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.899] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0139.899] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc07f | out: pbBuffer=0x124bc07f) returned 1 [0139.899] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc0af | out: pbBuffer=0x124bc0af) returned 1 [0139.899] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc0be | out: pbBuffer=0x124bc0be) returned 1 [0139.900] SwitchToThread () returned 1 [0139.901] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.906] SetEvent (hEvent=0x7c) returned 1 [0139.906] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.909] SetEvent (hEvent=0x7c) returned 1 [0139.909] SwitchToThread () returned 1 [0139.913] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0139.999] SetEvent (hEvent=0x7c) returned 1 [0139.999] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0140.000] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.001] SetEvent (hEvent=0x7c) returned 1 [0140.001] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0140.004] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.004] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.005] SetEvent (hEvent=0xac) returned 1 [0140.005] SetEvent (hEvent=0x7c) returned 1 [0140.005] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x54df, lpOverlapped=0x0) returned 1 [0140.006] GetFileType (hFile=0x16c) returned 0x1 [0140.006] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.006] WriteFile (in: hFile=0x16c, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x54df, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x12429b48*=0x54df, lpOverlapped=0x12429b54) returned 1 [0140.006] GetFileType (hFile=0x16c) returned 0x1 [0140.006] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x54df, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.006] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0140.006] CloseHandle (hObject=0x16c) returned 1 [0140.006] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/6CjUOLDApXa.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6cjuoldapxa.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.006] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.007] WriteFile (in: hFile=0x16c, lpBuffer=0x127de240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127de240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0140.007] CloseHandle (hObject=0x16c) returned 1 [0140.007] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x52, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x52) returned 1 [0140.009] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/7xrWY8rDXfCu8ZDXU.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\7xrwy8rdxfcu8zdxu.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903a5b90, ftCreationTime.dwHighDateTime=0x1d4d313, ftLastAccessTime.dwLowDateTime=0x745d5ee0, ftLastAccessTime.dwHighDateTime=0x1d4cdc3, ftLastWriteTime.dwLowDateTime=0x745d5ee0, ftLastWriteTime.dwHighDateTime=0x1d4cdc3, nFileSizeHigh=0x0, nFileSizeLow=0x1fa4)) returned 1 [0140.010] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/Cr_uW2FbmlFG.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\cr_uw2fbmlfg.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3308b10, ftCreationTime.dwHighDateTime=0x1d4cf5e, ftLastAccessTime.dwLowDateTime=0x78850b20, ftLastAccessTime.dwHighDateTime=0x1d4d34b, ftLastWriteTime.dwLowDateTime=0x78850b20, ftLastWriteTime.dwHighDateTime=0x1d4d34b, nFileSizeHigh=0x0, nFileSizeLow=0x14580)) returned 1 [0140.010] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/DLVoZuGo8Sd-W-.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dlvozugo8sd-w-.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5f2b780, ftCreationTime.dwHighDateTime=0x1d4d24d, ftLastAccessTime.dwLowDateTime=0x5a4526c0, ftLastAccessTime.dwHighDateTime=0x1d4d523, ftLastWriteTime.dwLowDateTime=0x5a4526c0, ftLastWriteTime.dwHighDateTime=0x1d4d523, nFileSizeHigh=0x0, nFileSizeLow=0x76dd)) returned 1 [0140.010] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/DLVoZuGo8Sd-W-.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dlvozugo8sd-w-.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.010] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.010] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.011] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0140.011] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0140.011] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc01e | out: pbBuffer=0x124bc01e) returned 1 [0140.011] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc030 | out: pbBuffer=0x124bc030) returned 1 [0140.011] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc0c1 | out: pbBuffer=0x124bc0c1) returned 1 [0140.011] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc0d9 | out: pbBuffer=0x124bc0d9) returned 1 [0140.012] SwitchToThread () returned 1 [0140.013] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.018] SetEvent (hEvent=0xb8) returned 1 [0140.018] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.021] SetEvent (hEvent=0xb8) returned 1 [0140.021] SwitchToThread () returned 1 [0140.021] SetEvent (hEvent=0xb8) returned 1 [0140.021] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.023] SetEvent (hEvent=0x7c) returned 1 [0140.024] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.025] SetEvent (hEvent=0x7c) returned 1 [0140.025] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.027] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.028] SetEvent (hEvent=0x7c) returned 1 [0140.028] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0xdf21, lpOverlapped=0x0) returned 1 [0140.028] GetFileType (hFile=0x16c) returned 0x1 [0140.029] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.029] WriteFile (in: hFile=0x16c, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xdf21, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429b48*=0xdf21, lpOverlapped=0x12429b54) returned 1 [0140.029] GetFileType (hFile=0x16c) returned 0x1 [0140.029] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0xdf21, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.029] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0140.029] CloseHandle (hObject=0x16c) returned 1 [0140.029] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/ETFeWTM9b2pQVD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\etfewtm9b2pqvd.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.029] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.030] WriteFile (in: hFile=0x16c, lpBuffer=0x127de6c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127de6c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0140.030] CloseHandle (hObject=0x16c) returned 1 [0140.030] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c0b0*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c0b0*, lpNumberOfCharsWritten=0x1242981c*=0x55) returned 1 [0140.030] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/H7-2hc06c0.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\h7-2hc06c0.avi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac0bd80, ftCreationTime.dwHighDateTime=0x1d4c559, ftLastAccessTime.dwLowDateTime=0x8816a400, ftLastAccessTime.dwHighDateTime=0x1d4d124, ftLastWriteTime.dwLowDateTime=0x8816a400, ftLastWriteTime.dwHighDateTime=0x1d4d124, nFileSizeHigh=0x0, nFileSizeLow=0x12e51)) returned 1 [0140.030] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/H7-2hc06c0.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\h7-2hc06c0.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.031] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.031] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.032] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0140.032] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0140.033] SwitchToThread () returned 1 [0140.033] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.037] SetEvent (hEvent=0xb8) returned 1 [0140.037] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.084] SetEvent (hEvent=0xb8) returned 1 [0140.084] SwitchToThread () returned 1 [0140.135] SetEvent (hEvent=0xb8) returned 1 [0140.135] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.189] SetEvent (hEvent=0x7c) returned 1 [0140.189] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0140.253] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.253] SetEvent (hEvent=0x7c) returned 1 [0140.253] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0140.258] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.258] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0140.264] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.264] SetEvent (hEvent=0xac) returned 1 [0140.264] SetEvent (hEvent=0x7c) returned 1 [0140.264] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x75e7, lpOverlapped=0x0) returned 1 [0140.266] GetFileType (hFile=0x16c) returned 0x1 [0140.266] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.266] WriteFile (in: hFile=0x16c, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x75e7, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429b48*=0x75e7, lpOverlapped=0x12429b54) returned 1 [0140.266] GetFileType (hFile=0x16c) returned 0x1 [0140.266] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x75e7, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.266] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0140.266] CloseHandle (hObject=0x16c) returned 1 [0140.266] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/PJDLlb.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\pjdllb.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.267] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.274] WriteFile (in: hFile=0x16c, lpBuffer=0x127de240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127de240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0140.275] CloseHandle (hObject=0x16c) returned 1 [0140.275] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127e0000*, nNumberOfCharsToWrite=0x4d, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x127e0000*, lpNumberOfCharsWritten=0x1242981c*=0x4d) returned 1 [0140.279] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/T_Sn_RAxoI96.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\t_sn_raxoi96.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21ad0c0, ftCreationTime.dwHighDateTime=0x1d4d499, ftLastAccessTime.dwLowDateTime=0x9d9e26d0, ftLastAccessTime.dwHighDateTime=0x1d4cced, ftLastWriteTime.dwLowDateTime=0x9d9e26d0, ftLastWriteTime.dwHighDateTime=0x1d4cced, nFileSizeHigh=0x0, nFileSizeLow=0x167f)) returned 1 [0140.279] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/X7l3GG.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x7l3gg.flv"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0cc5e0, ftCreationTime.dwHighDateTime=0x1d4c7ef, ftLastAccessTime.dwLowDateTime=0x389da700, ftLastAccessTime.dwHighDateTime=0x1d4d482, ftLastWriteTime.dwLowDateTime=0x389da700, ftLastWriteTime.dwHighDateTime=0x1d4d482, nFileSizeHigh=0x0, nFileSizeLow=0x2e33)) returned 1 [0140.279] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/X7l3GG.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x7l3gg.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.279] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.281] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.282] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0140.282] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c800a | out: pbBuffer=0x124c800a) returned 1 [0140.283] SwitchToThread () returned 1 [0140.284] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.287] SetEvent (hEvent=0xb8) returned 1 [0140.287] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.292] SetEvent (hEvent=0xb8) returned 1 [0140.292] SwitchToThread () returned 1 [0140.293] SetEvent (hEvent=0xb8) returned 1 [0140.293] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.296] SetEvent (hEvent=0x7c) returned 1 [0140.296] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.298] SetEvent (hEvent=0x7c) returned 1 [0140.298] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.302] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.303] SetEvent (hEvent=0x7c) returned 1 [0140.303] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0xea34, lpOverlapped=0x0) returned 1 [0140.304] GetFileType (hFile=0x16c) returned 0x1 [0140.304] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.305] WriteFile (in: hFile=0x16c, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0xea34, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x12429b48*=0xea34, lpOverlapped=0x12429b54) returned 1 [0140.305] GetFileType (hFile=0x16c) returned 0x1 [0140.305] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0xea34, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.305] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0140.305] CloseHandle (hObject=0x16c) returned 1 [0140.305] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/_nnCnNW6M6TkNy.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_nncnnw6m6tkny.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.305] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.306] WriteFile (in: hFile=0x16c, lpBuffer=0x127de6c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127de6c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0140.306] CloseHandle (hObject=0x16c) returned 1 [0140.306] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x55) returned 1 [0140.308] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0140.308] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/kWeM6qRi4e2e_ns.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kwem6qri4e2e_ns.avi"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e892a90, ftCreationTime.dwHighDateTime=0x1d4ca2a, ftLastAccessTime.dwLowDateTime=0x96d457a0, ftLastAccessTime.dwHighDateTime=0x1d4d3ca, ftLastWriteTime.dwLowDateTime=0x96d457a0, ftLastWriteTime.dwHighDateTime=0x1d4d3ca, nFileSizeHigh=0x0, nFileSizeLow=0x16e34)) returned 1 [0140.308] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/kWeM6qRi4e2e_ns.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kwem6qri4e2e_ns.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.308] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.314] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.315] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0140.315] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc094 | out: pbBuffer=0x124bc094) returned 1 [0140.316] SwitchToThread () returned 1 [0140.317] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.337] SetEvent (hEvent=0xb8) returned 1 [0140.337] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.342] SetEvent (hEvent=0xb8) returned 1 [0140.342] SwitchToThread () returned 1 [0140.343] SetEvent (hEvent=0xb8) returned 1 [0140.343] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.350] SetEvent (hEvent=0x7c) returned 1 [0140.350] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.354] SetEvent (hEvent=0x7c) returned 1 [0140.354] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.364] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.393] SetEvent (hEvent=0x7c) returned 1 [0140.393] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.393] SetEvent (hEvent=0x7c) returned 1 [0140.393] SwitchToThread () returned 1 [0140.397] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.400] SetEvent (hEvent=0xb8) returned 1 [0140.400] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.402] SetEvent (hEvent=0xb8) returned 1 [0140.402] SwitchToThread () returned 1 [0140.403] SetEvent (hEvent=0xb8) returned 1 [0140.403] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.404] SetEvent (hEvent=0x7c) returned 1 [0140.404] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.405] SetEvent (hEvent=0x7c) returned 1 [0140.405] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.407] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.407] SetEvent (hEvent=0x7c) returned 1 [0140.407] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x8490, lpOverlapped=0x0) returned 1 [0140.408] GetFileType (hFile=0x10c) returned 0x1 [0140.408] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.408] WriteFile (in: hFile=0x10c, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x8490, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x12429aa0*=0x8490, lpOverlapped=0x12429aac) returned 1 [0140.408] GetFileType (hFile=0x10c) returned 0x1 [0140.408] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x8490, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.408] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0140.409] CloseHandle (hObject=0x10c) returned 1 [0140.409] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/Q1T6.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\q1t6.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.409] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.409] WriteFile (in: hFile=0x10c, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0140.409] CloseHandle (hObject=0x10c) returned 1 [0140.409] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x12429774*=0x5d) returned 1 [0140.410] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/T13I_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\t13i_.mkv"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c718410, ftCreationTime.dwHighDateTime=0x1d4d4aa, ftLastAccessTime.dwLowDateTime=0x3098b730, ftLastAccessTime.dwHighDateTime=0x1d4ca31, ftLastWriteTime.dwLowDateTime=0x3098b730, ftLastWriteTime.dwHighDateTime=0x1d4ca31, nFileSizeHigh=0x0, nFileSizeLow=0xdc0)) returned 1 [0140.410] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/VK_iXNbuWHUlI5Q.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\vk_ixnbuwhuli5q.mp4"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27f64be0, ftCreationTime.dwHighDateTime=0x1d4d389, ftLastAccessTime.dwLowDateTime=0x52f3fd10, ftLastAccessTime.dwHighDateTime=0x1d4c6e1, ftLastWriteTime.dwLowDateTime=0x52f3fd10, ftLastWriteTime.dwHighDateTime=0x1d4c6e1, nFileSizeHigh=0x0, nFileSizeLow=0xb3d)) returned 1 [0140.410] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/VK_iXNbuWHUlI5Q.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\vk_ixnbuwhuli5q.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.410] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.410] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.411] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0140.412] SwitchToThread () returned 1 [0140.412] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.414] SetEvent (hEvent=0xb8) returned 1 [0140.414] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.416] SetEvent (hEvent=0xb8) returned 1 [0140.416] SwitchToThread () returned 1 [0140.416] SetEvent (hEvent=0xb8) returned 1 [0140.416] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.418] SetEvent (hEvent=0x7c) returned 1 [0140.418] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.419] SetEvent (hEvent=0x7c) returned 1 [0140.419] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.421] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.421] SetEvent (hEvent=0x7c) returned 1 [0140.421] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x1374f, lpOverlapped=0x0) returned 1 [0140.422] GetFileType (hFile=0x10c) returned 0x1 [0140.422] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.422] WriteFile (in: hFile=0x10c, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x1374f, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429aa0*=0x1374f, lpOverlapped=0x12429aac) returned 1 [0140.423] GetFileType (hFile=0x10c) returned 0x1 [0140.423] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x1374f, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.423] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0140.423] CloseHandle (hObject=0x10c) returned 1 [0140.423] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/aK8rBrJLO.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\ak8rbrjlo.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.423] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.423] WriteFile (in: hFile=0x10c, lpBuffer=0x127c86c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c86c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0140.423] CloseHandle (hObject=0x10c) returned 1 [0140.423] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x12429774*=0x62) returned 1 [0140.424] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/ag3hlJ.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\ag3hlj.avi"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60f4da40, ftCreationTime.dwHighDateTime=0x1d4c71f, ftLastAccessTime.dwLowDateTime=0x91c6e2e0, ftLastAccessTime.dwHighDateTime=0x1d4d2ae, ftLastWriteTime.dwLowDateTime=0x91c6e2e0, ftLastWriteTime.dwHighDateTime=0x1d4d2ae, nFileSizeHigh=0x0, nFileSizeLow=0x6a19)) returned 1 [0140.424] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/ag3hlJ.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\ag3hlj.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.424] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.424] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.425] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0140.425] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc009 | out: pbBuffer=0x124bc009) returned 1 [0140.426] SwitchToThread () returned 1 [0140.426] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.428] SetEvent (hEvent=0xb8) returned 1 [0140.428] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.430] SetEvent (hEvent=0xb8) returned 1 [0140.430] SwitchToThread () returned 1 [0140.431] SetEvent (hEvent=0xb8) returned 1 [0140.431] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.433] SetEvent (hEvent=0x7c) returned 1 [0140.434] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.434] SetEvent (hEvent=0x7c) returned 1 [0140.434] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.436] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.437] SetEvent (hEvent=0x7c) returned 1 [0140.437] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xcd20, lpOverlapped=0x0) returned 1 [0140.437] GetFileType (hFile=0x10c) returned 0x1 [0140.438] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.438] WriteFile (in: hFile=0x10c, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xcd20, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429aa0*=0xcd20, lpOverlapped=0x12429aac) returned 1 [0140.438] GetFileType (hFile=0x10c) returned 0x1 [0140.438] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xcd20, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.438] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0140.438] CloseHandle (hObject=0x10c) returned 1 [0140.438] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/d_ZyRMwpSBe4XnxJ2I.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\d_zyrmwpsbe4xnxj2i.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.438] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.438] WriteFile (in: hFile=0x10c, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0140.439] CloseHandle (hObject=0x10c) returned 1 [0140.439] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x6b, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x12429774*=0x6b) returned 1 [0140.439] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/eyVqagYKT64lOZ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\eyvqagykt64loz.swf"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9faf3e90, ftCreationTime.dwHighDateTime=0x1d4d045, ftLastAccessTime.dwLowDateTime=0x6c529d00, ftLastAccessTime.dwHighDateTime=0x1d4c9a4, ftLastWriteTime.dwLowDateTime=0x6c529d00, ftLastWriteTime.dwHighDateTime=0x1d4c9a4, nFileSizeHigh=0x0, nFileSizeLow=0xfcab)) returned 1 [0140.439] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/eyVqagYKT64lOZ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\eyvqagykt64loz.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.439] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.440] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.440] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0140.440] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc033 | out: pbBuffer=0x124bc033) returned 1 [0140.440] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc04e | out: pbBuffer=0x124bc04e) returned 1 [0140.440] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc060 | out: pbBuffer=0x124bc060) returned 1 [0140.441] SwitchToThread () returned 1 [0140.441] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.444] SetEvent (hEvent=0xb8) returned 1 [0140.444] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.446] SetEvent (hEvent=0xb8) returned 1 [0140.446] SwitchToThread () returned 1 [0140.446] SetEvent (hEvent=0xb8) returned 1 [0140.446] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.449] SetEvent (hEvent=0x7c) returned 1 [0140.449] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.450] SetEvent (hEvent=0x7c) returned 1 [0140.450] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.452] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.452] SetEvent (hEvent=0x7c) returned 1 [0140.452] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x134f9, lpOverlapped=0x0) returned 1 [0140.454] GetFileType (hFile=0x10c) returned 0x1 [0140.454] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.454] WriteFile (in: hFile=0x10c, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x134f9, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429aa0*=0x134f9, lpOverlapped=0x12429aac) returned 1 [0140.454] GetFileType (hFile=0x10c) returned 0x1 [0140.454] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x134f9, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.454] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0140.454] CloseHandle (hObject=0x10c) returned 1 [0140.457] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/uO0tkKL5G0GoIA31CoY2.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\uo0tkkl5g0goia31coy2.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.458] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.458] WriteFile (in: hFile=0x10c, lpBuffer=0x127c86c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c86c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0140.458] CloseHandle (hObject=0x10c) returned 1 [0140.458] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b60e0*, nNumberOfCharsToWrite=0x6d, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124b60e0*, lpNumberOfCharsWritten=0x12429774*=0x6d) returned 1 [0140.458] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/v2BJb.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\v2bjb.mp4"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142b92f0, ftCreationTime.dwHighDateTime=0x1d4ca88, ftLastAccessTime.dwLowDateTime=0x751c5fe0, ftLastAccessTime.dwHighDateTime=0x1d4cec5, ftLastWriteTime.dwLowDateTime=0x751c5fe0, ftLastWriteTime.dwHighDateTime=0x1d4cec5, nFileSizeHigh=0x0, nFileSizeLow=0x59bb)) returned 1 [0140.458] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/v2BJb.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\v2bjb.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.459] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.459] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.460] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0140.460] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0140.461] SwitchToThread () returned 1 [0140.461] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.463] SetEvent (hEvent=0xb8) returned 1 [0140.463] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.466] SetEvent (hEvent=0xb8) returned 1 [0140.466] SwitchToThread () returned 1 [0140.467] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.799] SetEvent (hEvent=0xb8) returned 1 [0140.800] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.824] SetEvent (hEvent=0xb8) returned 1 [0140.824] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0140.856] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.856] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0140.857] SetEvent (hEvent=0xac) returned 1 [0140.857] SetEvent (hEvent=0xb8) returned 1 [0140.880] GetFileType (hFile=0x124) returned 0x1 [0140.880] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0140.880] WriteFile (in: hFile=0x124, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x400000, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x124299f8*=0x400000, lpOverlapped=0x12429a04) returned 1 [0140.921] GetFileType (hFile=0x124) returned 0x1 [0140.921] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x400000, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0140.921] ReadFile (in: hFile=0x124, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0140.922] CloseHandle (hObject=0x124) returned 1 [0140.922] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Network/Downloader/qmgr0.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0140.922] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0140.923] WriteFile (in: hFile=0x124, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0140.931] CloseHandle (hObject=0x124) returned 1 [0140.931] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x124296cc*=0x57) returned 1 [0140.932] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/Network/Downloader/qmgr1.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000)) returned 1 [0140.932] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Network/Downloader/qmgr1.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0140.932] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0140.932] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0140.933] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a002 | out: pbBuffer=0x1244a002) returned 1 [0140.933] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a08a | out: pbBuffer=0x1244a08a) returned 1 [0140.934] SwitchToThread () returned 1 [0140.934] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0140.974] SetEvent (hEvent=0x7c) returned 1 [0140.974] SetEvent (hEvent=0xa0) returned 1 [0140.974] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0141.626] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0141.648] SetEvent (hEvent=0xa0) returned 1 [0141.648] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0141.649] SetEvent (hEvent=0xa0) returned 1 [0141.649] SetEvent (hEvent=0x7c) returned 1 [0141.649] CloseHandle (hObject=0xbc) returned 1 [0141.650] SwitchToThread () returned 1 [0141.650] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0141.784] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0141.911] SetEvent (hEvent=0x7c) returned 1 [0141.912] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0141.916] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0141.916] SetEvent (hEvent=0x7c) returned 1 [0141.916] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0141.917] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0141.917] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0141.946] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0142.418] SetEvent (hEvent=0xa0) returned 1 [0142.418] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0142.419] SetEvent (hEvent=0xa0) returned 1 [0142.419] SetEvent (hEvent=0x7c) returned 1 [0142.419] CloseHandle (hObject=0x16c) returned 1 [0142.419] SwitchToThread () returned 1 [0142.422] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0142.528] SetEvent (hEvent=0x7c) returned 1 [0142.529] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0142.536] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0142.536] SetEvent (hEvent=0xb8) returned 1 [0142.536] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0142.537] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0142.538] SetEvent (hEvent=0xb8) returned 1 [0142.543] GetFileType (hFile=0x158) returned 0x1 [0142.543] SetFilePointerEx (in: hFile=0x158, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0142.543] WriteFile (in: hFile=0x158, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0xf36be, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429950*=0xf36be, lpOverlapped=0x1242995c) returned 1 [0142.546] GetFileType (hFile=0x158) returned 0x1 [0142.546] SetFilePointerEx (in: hFile=0x158, liDistanceToMove=0xf36be, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0142.546] ReadFile (in: hFile=0x158, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0142.546] CloseHandle (hObject=0x158) returned 1 [0142.546] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0142.547] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0142.547] WriteFile (in: hFile=0x158, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0142.547] CloseHandle (hObject=0x158) returned 1 [0142.547] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x97, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x12429624*=0x97) returned 1 [0142.548] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86/vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1 [0142.548] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.548] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.548] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.548] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.548] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.548] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0142.549] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0142.549] CloseHandle (hObject=0x158) returned 1 [0142.549] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.549] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.549] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0142.551] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0142.551] WriteFile (in: hFile=0x158, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0142.552] CloseHandle (hObject=0x158) returned 1 [0142.553] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.553] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.553] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.553] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x6513700, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6513700, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.553] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x6513700, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6513700, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.553] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6510ff0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6510ff0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6518520, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.553] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0142.553] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0142.553] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.553] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.553] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.554] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.554] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}/state.rsm" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0142.562] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0142.562] ReadFile (in: hFile=0x158, lpBuffer=0x1256e100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1256e100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0142.563] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}/vcredist_x86.exe" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.563] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0142.563] ReadFile (in: hFile=0x178, lpBuffer=0x1256e200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1256e200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0142.566] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}/state.rsm" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e)) returned 1 [0142.566] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}/vcredist_x86.exe" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428)) returned 1 [0142.567] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.567] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.567] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.567] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.567] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.567] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.567] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0142.567] CloseHandle (hObject=0xe8) returned 1 [0142.567] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.568] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.568] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.568] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0142.568] WriteFile (in: hFile=0xe8, lpBuffer=0x12490000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12490000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0142.569] CloseHandle (hObject=0xe8) returned 1 [0142.570] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.570] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.570] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.570] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x652e4b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x652e4b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.570] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x652e4b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x652e4b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.570] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x652e4b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x652e4b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x65332d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.570] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0142.570] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.570] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.570] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.570] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.570] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.571] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.571] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.571] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.571] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.571] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.571] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.571] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.571] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.572] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0142.572] CloseHandle (hObject=0xe8) returned 1 [0142.572] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.572] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.572] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.572] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0142.573] WriteFile (in: hFile=0xe8, lpBuffer=0x12492600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12492600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0142.574] CloseHandle (hObject=0xe8) returned 1 [0142.574] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.574] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.574] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.574] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x65380f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x65380f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.574] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x65380f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x65380f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.574] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x65380f0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x65380f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x653cf10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.574] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0142.574] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.574] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.574] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.574] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.575] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.575] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.575] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.575] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.575] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.575] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.575] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.575] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.576] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.576] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0142.576] CloseHandle (hObject=0xe8) returned 1 [0142.576] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.576] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.576] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.578] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0142.578] WriteFile (in: hFile=0xe8, lpBuffer=0x12494c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12494c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0142.579] CloseHandle (hObject=0xe8) returned 1 [0142.579] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.579] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.579] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.579] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x6546b50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6546b50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.580] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x6546b50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6546b50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.580] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6541d30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6541d30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6549260, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.580] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0142.580] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0142.580] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.580] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.580] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.580] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.580] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.580] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0142.581] ReadFile (in: hFile=0xe8, lpBuffer=0x1256eb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1256eb00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0142.583] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64/vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0142.585] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0142.586] ReadFile (in: hFile=0xf8, lpBuffer=0x1256ec00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1256ec00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0142.588] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124)) returned 1 [0142.588] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030/packages/vcRuntimeAdditional_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0142.588] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0142.588] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442800 | out: pbBuffer=0x12442800) returned 1 [0142.590] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e21e4 | out: pbBuffer=0x124e21e4) returned 1 [0142.590] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1256ef02 | out: pbBuffer=0x1256ef02) returned 1 [0142.591] SetEvent (hEvent=0x7c) returned 1 [0142.591] ReadFile (in: hFile=0x164, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x588124, lpOverlapped=0x0) returned 1 [0142.730] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0142.732] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0142.836] SetEvent (hEvent=0xb8) returned 1 [0142.836] SetEvent (hEvent=0xa0) returned 1 [0142.836] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0142.839] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0142.986] SetEvent (hEvent=0xa0) returned 1 [0142.986] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0142.987] SetEvent (hEvent=0xa0) returned 1 [0142.988] SetEvent (hEvent=0xb8) returned 1 [0142.988] CloseHandle (hObject=0xe8) returned 1 [0142.988] CloseHandle (hObject=0x178) returned 1 [0142.988] CloseHandle (hObject=0x158) returned 1 [0142.988] CloseHandle (hObject=0x164) returned 1 [0142.988] SwitchToThread () returned 1 [0142.989] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.026] SetEvent (hEvent=0xb8) returned 1 [0143.026] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0143.052] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.052] SetEvent (hEvent=0xb8) returned 1 [0143.052] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0143.123] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.123] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0143.124] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.124] SetEvent (hEvent=0xb8) returned 1 [0143.153] GetFileType (hFile=0x178) returned 0x1 [0143.153] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0143.154] WriteFile (in: hFile=0x178, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x4f699e, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429950*=0x4f699e, lpOverlapped=0x1242995c) returned 1 [0143.208] GetFileType (hFile=0x178) returned 0x1 [0143.208] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x4f699e, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0143.208] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0143.209] CloseHandle (hObject=0x178) returned 1 [0143.209] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.209] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.209] WriteFile (in: hFile=0x178, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0143.210] CloseHandle (hObject=0x178) returned 1 [0143.210] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x9b, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x12429624*=0x9b) returned 1 [0143.212] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86/vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1 [0143.212] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.212] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.212] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.212] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.212] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.212] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.212] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0143.213] CloseHandle (hObject=0x178) returned 1 [0143.213] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.213] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.213] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.214] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0143.215] WriteFile (in: hFile=0x178, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0143.216] CloseHandle (hObject=0x178) returned 1 [0143.217] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.217] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.217] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.217] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x6b363d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6b363d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.217] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x6b363d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6b363d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.217] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6b363d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6b363d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6b3d900, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.217] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.217] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.217] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.217] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.217] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.218] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.218] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.218] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.218] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.218] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.218] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.218] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.218] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.218] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.219] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0143.219] CloseHandle (hObject=0x178) returned 1 [0143.219] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.219] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.219] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.220] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0143.220] WriteFile (in: hFile=0x178, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0143.221] CloseHandle (hObject=0x178) returned 1 [0143.221] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.221] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.221] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.222] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x6b44e30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6b44e30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.222] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x6b44e30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6b44e30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.222] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6b44e30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6b44e30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6b49c50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.222] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0143.222] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.222] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.222] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.222] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.222] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.222] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.222] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.222] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.223] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.223] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.223] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.223] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.223] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.223] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0143.224] CloseHandle (hObject=0x178) returned 1 [0143.224] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.224] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.224] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.226] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0143.227] WriteFile (in: hFile=0x178, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0143.228] CloseHandle (hObject=0x178) returned 1 [0143.228] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.228] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.228] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.228] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x6b55fa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6b55fa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.228] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x6b55fa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6b55fa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.228] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6b51180, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6b51180, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6b586b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.228] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x165257, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0143.228] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0143.228] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.228] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.228] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.229] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.229] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.229] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.229] ReadFile (in: hFile=0x178, lpBuffer=0x1256e900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1256e900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.232] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64/vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.233] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.233] ReadFile (in: hFile=0x164, lpBuffer=0x1256ea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1256ea00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.235] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x165257)) returned 1 [0143.235] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017/packages/vcRuntimeMinimum_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.235] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.236] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124426e0 | out: pbBuffer=0x124426e0) returned 1 [0143.237] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2184 | out: pbBuffer=0x124e2184) returned 1 [0143.237] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1256ed02 | out: pbBuffer=0x1256ed02) returned 1 [0143.239] SetEvent (hEvent=0x7c) returned 1 [0143.239] ReadFile (in: hFile=0x158, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x165257, lpOverlapped=0x0) returned 1 [0143.267] CloseHandle (hObject=0x164) returned 1 [0143.267] CloseHandle (hObject=0x178) returned 1 [0143.267] SwitchToThread () returned 1 [0143.268] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.284] SetEvent (hEvent=0xb8) returned 1 [0143.284] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.286] SetEvent (hEvent=0xb8) returned 1 [0143.286] SwitchToThread () returned 1 [0143.290] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.376] SetEvent (hEvent=0xb8) returned 1 [0143.376] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0143.424] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.424] SetEvent (hEvent=0xb8) returned 1 [0143.424] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0143.426] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0143.426] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.426] SetEvent (hEvent=0xac) returned 1 [0143.426] SetEvent (hEvent=0xb8) returned 1 [0143.457] GetFileType (hFile=0x164) returned 0x1 [0143.457] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0143.457] WriteFile (in: hFile=0x164, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x554520, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429950*=0x554520, lpOverlapped=0x1242995c) returned 1 [0143.523] GetFileType (hFile=0x164) returned 0x1 [0143.523] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x554520, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0143.523] ReadFile (in: hFile=0x164, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0143.523] CloseHandle (hObject=0x164) returned 1 [0143.523] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.523] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.524] WriteFile (in: hFile=0x164, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0143.524] CloseHandle (hObject=0x164) returned 1 [0143.524] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x9c, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x12429624*=0x9c) returned 1 [0143.524] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64/vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1 [0143.524] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.524] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.525] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.525] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.525] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.525] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.525] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0143.525] CloseHandle (hObject=0x164) returned 1 [0143.525] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.525] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.525] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.526] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0143.527] WriteFile (in: hFile=0x164, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0143.528] CloseHandle (hObject=0x164) returned 1 [0143.528] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.528] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.528] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.528] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6e1e610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6e1e610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.528] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6e1e610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6e1e610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.528] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6e1e610, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6e1e610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6e1e610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.528] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.528] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.528] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.528] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.529] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.529] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.529] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.529] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.529] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.529] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.529] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.529] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.529] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.529] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.530] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0143.530] CloseHandle (hObject=0x164) returned 1 [0143.530] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.530] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.530] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.530] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0143.531] WriteFile (in: hFile=0x164, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0143.532] CloseHandle (hObject=0x164) returned 1 [0143.532] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.532] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.532] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.532] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6e1e610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6e1e610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.532] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6e1e610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6e1e610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.532] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6e1e610, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6e1e610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6e1e610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.532] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0143.532] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.532] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.532] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.533] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.533] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.533] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.533] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.533] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.533] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.533] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.533] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.533] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.533] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.533] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0143.534] CloseHandle (hObject=0x164) returned 1 [0143.534] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.534] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.534] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.536] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0143.536] WriteFile (in: hFile=0x164, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0143.537] CloseHandle (hObject=0x164) returned 1 [0143.537] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.537] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.538] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.538] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6e1e610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6e1e610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.538] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6e1e610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6e1e610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.538] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6e1e610, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6e1e610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6e44770, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.538] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b69ee00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7b69ee00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7b69ee00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0143.538] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0143.538] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.538] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.538] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.538] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.538] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.538] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.539] ReadFile (in: hFile=0x164, lpBuffer=0x1256e900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1256e900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.541] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64/vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.541] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.541] ReadFile (in: hFile=0x158, lpBuffer=0x1256ea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1256ea00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.544] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b69ee00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7b69ee00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7b69ee00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a)) returned 1 [0143.544] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.544] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.545] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e4c0 | out: pbBuffer=0x1249e4c0) returned 1 [0143.546] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2184 | out: pbBuffer=0x124e2184) returned 1 [0143.546] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1256ee02 | out: pbBuffer=0x1256ee02) returned 1 [0143.547] SetEvent (hEvent=0x7c) returned 1 [0143.547] ReadFile (in: hFile=0x178, lpBuffer=0x13ab6000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x13ab6000*, lpNumberOfBytesRead=0x1242996c*=0xfc90a, lpOverlapped=0x0) returned 1 [0143.574] GetFileType (hFile=0x178) returned 0x1 [0143.574] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0143.574] WriteFile (in: hFile=0x178, lpBuffer=0x142b6000*, nNumberOfBytesToWrite=0xfc90a, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x142b6000*, lpNumberOfBytesWritten=0x12429950*=0xfc90a, lpOverlapped=0x1242995c) returned 1 [0143.577] GetFileType (hFile=0x178) returned 0x1 [0143.577] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xfc90a, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0143.577] ReadFile (in: hFile=0x178, lpBuffer=0x13ab6000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x13ab6000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0143.577] CloseHandle (hObject=0x178) returned 1 [0143.577] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.577] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.577] WriteFile (in: hFile=0x178, lpBuffer=0x1255c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1255c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0143.578] CloseHandle (hObject=0x178) returned 1 [0143.578] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c000*, nNumberOfCharsToWrite=0x99, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfCharsWritten=0x12429624*=0x99) returned 1 [0143.578] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64/vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1 [0143.578] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.579] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.579] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.579] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.579] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.579] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.579] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0143.580] CloseHandle (hObject=0x164) returned 1 [0143.580] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.580] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.580] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.580] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0143.581] WriteFile (in: hFile=0x164, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0143.582] CloseHandle (hObject=0x164) returned 1 [0143.582] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.582] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.582] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.582] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x6e9dd20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6e9dd20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.582] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x6e9dd20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6e9dd20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.582] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6e9dd20, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6e9dd20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6ea0430, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.582] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.582] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.582] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.582] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.583] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.583] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.583] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.584] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.584] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.584] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.584] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.584] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.584] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.584] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.584] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0143.584] CloseHandle (hObject=0x164) returned 1 [0143.585] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.585] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.585] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.585] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0143.586] WriteFile (in: hFile=0x164, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0143.587] CloseHandle (hObject=0x164) returned 1 [0143.587] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.587] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.587] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.587] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x6eaa070, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6eaa070, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.587] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x6eaa070, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6eaa070, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.587] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6eaa070, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6eaa070, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6eaee90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.587] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0143.587] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.587] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.588] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.588] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.588] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.588] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.589] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.589] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.589] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.589] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.589] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.589] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.589] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.589] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0143.589] CloseHandle (hObject=0x164) returned 1 [0143.589] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.590] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.590] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.591] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0143.592] WriteFile (in: hFile=0x164, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0143.593] CloseHandle (hObject=0x164) returned 1 [0143.593] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.593] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.593] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.593] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x6eb8ad0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6eb8ad0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.593] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x6eb8ad0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6eb8ad0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.593] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6eb63c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6eb63c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6ebd8f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.593] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aae6600, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x8aae6600, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x8aae6600, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0143.593] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0143.593] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.593] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.593] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.594] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.594] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.594] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.594] ReadFile (in: hFile=0x164, lpBuffer=0x1255e900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255e900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.597] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86/vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.598] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.598] ReadFile (in: hFile=0x158, lpBuffer=0x1255ea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255ea00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.601] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aae6600, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x8aae6600, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x8aae6600, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418)) returned 1 [0143.601] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.601] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.604] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e500 | out: pbBuffer=0x1249e500) returned 1 [0143.605] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1255ed02 | out: pbBuffer=0x1255ed02) returned 1 [0143.606] SetEvent (hEvent=0xb8) returned 1 [0143.606] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x4ea418, lpOverlapped=0x0) returned 1 [0143.711] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.713] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.812] SetEvent (hEvent=0xa0) returned 1 [0143.812] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.814] SetEvent (hEvent=0xa0) returned 1 [0143.814] SwitchToThread () returned 1 [0143.817] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.835] SetEvent (hEvent=0xa0) returned 1 [0143.836] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0143.837] SetEvent (hEvent=0xa0) returned 1 [0143.837] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0143.841] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.841] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0143.841] SetEvent (hEvent=0xac) returned 1 [0143.841] SetEvent (hEvent=0xa0) returned 1 [0143.846] GetFileType (hFile=0x158) returned 0x1 [0143.846] SetFilePointerEx (in: hFile=0x158, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0143.846] WriteFile (in: hFile=0x158, lpBuffer=0x12662000*, nNumberOfBytesToWrite=0xc89b1, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x12662000*, lpNumberOfBytesWritten=0x12429950*=0xc89b1, lpOverlapped=0x1242995c) returned 1 [0143.848] GetFileType (hFile=0x158) returned 0x1 [0143.848] SetFilePointerEx (in: hFile=0x158, liDistanceToMove=0xc89b1, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0143.848] ReadFile (in: hFile=0x158, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0143.848] CloseHandle (hObject=0x158) returned 1 [0143.848] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.849] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.849] WriteFile (in: hFile=0x158, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0143.849] CloseHandle (hObject=0x158) returned 1 [0143.849] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x97, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x12429624*=0x97) returned 1 [0143.850] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86/vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0143.850] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.850] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.850] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.850] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.850] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.850] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.851] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0143.851] CloseHandle (hObject=0x158) returned 1 [0143.851] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.851] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.851] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.852] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0143.852] WriteFile (in: hFile=0x158, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0143.853] CloseHandle (hObject=0x158) returned 1 [0143.853] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.853] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.853] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.853] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x7118190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7118190, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.853] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x7118190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7118190, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.853] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x7118190, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7118190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7118190, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.853] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.853] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.853] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.854] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.854] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.854] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.854] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.854] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.854] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.854] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.854] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.854] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.854] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.854] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.855] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0143.855] CloseHandle (hObject=0x158) returned 1 [0143.855] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.855] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.855] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.856] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0143.856] WriteFile (in: hFile=0x158, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0143.857] CloseHandle (hObject=0x158) returned 1 [0143.857] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.857] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.857] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.857] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x7118190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7118190, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.857] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x7118190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7118190, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.857] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x7118190, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7118190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7118190, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.857] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0143.857] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.857] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.858] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.858] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.858] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.858] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.858] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.858] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.858] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.858] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.859] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.859] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.859] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.859] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0143.859] CloseHandle (hObject=0x158) returned 1 [0143.859] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.859] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.859] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.861] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0143.862] WriteFile (in: hFile=0x158, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0143.863] CloseHandle (hObject=0x158) returned 1 [0143.863] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.863] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.863] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.863] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x713e2f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x713e2f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.863] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x713e2f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x713e2f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.863] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x713e2f0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x713e2f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x713e2f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.863] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x969a2800, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x969a2800, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x969a2800, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0143.863] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0143.864] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.864] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.864] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.864] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.864] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.864] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.864] ReadFile (in: hFile=0x158, lpBuffer=0x1255e900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255e900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.866] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64/vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.867] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.867] ReadFile (in: hFile=0x178, lpBuffer=0x1255ea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255ea00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.869] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x969a2800, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x969a2800, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x969a2800, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25)) returned 1 [0143.870] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.870] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.870] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e4e0 | out: pbBuffer=0x1249e4e0) returned 1 [0143.871] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2174 | out: pbBuffer=0x124e2174) returned 1 [0143.871] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1255ed02 | out: pbBuffer=0x1255ed02) returned 1 [0143.871] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1255ed0a | out: pbBuffer=0x1255ed0a) returned 1 [0143.872] SetEvent (hEvent=0xb8) returned 1 [0143.872] ReadFile (in: hFile=0x164, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0xc5b25, lpOverlapped=0x0) returned 1 [0143.884] CloseHandle (hObject=0x178) returned 1 [0143.884] CloseHandle (hObject=0x158) returned 1 [0143.884] SwitchToThread () returned 1 [0143.885] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.893] SetEvent (hEvent=0xa0) returned 1 [0143.893] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.895] SetEvent (hEvent=0xa0) returned 1 [0143.896] SwitchToThread () returned 1 [0143.899] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0143.972] SetEvent (hEvent=0xa0) returned 1 [0143.973] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0143.997] SetEvent (hEvent=0xa0) returned 1 [0143.997] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0144.055] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0144.055] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0144.055] SetEvent (hEvent=0xac) returned 1 [0144.055] SetEvent (hEvent=0xa0) returned 1 [0144.056] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0144.056] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0144.056] SetEvent (hEvent=0xa0) returned 1 [0144.056] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0144.057] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0144.058] SetEvent (hEvent=0xac) returned 1 [0144.058] SetEvent (hEvent=0xa0) returned 1 [0144.090] GetFileType (hFile=0x178) returned 0x1 [0144.090] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0144.090] WriteFile (in: hFile=0x178, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x59bde5, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429950*=0x59bde5, lpOverlapped=0x1242995c) returned 1 [0144.358] GetFileType (hFile=0x178) returned 0x1 [0144.358] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x59bde5, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0144.358] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0144.358] CloseHandle (hObject=0x178) returned 1 [0144.359] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0144.359] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0144.447] WriteFile (in: hFile=0x178, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0144.447] CloseHandle (hObject=0x178) returned 1 [0144.447] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x9d, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x12429624*=0x9d) returned 1 [0144.524] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64/vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1 [0144.524] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0144.524] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0144.524] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0144.525] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0144.525] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0144.525] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0144.525] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0144.613] CloseHandle (hObject=0x178) returned 1 [0144.616] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0144.648] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0144.649] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0144.649] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0144.881] WriteFile (in: hFile=0x178, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0144.882] CloseHandle (hObject=0x178) returned 1 [0144.882] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\@_read_to_recover_files_@.txt")) returned 0x20 [0144.883] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0144.883] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0144.883] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x7897880, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7897880, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0144.883] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x7897880, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7897880, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.883] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x7897880, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7897880, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7ac1bb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0144.883] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0144.883] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.883] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0144.883] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0144.884] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0144.884] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0144.884] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0144.884] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0144.884] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0144.884] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0144.884] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0144.884] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0144.884] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0144.884] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0144.885] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0144.958] CloseHandle (hObject=0x178) returned 1 [0144.959] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0144.965] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0144.968] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0144.978] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0145.047] WriteFile (in: hFile=0x178, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0145.048] CloseHandle (hObject=0x178) returned 1 [0145.049] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\@_read_to_recover_files_@.txt")) returned 0x20 [0145.049] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0145.049] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.049] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x7b96220, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7b96220, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.049] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x7b96220, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7b96220, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.049] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x7b93b10, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7b93b10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7c4fae0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.049] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0145.049] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.049] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.049] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.050] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.050] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.050] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.050] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.050] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.050] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.050] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.050] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.050] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.051] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0145.051] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0145.051] CloseHandle (hObject=0x178) returned 1 [0145.051] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.052] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.052] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0145.057] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0145.057] WriteFile (in: hFile=0x178, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0145.058] CloseHandle (hObject=0x178) returned 1 [0145.058] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt")) returned 0x20 [0145.058] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0145.058] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.058] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x7c63360, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7c63360, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x7c63360, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7c63360, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x7c59720, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7c59720, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7c68180, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532ebf00, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x532ebf00, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x532ebf00, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0145.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0145.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.058] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.059] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.059] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.059] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0145.059] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.059] ReadFile (in: hFile=0x178, lpBuffer=0x1255e900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255e900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.061] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86/vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.061] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.062] ReadFile (in: hFile=0x164, lpBuffer=0x1255ea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255ea00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.065] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532ebf00, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x532ebf00, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x532ebf00, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520)) returned 1 [0145.065] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005/packages/vcRuntimeAdditional_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0145.065] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0145.066] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e4e0 | out: pbBuffer=0x1249e4e0) returned 1 [0145.066] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2184 | out: pbBuffer=0x124e2184) returned 1 [0145.066] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1255ed02 | out: pbBuffer=0x1255ed02) returned 1 [0145.068] SetEvent (hEvent=0xb8) returned 1 [0145.068] ReadFile (in: hFile=0x158, lpBuffer=0x135a6000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x135a6000*, lpNumberOfBytesRead=0x1242996c*=0x4b4520, lpOverlapped=0x0) returned 1 [0145.169] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.277] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.403] SetEvent (hEvent=0xb8) returned 1 [0145.404] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0145.405] SetEvent (hEvent=0xb8) returned 1 [0145.405] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0145.418] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.418] CloseHandle (hObject=0xbc) returned 1 [0145.418] CloseHandle (hObject=0x1b0) returned 1 [0145.418] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.556] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.598] SetEvent (hEvent=0xb8) returned 1 [0145.598] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.599] SetEvent (hEvent=0xb8) returned 1 [0145.599] SetEvent (hEvent=0xa0) returned 1 [0145.599] CloseHandle (hObject=0x130) returned 1 [0145.599] CloseHandle (hObject=0x160) returned 1 [0145.599] CloseHandle (hObject=0xbc) returned 1 [0145.599] CloseHandle (hObject=0xf8) returned 1 [0145.599] CloseHandle (hObject=0xe8) returned 1 [0145.599] SwitchToThread () returned 1 [0145.684] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.687] SetEvent (hEvent=0x7c) returned 1 [0145.687] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.689] SetEvent (hEvent=0x7c) returned 1 [0145.689] SwitchToThread () returned 1 [0145.692] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.795] SetEvent (hEvent=0x7c) returned 1 [0145.795] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0145.797] SetEvent (hEvent=0x7c) returned 1 [0145.797] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0145.800] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.800] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0145.801] SetEvent (hEvent=0xac) returned 1 [0145.801] SetEvent (hEvent=0x7c) returned 1 [0145.801] ReadFile (in: hFile=0x138, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x200000, lpOverlapped=0x0) returned 1 [0145.833] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.834] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.871] SetEvent (hEvent=0xa0) returned 1 [0145.871] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.872] SetEvent (hEvent=0xa0) returned 1 [0145.872] SwitchToThread () returned 1 [0145.874] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.888] SetEvent (hEvent=0x7c) returned 1 [0145.888] SetEvent (hEvent=0xb8) returned 1 [0145.888] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0145.977] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.014] SetEvent (hEvent=0xb8) returned 1 [0146.015] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.015] SetEvent (hEvent=0xb8) returned 1 [0146.015] SetEvent (hEvent=0x7c) returned 1 [0146.015] SwitchToThread () returned 1 [0146.015] SetEvent (hEvent=0xb8) returned 1 [0146.015] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.036] SetEvent (hEvent=0x7c) returned 1 [0146.036] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0146.054] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.054] SetEvent (hEvent=0x7c) returned 1 [0146.054] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0146.056] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.102] SetEvent (hEvent=0x7c) returned 1 [0146.102] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.102] SetEvent (hEvent=0x7c) returned 1 [0146.102] SetEvent (hEvent=0xa0) returned 1 [0146.102] CloseHandle (hObject=0x11c) returned 1 [0146.102] CloseHandle (hObject=0x13c) returned 1 [0146.102] SwitchToThread () returned 1 [0146.125] SetEvent (hEvent=0x7c) returned 1 [0146.125] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.127] SetEvent (hEvent=0xb8) returned 1 [0146.127] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.130] SetEvent (hEvent=0xb8) returned 1 [0146.130] SwitchToThread () returned 1 [0146.130] SetEvent (hEvent=0xb8) returned 1 [0146.130] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.131] SetEvent (hEvent=0x7c) returned 1 [0146.131] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0146.132] SetEvent (hEvent=0x7c) returned 1 [0146.132] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0146.135] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0146.135] SetEvent (hEvent=0x7c) returned 1 [0146.135] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x5d3f, lpOverlapped=0x0) returned 1 [0146.135] GetFileType (hFile=0x170) returned 0x1 [0146.135] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.135] WriteFile (in: hFile=0x170, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x5d3f, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x124298a8*=0x5d3f, lpOverlapped=0x124298b4) returned 1 [0146.136] GetFileType (hFile=0x170) returned 0x1 [0146.136] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x5d3f, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.136] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.136] CloseHandle (hObject=0x170) returned 1 [0146.136] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.136] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.136] WriteFile (in: hFile=0x170, lpBuffer=0x12578240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x12578240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.136] CloseHandle (hObject=0x170) returned 1 [0146.136] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d20e0*, nNumberOfCharsToWrite=0x69, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124d20e0*, lpNumberOfCharsWritten=0x1242957c*=0x69) returned 1 [0146.137] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Green Bubbles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0146.137] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Green Bubbles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.137] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.137] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.138] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.139] SwitchToThread () returned 1 [0146.139] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.141] SetEvent (hEvent=0xb8) returned 1 [0146.141] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.144] SetEvent (hEvent=0xb8) returned 1 [0146.144] SwitchToThread () returned 1 [0146.144] SetEvent (hEvent=0xb8) returned 1 [0146.144] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.146] SetEvent (hEvent=0x7c) returned 1 [0146.146] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0146.147] SetEvent (hEvent=0x7c) returned 1 [0146.147] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0146.149] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0146.150] SetEvent (hEvent=0x7c) returned 1 [0146.150] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0xeb, lpOverlapped=0x0) returned 1 [0146.150] GetFileType (hFile=0x170) returned 0x1 [0146.150] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.150] WriteFile (in: hFile=0x170, lpBuffer=0x124d8000*, nNumberOfBytesToWrite=0xeb, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124d8000*, lpNumberOfBytesWritten=0x124298a8*=0xeb, lpOverlapped=0x124298b4) returned 1 [0146.150] GetFileType (hFile=0x170) returned 0x1 [0146.150] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xeb, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.150] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.150] CloseHandle (hObject=0x170) returned 1 [0146.150] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Hand Prints.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.151] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.151] WriteFile (in: hFile=0x170, lpBuffer=0x125786c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x125786c0*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.151] CloseHandle (hObject=0x170) returned 1 [0146.151] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d2000*, nNumberOfCharsToWrite=0x6e, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124d2000*, lpNumberOfCharsWritten=0x1242957c*=0x6e) returned 1 [0146.152] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e)) returned 1 [0146.152] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.152] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.152] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.153] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0146.153] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.154] SwitchToThread () returned 1 [0146.154] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.156] SetEvent (hEvent=0xb8) returned 1 [0146.156] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.158] SetEvent (hEvent=0xb8) returned 1 [0146.158] SwitchToThread () returned 1 [0146.159] SetEvent (hEvent=0xb8) returned 1 [0146.159] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.160] SetEvent (hEvent=0x7c) returned 1 [0146.160] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0146.161] SetEvent (hEvent=0x7c) returned 1 [0146.161] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0146.163] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.163] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0146.164] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.164] SetEvent (hEvent=0xac) returned 1 [0146.164] SetEvent (hEvent=0x7c) returned 1 [0146.164] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x18ed, lpOverlapped=0x0) returned 1 [0146.165] GetFileType (hFile=0x170) returned 0x1 [0146.165] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.165] WriteFile (in: hFile=0x170, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x18ed, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x124298a8*=0x18ed, lpOverlapped=0x124298b4) returned 1 [0146.165] GetFileType (hFile=0x170) returned 0x1 [0146.165] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x18ed, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.165] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.165] CloseHandle (hObject=0x170) returned 1 [0146.165] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.165] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.166] WriteFile (in: hFile=0x170, lpBuffer=0x12578240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x12578240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.166] CloseHandle (hObject=0x170) returned 1 [0146.166] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d20e0*, nNumberOfCharsToWrite=0x70, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124d20e0*, lpNumberOfCharsWritten=0x1242957c*=0x70) returned 1 [0146.166] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0146.167] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.167] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.167] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.168] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0146.168] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.169] SwitchToThread () returned 1 [0146.169] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.171] SetEvent (hEvent=0xb8) returned 1 [0146.171] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.173] SetEvent (hEvent=0xb8) returned 1 [0146.173] SwitchToThread () returned 1 [0146.173] SetEvent (hEvent=0xb8) returned 1 [0146.173] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.174] SetEvent (hEvent=0x7c) returned 1 [0146.174] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0146.175] SetEvent (hEvent=0x7c) returned 1 [0146.175] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0146.177] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0146.177] SetEvent (hEvent=0x7c) returned 1 [0146.177] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0xe9, lpOverlapped=0x0) returned 1 [0146.178] GetFileType (hFile=0x170) returned 0x1 [0146.178] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.178] WriteFile (in: hFile=0x170, lpBuffer=0x124d8000*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124d8000*, lpNumberOfBytesWritten=0x124298a8*=0xe9, lpOverlapped=0x124298b4) returned 1 [0146.178] GetFileType (hFile=0x170) returned 0x1 [0146.178] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xe9, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.178] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.178] CloseHandle (hObject=0x170) returned 1 [0146.178] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.178] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.179] WriteFile (in: hFile=0x170, lpBuffer=0x125786c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x125786c0*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.179] CloseHandle (hObject=0x170) returned 1 [0146.179] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fe000*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x127fe000*, lpNumberOfCharsWritten=0x1242957c*=0x68) returned 1 [0146.179] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1 [0146.180] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.180] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.180] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442220 | out: pbBuffer=0x12442220) returned 1 [0146.181] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c202 | out: pbBuffer=0x1248c202) returned 1 [0146.181] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c26a | out: pbBuffer=0x1248c26a) returned 1 [0146.181] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.181] SetEvent (hEvent=0x7c) returned 1 [0146.181] SetEvent (hEvent=0xb8) returned 1 [0146.182] SwitchToThread () returned 1 [0146.205] SetEvent (hEvent=0x7c) returned 1 [0146.207] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.431] SetEvent (hEvent=0xb8) returned 1 [0146.431] SetEvent (hEvent=0xa0) returned 1 [0146.431] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0146.438] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.438] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0146.451] SetEvent (hEvent=0x7c) returned 1 [0146.454] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0146.461] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.461] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0146.464] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.464] SetEvent (hEvent=0xac) returned 1 [0146.464] SetEvent (hEvent=0x7c) returned 1 [0146.464] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0xed, lpOverlapped=0x0) returned 1 [0146.465] GetFileType (hFile=0x170) returned 0x1 [0146.465] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.465] WriteFile (in: hFile=0x170, lpBuffer=0x12466000*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x12466000*, lpNumberOfBytesWritten=0x124298a8*=0xed, lpOverlapped=0x124298b4) returned 1 [0146.465] GetFileType (hFile=0x170) returned 0x1 [0146.465] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xed, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.466] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.466] CloseHandle (hObject=0x170) returned 1 [0146.466] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Shades of Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.466] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.471] WriteFile (in: hFile=0x170, lpBuffer=0x125786c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x125786c0*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.471] CloseHandle (hObject=0x170) returned 1 [0146.472] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124661e0*, nNumberOfCharsToWrite=0x71, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124661e0*, lpNumberOfCharsWritten=0x1242957c*=0x71) returned 1 [0146.480] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0146.480] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.480] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.482] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.486] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410084 | out: pbBuffer=0x12410084) returned 1 [0146.486] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.486] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c080 | out: pbBuffer=0x1248c080) returned 1 [0146.487] SwitchToThread () returned 1 [0146.495] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.519] SetEvent (hEvent=0xb8) returned 1 [0146.519] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.537] SetEvent (hEvent=0xb8) returned 1 [0146.537] SwitchToThread () returned 1 [0146.544] SetEvent (hEvent=0xb8) returned 1 [0146.544] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.552] SetEvent (hEvent=0x7c) returned 1 [0146.552] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0146.568] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.568] SetEvent (hEvent=0x7c) returned 1 [0146.568] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0146.583] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0146.585] SetEvent (hEvent=0xac) returned 1 [0146.585] SetEvent (hEvent=0x7c) returned 1 [0146.588] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x2949, lpOverlapped=0x0) returned 1 [0146.589] GetFileType (hFile=0x170) returned 0x1 [0146.589] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.589] WriteFile (in: hFile=0x170, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x2949, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x124298a8*=0x2949, lpOverlapped=0x124298b4) returned 1 [0146.590] GetFileType (hFile=0x170) returned 0x1 [0146.590] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x2949, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.590] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.590] CloseHandle (hObject=0x170) returned 1 [0146.590] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.590] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.597] WriteFile (in: hFile=0x170, lpBuffer=0x12578240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x12578240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.598] CloseHandle (hObject=0x170) returned 1 [0146.598] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d80e0*, nNumberOfCharsToWrite=0x6b, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124d80e0*, lpNumberOfCharsWritten=0x1242957c*=0x6b) returned 1 [0146.600] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0146.605] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.606] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.614] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.614] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0146.614] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.616] SwitchToThread () returned 1 [0146.620] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.666] SetEvent (hEvent=0xb8) returned 1 [0146.666] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.684] SetEvent (hEvent=0xb8) returned 1 [0146.684] SwitchToThread () returned 1 [0146.686] SetEvent (hEvent=0xb8) returned 1 [0146.686] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.691] SetEvent (hEvent=0x7c) returned 1 [0146.691] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0146.719] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.719] SetEvent (hEvent=0x7c) returned 1 [0146.719] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0146.722] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.722] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.750] SetEvent (hEvent=0x7c) returned 1 [0146.750] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0146.751] SetEvent (hEvent=0x7c) returned 1 [0146.751] SetEvent (hEvent=0xa0) returned 1 [0146.751] CloseHandle (hObject=0x17c) returned 1 [0146.751] CloseHandle (hObject=0x170) returned 1 [0146.751] SwitchToThread () returned 1 [0146.752] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0147.237] SetEvent (hEvent=0xa0) returned 1 [0147.238] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x102 [0147.313] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0147.313] SetEvent (hEvent=0xa0) returned 1 [0147.313] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0147.317] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0147.318] SetEvent (hEvent=0xa0) returned 1 [0147.318] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0147.318] SetEvent (hEvent=0xa0) returned 1 [0147.318] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0147.319] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0x1) returned 0x0 [0147.320] SetEvent (hEvent=0xa0) returned 1 [0147.383] GetFileType (hFile=0x1b4) returned 0x1 [0147.383] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0147.383] WriteFile (in: hFile=0x1b4, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0147.479] GetFileType (hFile=0x1b4) returned 0x1 [0147.479] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0147.479] GetFileType (hFile=0x1b4) returned 0x1 [0147.479] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0147.479] WriteFile (in: hFile=0x1b4, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0147.570] GetFileType (hFile=0x1b4) returned 0x1 [0147.570] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0147.570] GetFileType (hFile=0x1b4) returned 0x1 [0147.570] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0147.570] WriteFile (in: hFile=0x1b4, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0147.669] GetFileType (hFile=0x1b4) returned 0x1 [0147.669] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0147.669] GetFileType (hFile=0x1b4) returned 0x1 [0147.669] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0147.669] WriteFile (in: hFile=0x1b4, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0147.762] GetFileType (hFile=0x1b4) returned 0x1 [0147.762] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0147.762] GetFileType (hFile=0x1b4) returned 0x1 [0147.762] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0147.762] WriteFile (in: hFile=0x1b4, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0147.872] GetFileType (hFile=0x1b4) returned 0x1 [0147.872] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0147.872] GetFileType (hFile=0x1b4) returned 0x1 [0147.872] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0147.872] WriteFile (in: hFile=0x1b4, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0147.962] GetFileType (hFile=0x1b4) returned 0x1 [0147.962] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0147.963] GetFileType (hFile=0x1b4) returned 0x1 [0147.963] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0147.963] WriteFile (in: hFile=0x1b4, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0148.071] GetFileType (hFile=0x1b4) returned 0x1 [0148.071] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.071] GetFileType (hFile=0x1b4) returned 0x1 [0148.071] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.071] WriteFile (in: hFile=0x1b4, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0148.193] GetFileType (hFile=0x1b4) returned 0x1 [0148.193] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.193] ReadFile (in: hFile=0x1b4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x64f1, lpOverlapped=0x0) returned 1 [0148.201] GetFileType (hFile=0x1b4) returned 0x1 [0148.201] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.202] WriteFile (in: hFile=0x1b4, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x64f1, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429aa0*=0x64f1, lpOverlapped=0x12429aac) returned 1 [0148.202] GetFileType (hFile=0x1b4) returned 0x1 [0148.202] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x8064f1, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.202] ReadFile (in: hFile=0x1b4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0148.202] CloseHandle (hObject=0x1b4) returned 1 [0148.202] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music/Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0148.202] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0148.203] WriteFile (in: hFile=0x1b4, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0148.203] CloseHandle (hObject=0x1b4) returned 1 [0148.203] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1260e000*, nNumberOfCharsToWrite=0x4c, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1260e000*, lpNumberOfCharsWritten=0x12429774*=0x4c) returned 1 [0148.203] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Music/Sample Music/Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2)) returned 1 [0148.204] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music/Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0148.204] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0148.204] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0148.205] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12782002 | out: pbBuffer=0x12782002) returned 1 [0148.205] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1278204b | out: pbBuffer=0x1278204b) returned 1 [0148.205] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1278206a | out: pbBuffer=0x1278206a) returned 1 [0148.208] SetEvent (hEvent=0xb8) returned 1 [0148.208] ReadFile (in: hFile=0x1b4, lpBuffer=0x1380a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1380a000*, lpNumberOfBytesRead=0x12429abc*=0x3ec5d2, lpOverlapped=0x0) returned 1 [0148.437] GetFileType (hFile=0x1b4) returned 0x1 [0148.437] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.437] WriteFile (in: hFile=0x1b4, lpBuffer=0x1400a000*, nNumberOfBytesToWrite=0x3ec5d2, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1400a000*, lpNumberOfBytesWritten=0x12429aa0*=0x3ec5d2, lpOverlapped=0x12429aac) returned 1 [0148.477] GetFileType (hFile=0x1b4) returned 0x1 [0148.478] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3ec5d2, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.478] ReadFile (in: hFile=0x1b4, lpBuffer=0x1380a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1380a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0148.478] CloseHandle (hObject=0x1b4) returned 1 [0148.478] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music/Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0148.478] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0148.530] WriteFile (in: hFile=0x1b4, lpBuffer=0x12466fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466fc0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0148.530] CloseHandle (hObject=0x1b4) returned 1 [0148.530] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c000*, nNumberOfCharsToWrite=0x5e, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfCharsWritten=0x12429774*=0x5e) returned 1 [0148.585] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Music/Sample Music/Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459)) returned 1 [0148.585] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music/Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0148.586] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0148.599] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0148.600] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12782102 | out: pbBuffer=0x12782102) returned 1 [0148.603] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12782112 | out: pbBuffer=0x12782112) returned 1 [0148.603] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127821c8 | out: pbBuffer=0x127821c8) returned 1 [0148.608] SetEvent (hEvent=0xa0) returned 1 [0148.608] ReadFile (in: hFile=0x1b4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x49e459, lpOverlapped=0x0) returned 1 [0148.753] GetFileType (hFile=0x1b4) returned 0x1 [0148.753] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.753] WriteFile (in: hFile=0x1b4, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x49e459, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429aa0*=0x49e459, lpOverlapped=0x12429aac) returned 1 [0148.806] GetFileType (hFile=0x1b4) returned 0x1 [0148.806] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x49e459, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.806] ReadFile (in: hFile=0x1b4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0148.806] CloseHandle (hObject=0x1b4) returned 1 [0148.812] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music/Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0148.812] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0148.818] WriteFile (in: hFile=0x1b4, lpBuffer=0x12466b40*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466b40*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0148.818] CloseHandle (hObject=0x1b4) returned 1 [0148.818] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1260e000*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1260e000*, lpNumberOfCharsWritten=0x12429774*=0x4f) returned 1 [0148.826] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Music/Sample Music/desktop.ini" (normalized: "c:\\users\\public\\music\\sample music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a)) returned 1 [0148.826] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\sample music\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0148.826] FindFirstFileW (in: lpFileName="C:/Users/Public/Music/Sample Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0148.827] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\sample music\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0148.827] FindFirstFileW (in: lpFileName="C:/Users/Public/Music/Sample Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0148.827] GetFileAttributesW (lpFileName="C:/Users/Public/Music/Sample Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\sample music\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0148.827] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\sample music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0148.827] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0148.864] CloseHandle (hObject=0x1b4) returned 1 [0148.865] CreateFileW (lpFileName="C:/Users/Public/Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0148.865] FindFirstFileW (in: lpFileName="C:/Users/Public/Pictures\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0148.865] CreateFileW (lpFileName="C:/Users/Public/Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0148.865] FindFirstFileW (in: lpFileName="C:/Users/Public/Pictures\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0148.865] GetFileAttributesW (lpFileName="C:/Users/Public/Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\@_read_to_recover_files_@.txt")) returned 0x21 [0148.865] SetFileAttributesW (lpFileName="C:/Users/Public/Pictures\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0148.865] CreateFileW (lpFileName="C:/Users/Public/Pictures" (normalized: "c:\\users\\public\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0148.865] FindFirstFileW (in: lpFileName="C:/Users/Public/Pictures\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8f8d760, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f8d760, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0148.865] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8f8d760, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f8d760, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.865] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8f8d760, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8f8d760, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f92580, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0148.865] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0148.866] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1 [0148.866] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.866] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0148.866] CreateFileW (lpFileName="C:/Users/Public/Pictures/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0148.866] FindFirstFileW (in: lpFileName="C:/Users/Public/Pictures/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0148.866] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures" (normalized: "c:\\users\\public\\pictures\\sample pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0148.866] FindFirstFileW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0148.881] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0148.881] CreateFileW (lpFileName="C:/Users/Public/Pictures/desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0148.882] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0148.889] ReadFile (in: hFile=0x1b4, lpBuffer=0x12782000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12782000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0148.890] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Pictures/desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0148.890] CreateFileW (lpFileName="C:/Users/Public/Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0148.890] FindFirstFileW (in: lpFileName="C:/Users/Public/Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0148.890] CreateFileW (lpFileName="C:/Users/Public/Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0148.890] FindFirstFileW (in: lpFileName="C:/Users/Public/Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0148.890] GetFileAttributesW (lpFileName="C:/Users/Public/Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0148.890] CreateFileW (lpFileName="C:/Users/Public/Pictures/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0148.890] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0148.894] CloseHandle (hObject=0x190) returned 1 [0148.894] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0148.895] FindFirstFileW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0148.895] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0148.895] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0148.896] WriteFile (in: hFile=0x190, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0148.897] CloseHandle (hObject=0x190) returned 1 [0148.897] GetFileAttributesW (lpFileName="C:/Users/Public/Pictures/Sample Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\@_read_to_recover_files_@.txt")) returned 0x20 [0148.897] SetFileAttributesW (lpFileName="C:/Users/Public/Pictures/Sample Pictures\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0148.897] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures" (normalized: "c:\\users\\public\\pictures\\sample pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0148.897] FindFirstFileW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa034280, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa034280, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0148.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa034280, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa034280, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xa034280, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0xa034280, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa0390a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0148.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1 [0148.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0148.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0148.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1 [0148.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1 [0148.897] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0148.898] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1 [0148.898] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0148.898] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0148.898] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.898] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0148.898] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0148.898] FindFirstFileW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0148.898] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0148.899] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0148.899] ReadFile (in: hFile=0x190, lpBuffer=0x12782200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12782200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0148.901] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0148.902] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0148.902] ReadFile (in: hFile=0x154, lpBuffer=0x12782300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12782300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0148.905] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0148.906] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0148.906] ReadFile (in: hFile=0x104, lpBuffer=0x12782400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12782400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0148.908] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0148.909] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0148.910] ReadFile (in: hFile=0xf0, lpBuffer=0x12782500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12782500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0148.912] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0148.912] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0148.912] ReadFile (in: hFile=0xd8, lpBuffer=0x12782600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12782600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0148.915] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0148.916] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0148.916] ReadFile (in: hFile=0xcc, lpBuffer=0x12782700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12782700*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0148.921] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0148.921] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0148.922] ReadFile (in: hFile=0xe0, lpBuffer=0x12782800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12782800*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0148.924] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0148.924] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0148.925] ReadFile (in: hFile=0x18c, lpBuffer=0x12782900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12782900*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0148.927] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/desktop.ini" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0148.927] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0148.928] ReadFile (in: hFile=0xc0, lpBuffer=0x12782a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12782a00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0148.930] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures/Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22)) returned 1 [0148.930] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0148.930] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0148.930] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e2e0 | out: pbBuffer=0x1249e2e0) returned 1 [0148.931] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410290 | out: pbBuffer=0x12410290) returned 1 [0148.931] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12782b02 | out: pbBuffer=0x12782b02) returned 1 [0148.932] SetEvent (hEvent=0xb8) returned 1 [0148.932] ReadFile (in: hFile=0x110, lpBuffer=0x14c86000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14c86000*, lpNumberOfBytesRead=0x12429abc*=0xd6b22, lpOverlapped=0x0) returned 1 [0148.950] GetFileType (hFile=0x110) returned 0x1 [0148.950] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.950] WriteFile (in: hFile=0x110, lpBuffer=0x12662000*, nNumberOfBytesToWrite=0xd6b22, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12662000*, lpNumberOfBytesWritten=0x12429aa0*=0xd6b22, lpOverlapped=0x12429aac) returned 1 [0148.952] GetFileType (hFile=0x110) returned 0x1 [0148.952] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xd6b22, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.952] ReadFile (in: hFile=0x110, lpBuffer=0x14c86000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x14c86000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0148.952] CloseHandle (hObject=0x110) returned 1 [0148.953] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0148.953] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0148.953] WriteFile (in: hFile=0x110, lpBuffer=0x12578240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12578240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0148.953] CloseHandle (hObject=0x110) returned 1 [0148.953] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x58, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x12429774*=0x58) returned 1 [0148.954] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures/Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875)) returned 1 [0148.954] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0148.955] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0148.955] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0148.956] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410084 | out: pbBuffer=0x12410084) returned 1 [0148.956] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12782002 | out: pbBuffer=0x12782002) returned 1 [0148.957] SetEvent (hEvent=0xa0) returned 1 [0148.957] ReadFile (in: hFile=0x1b4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xce875, lpOverlapped=0x0) returned 1 [0148.974] GetFileType (hFile=0x1b4) returned 0x1 [0148.974] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.974] WriteFile (in: hFile=0x1b4, lpBuffer=0x1555e000*, nNumberOfBytesToWrite=0xce875, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1555e000*, lpNumberOfBytesWritten=0x12429aa0*=0xce875, lpOverlapped=0x12429aac) returned 1 [0148.976] GetFileType (hFile=0x1b4) returned 0x1 [0148.976] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xce875, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.976] ReadFile (in: hFile=0x1b4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0148.976] CloseHandle (hObject=0x1b4) returned 1 [0148.976] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0148.976] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0148.977] WriteFile (in: hFile=0x1b4, lpBuffer=0x12780240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12780240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0148.977] CloseHandle (hObject=0x1b4) returned 1 [0148.977] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x51, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x12429774*=0x51) returned 1 [0148.978] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures/Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554)) returned 1 [0148.978] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0148.978] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0148.978] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0148.979] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0148.979] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12782102 | out: pbBuffer=0x12782102) returned 1 [0148.980] SetEvent (hEvent=0x7c) returned 1 [0148.980] ReadFile (in: hFile=0x1b4, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x91554, lpOverlapped=0x0) returned 1 [0148.994] GetFileType (hFile=0x1b4) returned 0x1 [0148.994] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.995] WriteFile (in: hFile=0x1b4, lpBuffer=0x12662000*, nNumberOfBytesToWrite=0x91554, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12662000*, lpNumberOfBytesWritten=0x12429aa0*=0x91554, lpOverlapped=0x12429aac) returned 1 [0148.996] GetFileType (hFile=0x1b4) returned 0x1 [0148.996] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x91554, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0148.996] ReadFile (in: hFile=0x1b4, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0148.996] CloseHandle (hObject=0x1b4) returned 1 [0148.996] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0148.996] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0148.997] WriteFile (in: hFile=0x1b4, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0148.997] CloseHandle (hObject=0x1b4) returned 1 [0148.997] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x12429774*=0x55) returned 1 [0148.997] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures/Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616)) returned 1 [0148.998] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0148.998] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0148.998] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0148.999] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12782002 | out: pbBuffer=0x12782002) returned 1 [0148.999] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127820a5 | out: pbBuffer=0x127820a5) returned 1 [0149.000] SetEvent (hEvent=0xa0) returned 1 [0149.000] ReadFile (in: hFile=0x1b4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xbd616, lpOverlapped=0x0) returned 1 [0149.014] SetEvent (hEvent=0xa0) returned 1 [0149.015] GetFileType (hFile=0x1b4) returned 0x1 [0149.015] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.015] WriteFile (in: hFile=0x1b4, lpBuffer=0x15790000*, nNumberOfBytesToWrite=0xbd616, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x15790000*, lpNumberOfBytesWritten=0x12429aa0*=0xbd616, lpOverlapped=0x12429aac) returned 1 [0149.017] GetFileType (hFile=0x1b4) returned 0x1 [0149.017] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xbd616, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.017] ReadFile (in: hFile=0x1b4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0149.017] CloseHandle (hObject=0x1b4) returned 1 [0149.017] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0149.018] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0149.018] WriteFile (in: hFile=0x1b4, lpBuffer=0x124b6240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124b6240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0149.018] CloseHandle (hObject=0x1b4) returned 1 [0149.018] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x54, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x12429774*=0x54) returned 1 [0149.018] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures/Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f)) returned 1 [0149.019] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0149.019] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0149.019] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0149.020] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12782102 | out: pbBuffer=0x12782102) returned 1 [0149.021] SetEvent (hEvent=0x7c) returned 1 [0149.021] ReadFile (in: hFile=0x1b4, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0xbea1f, lpOverlapped=0x0) returned 1 [0149.036] GetFileType (hFile=0x1b4) returned 0x1 [0149.036] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.036] WriteFile (in: hFile=0x1b4, lpBuffer=0x12662000*, nNumberOfBytesToWrite=0xbea1f, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12662000*, lpNumberOfBytesWritten=0x12429aa0*=0xbea1f, lpOverlapped=0x12429aac) returned 1 [0149.038] GetFileType (hFile=0x1b4) returned 0x1 [0149.038] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xbea1f, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.038] ReadFile (in: hFile=0x1b4, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0149.038] CloseHandle (hObject=0x1b4) returned 1 [0149.038] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0149.038] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0149.038] WriteFile (in: hFile=0x1b4, lpBuffer=0x12780240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12780240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0149.038] CloseHandle (hObject=0x1b4) returned 1 [0149.038] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1260e000*, nNumberOfCharsToWrite=0x50, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1260e000*, lpNumberOfCharsWritten=0x12429774*=0x50) returned 1 [0149.039] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures/Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c)) returned 1 [0149.039] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0149.039] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0149.039] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0149.040] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12782002 | out: pbBuffer=0x12782002) returned 1 [0149.040] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12782040 | out: pbBuffer=0x12782040) returned 1 [0149.041] SetEvent (hEvent=0xa0) returned 1 [0149.041] ReadFile (in: hFile=0x1b4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x8907c, lpOverlapped=0x0) returned 1 [0149.052] GetFileType (hFile=0x1b4) returned 0x1 [0149.052] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.052] WriteFile (in: hFile=0x1b4, lpBuffer=0x159cc000*, nNumberOfBytesToWrite=0x8907c, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x159cc000*, lpNumberOfBytesWritten=0x12429aa0*=0x8907c, lpOverlapped=0x12429aac) returned 1 [0149.054] GetFileType (hFile=0x1b4) returned 0x1 [0149.054] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x8907c, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.054] ReadFile (in: hFile=0x1b4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0149.054] CloseHandle (hObject=0x1b4) returned 1 [0149.054] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0149.054] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0149.054] WriteFile (in: hFile=0x1b4, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0149.054] CloseHandle (hObject=0x1b4) returned 1 [0149.055] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x12429774*=0x55) returned 1 [0149.055] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures/Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b)) returned 1 [0149.055] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0149.055] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0149.055] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0149.056] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12782102 | out: pbBuffer=0x12782102) returned 1 [0149.056] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127821da | out: pbBuffer=0x127821da) returned 1 [0149.058] SetEvent (hEvent=0x7c) returned 1 [0149.058] ReadFile (in: hFile=0x1b4, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0xbde6b, lpOverlapped=0x0) returned 1 [0149.072] GetFileType (hFile=0x1b4) returned 0x1 [0149.072] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.072] WriteFile (in: hFile=0x1b4, lpBuffer=0x12662000*, nNumberOfBytesToWrite=0xbde6b, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12662000*, lpNumberOfBytesWritten=0x12429aa0*=0xbde6b, lpOverlapped=0x12429aac) returned 1 [0149.074] GetFileType (hFile=0x1b4) returned 0x1 [0149.074] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xbde6b, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.074] ReadFile (in: hFile=0x1b4, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0149.074] CloseHandle (hObject=0x1b4) returned 1 [0149.074] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0149.074] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0149.075] WriteFile (in: hFile=0x1b4, lpBuffer=0x124f2240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124f2240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0149.075] CloseHandle (hObject=0x1b4) returned 1 [0149.075] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x53, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x12429774*=0x53) returned 1 [0149.075] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures/Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958)) returned 1 [0149.075] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0149.076] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0149.076] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0149.077] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410094 | out: pbBuffer=0x12410094) returned 1 [0149.077] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12782002 | out: pbBuffer=0x12782002) returned 1 [0149.077] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12782055 | out: pbBuffer=0x12782055) returned 1 [0149.078] SetEvent (hEvent=0xa0) returned 1 [0149.078] ReadFile (in: hFile=0x1b4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x97958, lpOverlapped=0x0) returned 1 [0149.090] GetFileType (hFile=0x1b4) returned 0x1 [0149.090] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.090] WriteFile (in: hFile=0x1b4, lpBuffer=0x12662000*, nNumberOfBytesToWrite=0x97958, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12662000*, lpNumberOfBytesWritten=0x12429aa0*=0x97958, lpOverlapped=0x12429aac) returned 1 [0149.091] GetFileType (hFile=0x1b4) returned 0x1 [0149.091] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x97958, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0149.091] ReadFile (in: hFile=0x1b4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0149.092] CloseHandle (hObject=0x1b4) returned 1 [0149.092] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0149.092] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0149.092] WriteFile (in: hFile=0x1b4, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0149.092] CloseHandle (hObject=0x1b4) returned 1 [0149.092] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x51, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x12429774*=0x51) returned 1 [0149.093] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures/desktop.ini" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0149.093] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.093] FindFirstFileW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.093] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.093] FindFirstFileW (in: lpFileName="C:/Users/Public/Pictures/Sample Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.093] GetFileAttributesW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0149.093] CreateFileW (lpFileName="C:/Users/Public/Pictures/Sample Pictures/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0149.093] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0149.093] CloseHandle (hObject=0x1b4) returned 1 [0149.093] CreateFileW (lpFileName="C:/Users/Public/Recorded TV\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.093] FindFirstFileW (in: lpFileName="C:/Users/Public/Recorded TV\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.093] CreateFileW (lpFileName="C:/Users/Public/Recorded TV\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0149.095] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0149.096] WriteFile (in: hFile=0x1b4, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0149.097] CloseHandle (hObject=0x1b4) returned 1 [0149.097] GetFileAttributesW (lpFileName="C:/Users/Public/Recorded TV\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\@_read_to_recover_files_@.txt")) returned 0x20 [0149.097] SetFileAttributesW (lpFileName="C:/Users/Public/Recorded TV\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0149.097] CreateFileW (lpFileName="C:/Users/Public/Recorded TV" (normalized: "c:\\users\\public\\recorded tv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.097] FindFirstFileW (in: lpFileName="C:/Users/Public/Recorded TV\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa20dca0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa20dca0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0149.097] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa20dca0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa20dca0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.097] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xa20b590, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0xa20b590, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa212ac0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0149.097] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.097] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1 [0149.097] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.097] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0149.097] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.097] FindFirstFileW (in: lpFileName="C:/Users/Public/Recorded TV/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.098] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/Sample Media" (normalized: "c:\\users\\public\\recorded tv\\sample media"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.098] FindFirstFileW (in: lpFileName="C:/Users/Public/Recorded TV/Sample Media\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0149.098] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0149.098] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0149.099] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0149.099] ReadFile (in: hFile=0x1b4, lpBuffer=0x12782100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12782100*, lpNumberOfBytesRead=0x12429c80*=0x50, lpOverlapped=0x0) returned 1 [0149.100] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Recorded TV/desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0149.100] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.100] FindFirstFileW (in: lpFileName="C:/Users/Public/Recorded TV/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.100] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.100] FindFirstFileW (in: lpFileName="C:/Users/Public/Recorded TV/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.100] GetFileAttributesW (lpFileName="C:/Users/Public/Recorded TV/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0149.100] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0149.101] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0149.101] CloseHandle (hObject=0x190) returned 1 [0149.101] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/Sample Media\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.101] FindFirstFileW (in: lpFileName="C:/Users/Public/Recorded TV/Sample Media\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.101] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/Sample Media\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0149.102] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0149.103] WriteFile (in: hFile=0x190, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0149.104] CloseHandle (hObject=0x190) returned 1 [0149.104] GetFileAttributesW (lpFileName="C:/Users/Public/Recorded TV/Sample Media\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\@_read_to_recover_files_@.txt")) returned 0x20 [0149.104] SetFileAttributesW (lpFileName="C:/Users/Public/Recorded TV/Sample Media\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0149.104] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/Sample Media" (normalized: "c:\\users\\public\\recorded tv\\sample media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.104] FindFirstFileW (in: lpFileName="C:/Users/Public/Recorded TV/Sample Media\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ee10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa21ee10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0149.104] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ee10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa21ee10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.104] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xa21c700, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0xa21c700, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa223c30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0149.104] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.104] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1 [0149.104] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.104] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0149.104] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/Sample Media/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.104] FindFirstFileW (in: lpFileName="C:/Users/Public/Recorded TV/Sample Media/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.105] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/Sample Media/desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\sample media\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0149.105] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0149.105] ReadFile (in: hFile=0x190, lpBuffer=0x12782200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12782200*, lpNumberOfBytesRead=0x12429bd8*=0xab, lpOverlapped=0x0) returned 1 [0149.106] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/Sample Media/win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0149.106] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0149.107] ReadFile (in: hFile=0x154, lpBuffer=0x12782300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12782300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0149.109] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Recorded TV/Sample Media/desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\sample media\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab)) returned 1 [0149.109] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Recorded TV/Sample Media/win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000)) returned 1 [0149.110] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/Sample Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.110] FindFirstFileW (in: lpFileName="C:/Users/Public/Recorded TV/Sample Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.111] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/Sample Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.111] FindFirstFileW (in: lpFileName="C:/Users/Public/Recorded TV/Sample Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.111] GetFileAttributesW (lpFileName="C:/Users/Public/Recorded TV/Sample Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0149.111] CreateFileW (lpFileName="C:/Users/Public/Recorded TV/Sample Media/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0149.111] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0149.111] CloseHandle (hObject=0x104) returned 1 [0149.111] CreateFileW (lpFileName="C:/Users/Public/Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.111] FindFirstFileW (in: lpFileName="C:/Users/Public/Videos\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.111] CreateFileW (lpFileName="C:/Users/Public/Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.111] FindFirstFileW (in: lpFileName="C:/Users/Public/Videos\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.111] GetFileAttributesW (lpFileName="C:/Users/Public/Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\@_read_to_recover_files_@.txt")) returned 0x21 [0149.112] SetFileAttributesW (lpFileName="C:/Users/Public/Videos\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0149.112] CreateFileW (lpFileName="C:/Users/Public/Videos" (normalized: "c:\\users\\public\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.112] FindFirstFileW (in: lpFileName="C:/Users/Public/Videos\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8f92580, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f92580, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0149.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8f92580, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f92580, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8f92580, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8f92580, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f973a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0149.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1 [0149.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.112] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0149.112] CreateFileW (lpFileName="C:/Users/Public/Videos/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.112] FindFirstFileW (in: lpFileName="C:/Users/Public/Videos/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.112] CreateFileW (lpFileName="C:/Users/Public/Videos/Sample Videos" (normalized: "c:\\users\\public\\videos\\sample videos"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.112] FindFirstFileW (in: lpFileName="C:/Users/Public/Videos/Sample Videos\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0149.113] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0149.113] CreateFileW (lpFileName="C:/Users/Public/Videos/desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0149.113] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0149.113] ReadFile (in: hFile=0x104, lpBuffer=0x12782400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12782400*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0149.114] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Videos/desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0149.114] CreateFileW (lpFileName="C:/Users/Public/Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.114] FindFirstFileW (in: lpFileName="C:/Users/Public/Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.114] CreateFileW (lpFileName="C:/Users/Public/Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.114] FindFirstFileW (in: lpFileName="C:/Users/Public/Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.114] GetFileAttributesW (lpFileName="C:/Users/Public/Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0149.114] CreateFileW (lpFileName="C:/Users/Public/Videos/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0149.114] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0149.114] CloseHandle (hObject=0xf0) returned 1 [0149.114] CreateFileW (lpFileName="C:/Users/Public/Videos/Sample Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.114] FindFirstFileW (in: lpFileName="C:/Users/Public/Videos/Sample Videos\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.114] CreateFileW (lpFileName="C:/Users/Public/Videos/Sample Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0149.115] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0149.115] WriteFile (in: hFile=0xf0, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0149.116] CloseHandle (hObject=0xf0) returned 1 [0149.116] GetFileAttributesW (lpFileName="C:/Users/Public/Videos/Sample Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\@_read_to_recover_files_@.txt")) returned 0x20 [0149.116] SetFileAttributesW (lpFileName="C:/Users/Public/Videos/Sample Videos\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0149.116] CreateFileW (lpFileName="C:/Users/Public/Videos/Sample Videos" (normalized: "c:\\users\\public\\videos\\sample videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.116] FindFirstFileW (in: lpFileName="C:/Users/Public/Videos/Sample Videos\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa239bc0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa239bc0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0149.116] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa239bc0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa239bc0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.116] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xa239bc0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0xa239bc0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0xa23c2d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0149.116] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0149.116] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0149.117] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.117] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0149.117] CreateFileW (lpFileName="C:/Users/Public/Videos/Sample Videos/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0149.117] FindFirstFileW (in: lpFileName="C:/Users/Public/Videos/Sample Videos/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0149.117] CreateFileW (lpFileName="C:/Users/Public/Videos/Sample Videos/Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0149.117] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0149.117] ReadFile (in: hFile=0xf0, lpBuffer=0x12782500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12782500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0149.120] CreateFileW (lpFileName="C:/Users/Public/Videos/Sample Videos/desktop.ini" (normalized: "c:\\users\\public\\videos\\sample videos\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0149.120] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0149.121] ReadFile (in: hFile=0xd8, lpBuffer=0x12782600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12782600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0149.122] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Videos/Sample Videos/Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a)) returned 1 [0149.122] CreateFileW (lpFileName="C:/Users/Public/Videos/Sample Videos/Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0149.122] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0149.122] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e4c0 | out: pbBuffer=0x1249e4c0) returned 1 [0149.123] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12782702 | out: pbBuffer=0x12782702) returned 1 [0149.123] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12782722 | out: pbBuffer=0x12782722) returned 1 [0149.123] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1278277d | out: pbBuffer=0x1278277d) returned 1 [0149.124] SetEvent (hEvent=0x7c) returned 1 [0149.124] ReadFile (in: hFile=0xcc, lpBuffer=0x130a2000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x130a2000*, lpNumberOfBytesRead=0x12429abc*=0x800000, lpOverlapped=0x0) returned 1 [0149.398] CloseHandle (hObject=0xf0) returned 1 [0149.398] CloseHandle (hObject=0x104) returned 1 [0149.398] CloseHandle (hObject=0x154) returned 1 [0149.398] CloseHandle (hObject=0x190) returned 1 [0149.398] CloseHandle (hObject=0x1b4) returned 1 [0149.398] CloseHandle (hObject=0xd8) returned 1 [0149.398] SwitchToThread () returned 1 [0149.399] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0149.591] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0150.446] SetEvent (hEvent=0x7c) returned 1 [0150.446] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0150.599] SetEvent (hEvent=0x7c) returned 1 [0150.599] SwitchToThread () returned 1 [0150.608] SetEvent (hEvent=0xa0) returned 1 [0150.609] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0151.114] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0151.137] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0151.348] SetEvent (hEvent=0xa0) returned 1 [0151.348] ReadFile (in: hFile=0xd8, lpBuffer=0x12496000, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x12807eb8, lpOverlapped=0x0 | out: lpBuffer=0x12496000*, lpNumberOfBytesRead=0x12807eb8*=0x77, lpOverlapped=0x0) returned 1 [0151.507] SetEvent (hEvent=0xac) returned 1 [0151.507] ReadFile (in: hFile=0xd8, lpBuffer=0x124c0077, nNumberOfBytesToRead=0x589, lpNumberOfBytesRead=0x12807eb8, lpOverlapped=0x0 | out: lpBuffer=0x124c0077*, lpNumberOfBytesRead=0x12807eb8*=0x39, lpOverlapped=0x0) returned 1 [0151.669] ReadFile (hFile=0xd8, lpBuffer=0x124c00b0, nNumberOfBytesToRead=0x550, lpNumberOfBytesRead=0x12807eb8, lpOverlapped=0x0) Thread: id = 65 os_tid = 0xa2c [0037.059] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x32ebff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x32ebff38*=0xc4) returned 1 [0037.059] VirtualQuery (in: lpAddress=0x32ebff48, lpBuffer=0x32ebff48, dwLength=0x1c | out: lpBuffer=0x32ebff48*(BaseAddress=0x32ebf000, AllocationBase=0x32dc0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0037.059] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xb8 [0037.060] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0037.064] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0037.380] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0037.652] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0042.128] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0042.315] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0043.059] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0043.209] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0044.171] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0044.218] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0044.722] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0045.498] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0045.905] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0045.907] SetEvent (hEvent=0xa8) returned 1 [0045.907] SetEvent (hEvent=0xa0) returned 1 [0045.907] CloseHandle (hObject=0xbc) returned 1 [0045.907] CloseHandle (hObject=0xc0) returned 1 [0045.907] CloseHandle (hObject=0x98) returned 1 [0045.908] CloseHandle (hObject=0xc8) returned 1 [0045.908] CloseHandle (hObject=0xd0) returned 1 [0045.908] SwitchToThread () returned 1 [0045.909] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0046.086] SetEvent (hEvent=0x6c) returned 1 [0046.087] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0046.087] SetEvent (hEvent=0x6c) returned 1 [0046.087] SwitchToThread () returned 1 [0046.088] SetEvent (hEvent=0xa0) returned 1 [0046.088] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0046.176] SetEvent (hEvent=0xa0) returned 1 [0046.176] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0046.177] SetEvent (hEvent=0xa0) returned 1 [0046.177] SetEvent (hEvent=0xa8) returned 1 [0046.177] CloseHandle (hObject=0xc0) returned 1 [0046.177] CloseHandle (hObject=0x98) returned 1 [0046.177] CloseHandle (hObject=0xc8) returned 1 [0046.177] CloseHandle (hObject=0xd0) returned 1 [0046.313] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0046.380] SetEvent (hEvent=0x6c) returned 1 [0046.380] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0046.381] SetEvent (hEvent=0x6c) returned 1 [0046.381] SwitchToThread () returned 1 [0046.407] SetEvent (hEvent=0x6c) returned 1 [0046.407] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0046.456] SetEvent (hEvent=0xa8) returned 1 [0046.471] SwitchToThread () returned 1 [0046.575] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0046.672] SetEvent (hEvent=0xa8) returned 1 [0046.672] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0046.771] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0046.771] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0048.079] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0048.089] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0048.228] SetEvent (hEvent=0x6c) returned 1 [0048.229] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0048.229] SetEvent (hEvent=0x6c) returned 1 [0048.229] SwitchToThread () returned 1 [0048.363] SetEvent (hEvent=0xa8) returned 1 [0048.363] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0049.629] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0049.826] SetEvent (hEvent=0x6c) returned 1 [0049.826] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0049.827] SetEvent (hEvent=0x6c) returned 1 [0049.827] SwitchToThread () returned 1 [0049.853] SetEvent (hEvent=0xa8) returned 1 [0049.853] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0050.454] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0050.521] SetEvent (hEvent=0x6c) returned 1 [0050.521] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0050.522] SetEvent (hEvent=0x6c) returned 1 [0050.522] SwitchToThread () returned 1 [0050.566] SetEvent (hEvent=0xa8) returned 1 [0050.566] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0050.961] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0051.162] SetEvent (hEvent=0x6c) returned 1 [0051.162] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0051.163] SetEvent (hEvent=0x6c) returned 1 [0051.163] SwitchToThread () returned 1 [0051.227] SetEvent (hEvent=0xa8) returned 1 [0051.227] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0051.551] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0051.752] SetEvent (hEvent=0xa8) returned 1 [0051.752] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0051.850] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0051.850] SetEvent (hEvent=0xa8) returned 1 [0051.850] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0051.947] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0051.947] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0052.519] SetEvent (hEvent=0xa8) returned 1 [0052.519] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0052.525] SetEvent (hEvent=0xa8) returned 1 [0052.525] SetEvent (hEvent=0x6c) returned 1 [0052.525] CloseHandle (hObject=0xc8) returned 1 [0052.525] CloseHandle (hObject=0xd0) returned 1 [0052.525] CloseHandle (hObject=0xbc) returned 1 [0052.525] CloseHandle (hObject=0xc0) returned 1 [0052.527] SwitchToThread () returned 1 [0052.535] SetEvent (hEvent=0xa8) returned 1 [0052.535] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0052.536] SetEvent (hEvent=0xa8) returned 1 [0052.536] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0052.542] SetEvent (hEvent=0xa8) returned 1 [0052.542] SwitchToThread () returned 1 [0052.554] SetEvent (hEvent=0xa8) returned 1 [0052.554] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0052.662] SetEvent (hEvent=0x6c) returned 1 [0052.663] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0052.761] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0052.764] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0052.877] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0052.877] SetEvent (hEvent=0xa0) returned 1 [0052.877] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0052.981] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0052.981] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0059.305] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0062.946] SetEvent (hEvent=0xa0) returned 1 [0062.946] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0063.062] SetEvent (hEvent=0xa0) returned 1 [0063.062] SetEvent (hEvent=0x6c) returned 1 [0063.063] SwitchToThread () returned 1 [0063.072] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0063.392] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0063.431] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0063.796] SetEvent (hEvent=0x7c) returned 1 [0063.796] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0063.797] SetEvent (hEvent=0x7c) returned 1 [0063.797] SetEvent (hEvent=0x6c) returned 1 [0063.797] CloseHandle (hObject=0x98) returned 1 [0063.797] CloseHandle (hObject=0xe4) returned 1 [0063.797] CloseHandle (hObject=0xbc) returned 1 [0063.797] SwitchToThread () returned 1 [0063.867] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0064.748] SetEvent (hEvent=0x7c) returned 1 [0064.748] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0064.748] SetEvent (hEvent=0x7c) returned 1 [0064.748] SwitchToThread () returned 1 [0064.787] SetEvent (hEvent=0x6c) returned 1 [0064.787] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0065.077] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0065.335] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0065.756] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0066.010] SetEvent (hEvent=0x6c) returned 1 [0066.010] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0066.043] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0066.043] SetEvent (hEvent=0x7c) returned 1 [0066.043] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0066.097] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0066.097] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0066.391] SetEvent (hEvent=0x6c) returned 1 [0066.391] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0066.392] SetEvent (hEvent=0x6c) returned 1 [0066.392] SetEvent (hEvent=0x7c) returned 1 [0066.392] CloseHandle (hObject=0xe4) returned 1 [0066.392] CloseHandle (hObject=0xbc) returned 1 [0066.392] CloseHandle (hObject=0xc0) returned 1 [0066.392] CloseHandle (hObject=0xdc) returned 1 [0066.393] SwitchToThread () returned 1 [0066.394] SetEvent (hEvent=0x6c) returned 1 [0066.394] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0066.394] SetEvent (hEvent=0x6c) returned 1 [0066.394] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0066.395] SetEvent (hEvent=0x6c) returned 1 [0066.395] SwitchToThread () returned 1 [0066.490] SetEvent (hEvent=0x7c) returned 1 [0066.490] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0067.691] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0067.794] SetEvent (hEvent=0x7c) returned 1 [0067.794] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0067.893] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0067.893] SetEvent (hEvent=0x7c) returned 1 [0067.893] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0067.925] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0067.925] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0067.971] SetEvent (hEvent=0x7c) returned 1 [0067.971] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0068.010] SetEvent (hEvent=0x7c) returned 1 [0068.010] SetEvent (hEvent=0xa0) returned 1 [0068.010] CloseHandle (hObject=0xbc) returned 1 [0068.010] CloseHandle (hObject=0xc0) returned 1 [0068.010] CloseHandle (hObject=0xdc) returned 1 [0068.154] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0068.155] SetEvent (hEvent=0x6c) returned 1 [0068.155] CloseHandle (hObject=0x98) returned 1 [0068.155] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0068.156] SetEvent (hEvent=0x6c) returned 1 [0068.156] SwitchToThread () returned 1 [0068.172] SetEvent (hEvent=0x7c) returned 1 [0068.172] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0069.389] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0069.485] SetEvent (hEvent=0x6c) returned 1 [0069.485] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0069.491] SetEvent (hEvent=0x6c) returned 1 [0069.491] SwitchToThread () returned 1 [0069.512] SetEvent (hEvent=0x7c) returned 1 [0069.513] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0070.071] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0070.152] SetEvent (hEvent=0x6c) returned 1 [0070.152] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0070.158] SetEvent (hEvent=0x6c) returned 1 [0070.158] SwitchToThread () returned 1 [0070.187] SetEvent (hEvent=0x7c) returned 1 [0070.187] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0070.615] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0070.676] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0071.022] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0071.066] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0071.157] SetEvent (hEvent=0x7c) returned 1 [0071.157] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0071.157] SetEvent (hEvent=0x7c) returned 1 [0071.157] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0071.158] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0075.068] SetEvent (hEvent=0x6c) returned 1 [0075.068] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0075.073] SetEvent (hEvent=0x6c) returned 1 [0075.073] SetEvent (hEvent=0x7c) returned 1 [0075.073] SwitchToThread () returned 1 [0075.074] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0075.078] SetEvent (hEvent=0xa0) returned 1 [0075.078] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0075.078] SetEvent (hEvent=0xa0) returned 1 [0075.078] SwitchToThread () returned 1 [0075.080] SetEvent (hEvent=0x7c) returned 1 [0075.080] SwitchToThread () returned 1 [0075.082] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0075.204] SetEvent (hEvent=0x7c) returned 1 [0075.204] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0075.322] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0075.322] SetEvent (hEvent=0x7c) returned 1 [0075.322] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0075.324] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0075.325] SetEvent (hEvent=0xac) returned 1 [0075.325] SetEvent (hEvent=0x7c) returned 1 [0075.325] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0075.325] SetEvent (hEvent=0x7c) returned 1 [0075.326] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0075.373] GetFileType (hFile=0xe0) returned 0x1 [0075.373] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0075.373] WriteFile (in: hFile=0xe0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0075.510] GetFileType (hFile=0xe0) returned 0x1 [0075.510] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0075.510] GetFileType (hFile=0xe0) returned 0x1 [0075.510] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0075.510] WriteFile (in: hFile=0xe0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0075.658] GetFileType (hFile=0xe0) returned 0x1 [0075.658] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0075.658] GetFileType (hFile=0xe0) returned 0x1 [0075.658] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0075.658] WriteFile (in: hFile=0xe0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0075.815] GetFileType (hFile=0xe0) returned 0x1 [0075.815] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0075.815] GetFileType (hFile=0xe0) returned 0x1 [0075.815] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0075.815] WriteFile (in: hFile=0xe0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0075.946] GetFileType (hFile=0xe0) returned 0x1 [0075.946] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0075.946] GetFileType (hFile=0xe0) returned 0x1 [0075.946] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0075.946] WriteFile (in: hFile=0xe0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0076.053] GetFileType (hFile=0xe0) returned 0x1 [0076.053] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0076.053] GetFileType (hFile=0xe0) returned 0x1 [0076.053] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0076.053] WriteFile (in: hFile=0xe0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0076.166] GetFileType (hFile=0xe0) returned 0x1 [0076.166] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0076.166] GetFileType (hFile=0xe0) returned 0x1 [0076.166] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0076.166] WriteFile (in: hFile=0xe0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0076.266] GetFileType (hFile=0xe0) returned 0x1 [0076.266] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0076.266] GetFileType (hFile=0xe0) returned 0x1 [0076.266] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0076.266] WriteFile (in: hFile=0xe0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0076.368] GetFileType (hFile=0xe0) returned 0x1 [0076.368] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0076.368] ReadFile (in: hFile=0xe0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429abc*=0x800000, lpOverlapped=0x0) returned 1 [0076.514] SetEvent (hEvent=0xa0) returned 1 [0076.514] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0076.516] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0076.516] SetEvent (hEvent=0xa0) returned 1 [0076.516] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0076.532] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0076.579] GetFileType (hFile=0xe0) returned 0x1 [0076.579] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0076.579] WriteFile (in: hFile=0xe0, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0076.681] GetFileType (hFile=0xe0) returned 0x1 [0076.681] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0076.681] ReadFile (in: hFile=0xe0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429abc*=0x800000, lpOverlapped=0x0) returned 1 [0076.800] SetEvent (hEvent=0x7c) returned 1 [0076.800] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0076.806] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0076.806] SetEvent (hEvent=0x7c) returned 1 [0076.806] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0076.814] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0076.867] GetFileType (hFile=0xe0) returned 0x1 [0076.867] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0076.867] WriteFile (in: hFile=0xe0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429aa0*=0x800000, lpOverlapped=0x12429aac) returned 1 [0076.969] GetFileType (hFile=0xe0) returned 0x1 [0076.969] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0076.969] ReadFile (in: hFile=0xe0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429abc*=0x2b7e94, lpOverlapped=0x0) returned 1 [0077.002] SetEvent (hEvent=0xa0) returned 1 [0077.058] GetFileType (hFile=0xe0) returned 0x1 [0077.058] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0077.059] WriteFile (in: hFile=0xe0, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x2b7e94, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429aa0*=0x2b7e94, lpOverlapped=0x12429aac) returned 1 [0077.087] GetFileType (hFile=0xe0) returned 0x1 [0077.087] SetFilePointerEx (in: hFile=0xe0, liDistanceToMove=0x1ab7e94, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0077.087] ReadFile (in: hFile=0xe0, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0077.087] CloseHandle (hObject=0xe0) returned 1 [0077.087] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0077.088] SetEvent (hEvent=0xa0) returned 1 [0077.088] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0077.094] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0077.095] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0077.095] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0077.103] WriteFile (in: hFile=0xe0, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0077.103] CloseHandle (hObject=0xe0) returned 1 [0077.103] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x73, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x12429774*=0x73) returned 1 [0077.110] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00)) returned 1 [0077.110] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545)) returned 1 [0077.110] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975)) returned 1 [0077.111] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.111] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0077.111] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.111] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0077.111] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0077.111] CreateFileW (lpFileName="C:/MSOCache/All Users/{90140000-0117-0409-1000-0000000FF1CE}-C/Access.en-us/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0077.111] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0077.120] CloseHandle (hObject=0xe0) returned 1 [0077.120] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.121] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0077.121] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0077.121] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0077.125] WriteFile (in: hFile=0xe0, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0077.126] CloseHandle (hObject=0xe0) returned 1 [0077.126] GetFileAttributesW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt")) returned 0x2020 [0077.126] SetFileAttributesW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0077.126] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.127] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe0514770, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xe0514770, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe0514770, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xe0514770, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xe0514770, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xe0514770, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xe0520ac0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0077.127] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.127] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0077.127] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0077.127] FindFirstFileW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0077.127] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0077.129] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0077.129] ReadFile (in: hFile=0xe0, lpBuffer=0x124c4200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0077.131] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0077.132] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0077.133] ReadFile (in: hFile=0x100, lpBuffer=0x124c4300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4300*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0077.134] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0077.135] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0077.135] ReadFile (in: hFile=0xdc, lpBuffer=0x124c4400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4400*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0077.137] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0077.138] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0077.138] ReadFile (in: hFile=0xc0, lpBuffer=0x124c4500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4500*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0077.139] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0077.141] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0077.141] ReadFile (in: hFile=0xbc, lpBuffer=0x124c4600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0077.143] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0077.143] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0077.143] ReadFile (in: hFile=0xe4, lpBuffer=0x124c4700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0077.146] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0077.146] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0077.147] ReadFile (in: hFile=0x98, lpBuffer=0x124c4800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0077.151] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0077.151] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0077.152] ReadFile (in: hFile=0xd0, lpBuffer=0x124c4900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0077.157] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0077.158] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0077.158] ReadFile (in: hFile=0xc8, lpBuffer=0x124c4a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4a00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0077.160] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0077.161] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0077.161] ReadFile (in: hFile=0xd8, lpBuffer=0x124c4b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4b00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0077.164] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0077.164] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0077.164] ReadFile (in: hFile=0xcc, lpBuffer=0x124c4c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4c00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0077.167] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0077.167] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0077.167] ReadFile (in: hFile=0xe8, lpBuffer=0x124c4d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4d00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0077.169] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0077.170] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0077.170] ReadFile (in: hFile=0xec, lpBuffer=0x124c4e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c4e00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0077.172] GetFileAttributesExW (in: lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1 [0077.172] CreateFileW (lpFileName="C:/MSOCache/All Users/{91140000-0011-0000-1000-0000000FF1CE}-C/OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0077.172] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0077.173] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e3e0 | out: pbBuffer=0x1240e3e0) returned 1 [0077.174] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c4f02 | out: pbBuffer=0x124c4f02) returned 1 [0077.175] SetEvent (hEvent=0x7c) returned 1 [0077.175] ReadFile (in: hFile=0xf0, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0077.336] SetEvent (hEvent=0xac) returned 1 [0077.337] SetEvent (hEvent=0x6c) returned 1 [0077.337] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0077.397] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0077.397] SetEvent (hEvent=0x6c) returned 1 [0077.397] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0077.399] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0077.399] SetEvent (hEvent=0x6c) returned 1 [0077.445] GetFileType (hFile=0xf0) returned 0x1 [0077.445] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0077.445] WriteFile (in: hFile=0xf0, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0077.553] GetFileType (hFile=0xf0) returned 0x1 [0077.553] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0077.553] GetFileType (hFile=0xf0) returned 0x1 [0077.553] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0077.553] WriteFile (in: hFile=0xf0, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0077.720] GetFileType (hFile=0xf0) returned 0x1 [0077.720] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0077.720] GetFileType (hFile=0xf0) returned 0x1 [0077.720] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0077.720] WriteFile (in: hFile=0xf0, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0077.871] GetFileType (hFile=0xf0) returned 0x1 [0077.872] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0077.872] GetFileType (hFile=0xf0) returned 0x1 [0077.872] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0077.872] WriteFile (in: hFile=0xf0, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0078.022] GetFileType (hFile=0xf0) returned 0x1 [0078.022] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0078.022] GetFileType (hFile=0xf0) returned 0x1 [0078.022] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0078.022] WriteFile (in: hFile=0xf0, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0078.215] GetFileType (hFile=0xf0) returned 0x1 [0078.215] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0078.215] GetFileType (hFile=0xf0) returned 0x1 [0078.215] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0078.215] WriteFile (in: hFile=0xf0, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0078.456] GetFileType (hFile=0xf0) returned 0x1 [0078.456] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0078.456] GetFileType (hFile=0xf0) returned 0x1 [0078.456] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0078.456] WriteFile (in: hFile=0xf0, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0078.679] GetFileType (hFile=0xf0) returned 0x1 [0078.679] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0078.679] GetFileType (hFile=0xf0) returned 0x1 [0078.679] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0078.679] WriteFile (in: hFile=0xf0, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0078.838] GetFileType (hFile=0xf0) returned 0x1 [0078.839] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0078.839] ReadFile (in: hFile=0xf0, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0078.977] SetEvent (hEvent=0xa0) returned 1 [0078.977] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0078.978] SetEvent (hEvent=0xa0) returned 1 [0078.978] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0079.026] GetFileType (hFile=0xf0) returned 0x1 [0079.026] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0079.026] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0079.131] GetFileType (hFile=0xf0) returned 0x1 [0079.131] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0079.131] ReadFile (in: hFile=0xf0, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0079.285] SetEvent (hEvent=0x6c) returned 1 [0079.285] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0079.286] SetEvent (hEvent=0x6c) returned 1 [0079.286] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0079.333] GetFileType (hFile=0xf0) returned 0x1 [0079.333] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0079.333] WriteFile (in: hFile=0xf0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0079.428] GetFileType (hFile=0xf0) returned 0x1 [0079.428] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x1800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0079.428] ReadFile (in: hFile=0xf0, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0079.534] SetEvent (hEvent=0xa0) returned 1 [0079.535] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0079.541] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0079.541] SetEvent (hEvent=0xa0) returned 1 [0079.541] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0079.606] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0079.707] GetFileType (hFile=0xf0) returned 0x1 [0079.707] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0079.707] WriteFile (in: hFile=0xf0, lpBuffer=0x14c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0079.855] GetFileType (hFile=0xf0) returned 0x1 [0079.855] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x2000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0079.855] ReadFile (in: hFile=0xf0, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x28df5c, lpOverlapped=0x0) returned 1 [0079.886] SetEvent (hEvent=0x6c) returned 1 [0079.901] GetFileType (hFile=0xf0) returned 0x1 [0079.901] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0079.901] WriteFile (in: hFile=0xf0, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x28df5c, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429b48*=0x28df5c, lpOverlapped=0x12429b54) returned 1 [0079.989] GetFileType (hFile=0xf0) returned 0x1 [0079.989] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x228df5c, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0079.989] ReadFile (in: hFile=0xf0, lpBuffer=0x14400000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14400000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0079.989] CloseHandle (hObject=0xf0) returned 1 [0079.989] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0080.056] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0080.270] SetEvent (hEvent=0xa0) returned 1 [0080.270] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0080.270] SetEvent (hEvent=0xa0) returned 1 [0080.270] SwitchToThread () returned 1 [0080.334] SetEvent (hEvent=0x6c) returned 1 [0080.334] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0081.441] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0081.523] SetEvent (hEvent=0xa0) returned 1 [0081.523] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0081.523] SetEvent (hEvent=0xa0) returned 1 [0081.523] SwitchToThread () returned 1 [0081.524] SetEvent (hEvent=0xa0) returned 1 [0081.525] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0081.543] SetEvent (hEvent=0x6c) returned 1 [0081.558] SwitchToThread () returned 1 [0081.657] SetEvent (hEvent=0x6c) returned 1 [0081.657] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0081.831] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0081.831] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0081.853] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0081.853] SetEvent (hEvent=0x7c) returned 1 [0081.853] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0081.922] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0081.922] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0081.927] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0081.927] SetEvent (hEvent=0xac) returned 1 [0081.927] SetEvent (hEvent=0x7c) returned 1 [0082.032] GetFileType (hFile=0xf0) returned 0x1 [0082.032] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0082.032] WriteFile (in: hFile=0xf0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0082.134] GetFileType (hFile=0xf0) returned 0x1 [0082.134] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x2000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0082.134] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0082.259] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0082.271] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0082.718] SetEvent (hEvent=0x6c) returned 1 [0082.718] SetEvent (hEvent=0xa0) returned 1 [0082.719] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0084.249] SetEvent (hEvent=0x6c) returned 1 [0084.249] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0084.312] SetEvent (hEvent=0x6c) returned 1 [0084.312] SetEvent (hEvent=0x7c) returned 1 [0084.314] SwitchToThread () returned 1 [0084.392] SetEvent (hEvent=0x6c) returned 1 [0084.392] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0084.566] SetEvent (hEvent=0x7c) returned 1 [0084.566] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0084.713] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0084.713] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0084.789] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0084.789] SetEvent (hEvent=0xa0) returned 1 [0084.789] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0084.902] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0084.902] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0084.942] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0084.942] SetEvent (hEvent=0xac) returned 1 [0084.942] SetEvent (hEvent=0xa0) returned 1 [0084.987] GetFileType (hFile=0xf0) returned 0x1 [0084.987] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0084.987] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0085.090] GetFileType (hFile=0xf0) returned 0x1 [0085.090] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x5000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0085.090] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0085.239] SwitchToThread () returned 1 [0085.242] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0085.519] SetEvent (hEvent=0x6c) returned 1 [0085.519] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0085.551] SetEvent (hEvent=0x6c) returned 1 [0085.551] SwitchToThread () returned 1 [0085.553] SetEvent (hEvent=0x6c) returned 1 [0085.553] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0085.663] SetEvent (hEvent=0xa0) returned 1 [0085.663] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0085.889] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0085.889] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0085.960] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0085.960] SetEvent (hEvent=0x7c) returned 1 [0085.961] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0086.014] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0086.014] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0086.071] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0086.071] SetEvent (hEvent=0xac) returned 1 [0086.071] SetEvent (hEvent=0x7c) returned 1 [0086.117] GetFileType (hFile=0xf0) returned 0x1 [0086.117] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0086.117] WriteFile (in: hFile=0xf0, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0086.277] GetFileType (hFile=0xf0) returned 0x1 [0086.277] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x6800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0086.277] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0086.441] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0086.448] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0086.703] SetEvent (hEvent=0xa0) returned 1 [0086.703] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0086.733] SetEvent (hEvent=0xa0) returned 1 [0086.733] SwitchToThread () returned 1 [0086.741] SetEvent (hEvent=0xa0) returned 1 [0086.741] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0086.844] SetEvent (hEvent=0x7c) returned 1 [0086.844] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0086.999] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0086.999] SetEvent (hEvent=0x7c) returned 1 [0086.999] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0087.040] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0087.040] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0087.041] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0087.041] SetEvent (hEvent=0xac) returned 1 [0087.041] SetEvent (hEvent=0x7c) returned 1 [0087.085] GetFileType (hFile=0xf0) returned 0x1 [0087.085] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0087.085] WriteFile (in: hFile=0xf0, lpBuffer=0x12c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0087.178] GetFileType (hFile=0xf0) returned 0x1 [0087.178] SetFilePointerEx (in: hFile=0xf0, liDistanceToMove=0x8000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0087.178] ReadFile (in: hFile=0xf0, lpBuffer=0x14c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x14c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0087.360] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0087.362] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0087.562] SetEvent (hEvent=0x6c) returned 1 [0087.562] SetEvent (hEvent=0xa0) returned 1 [0087.562] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0088.792] SetEvent (hEvent=0x6c) returned 1 [0088.792] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0088.845] SetEvent (hEvent=0x6c) returned 1 [0088.845] SetEvent (hEvent=0x7c) returned 1 [0088.847] SwitchToThread () returned 1 [0088.909] SetEvent (hEvent=0x6c) returned 1 [0088.909] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0089.031] SetEvent (hEvent=0x7c) returned 1 [0089.032] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0089.125] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0089.125] SetEvent (hEvent=0x7c) returned 1 [0089.125] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0089.202] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0089.202] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0090.035] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0091.125] SetEvent (hEvent=0x7c) returned 1 [0091.125] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0091.126] SetEvent (hEvent=0x7c) returned 1 [0091.126] SwitchToThread () returned 1 [0091.161] SetEvent (hEvent=0x6c) returned 1 [0091.161] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0091.707] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0091.792] SetEvent (hEvent=0x7c) returned 1 [0091.794] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0091.849] SetEvent (hEvent=0x7c) returned 1 [0091.849] SwitchToThread () returned 1 [0091.949] SetEvent (hEvent=0x6c) returned 1 [0091.949] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0092.513] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0092.649] SetEvent (hEvent=0x7c) returned 1 [0092.649] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0092.650] SetEvent (hEvent=0x7c) returned 1 [0092.650] SwitchToThread () returned 1 [0092.724] SetEvent (hEvent=0x6c) returned 1 [0092.724] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0093.134] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0093.305] SetEvent (hEvent=0x7c) returned 1 [0093.305] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0093.305] SetEvent (hEvent=0x7c) returned 1 [0093.305] SwitchToThread () returned 1 [0093.406] SetEvent (hEvent=0x6c) returned 1 [0093.406] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0093.845] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0093.932] SetEvent (hEvent=0x7c) returned 1 [0093.932] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0093.947] SetEvent (hEvent=0x7c) returned 1 [0093.947] SwitchToThread () returned 1 [0093.966] SetEvent (hEvent=0x6c) returned 1 [0093.966] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0094.557] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0094.617] SetEvent (hEvent=0x7c) returned 1 [0094.617] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0094.619] SetEvent (hEvent=0x7c) returned 1 [0094.619] SwitchToThread () returned 1 [0094.665] SetEvent (hEvent=0x6c) returned 1 [0094.665] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0095.049] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0095.258] SetEvent (hEvent=0x7c) returned 1 [0095.258] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0095.261] SetEvent (hEvent=0x7c) returned 1 [0095.264] SwitchToThread () returned 1 [0095.330] SetEvent (hEvent=0x6c) returned 1 [0095.330] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0095.740] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0095.917] SetEvent (hEvent=0x7c) returned 1 [0095.921] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0095.988] SetEvent (hEvent=0x7c) returned 1 [0095.988] SwitchToThread () returned 1 [0096.101] SetEvent (hEvent=0x6c) returned 1 [0096.101] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0096.882] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0097.069] SetEvent (hEvent=0x7c) returned 1 [0097.069] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0097.125] SetEvent (hEvent=0x7c) returned 1 [0097.125] SwitchToThread () returned 1 [0097.180] SetEvent (hEvent=0x6c) returned 1 [0097.180] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0097.781] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0097.860] SetEvent (hEvent=0x7c) returned 1 [0097.860] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0097.861] SetEvent (hEvent=0x7c) returned 1 [0097.861] SwitchToThread () returned 1 [0097.885] SetEvent (hEvent=0x6c) returned 1 [0097.885] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0098.902] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0098.952] SetEvent (hEvent=0x7c) returned 1 [0098.952] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0099.004] SetEvent (hEvent=0x7c) returned 1 [0099.004] SwitchToThread () returned 1 [0099.122] SetEvent (hEvent=0x6c) returned 1 [0099.122] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0099.670] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0099.942] SetEvent (hEvent=0x7c) returned 1 [0099.942] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0099.996] SetEvent (hEvent=0x7c) returned 1 [0099.996] SwitchToThread () returned 1 [0100.102] SetEvent (hEvent=0x6c) returned 1 [0100.102] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0100.821] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0100.935] SetEvent (hEvent=0x7c) returned 1 [0100.935] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0100.992] SetEvent (hEvent=0x7c) returned 1 [0100.992] SwitchToThread () returned 1 [0101.076] SetEvent (hEvent=0x6c) returned 1 [0101.076] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0101.414] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0101.442] SetEvent (hEvent=0x6c) returned 1 [0101.442] SetEvent (hEvent=0x7c) returned 1 [0101.443] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0101.601] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0101.667] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0101.989] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0102.153] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0102.480] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0102.637] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0102.999] SetEvent (hEvent=0x7c) returned 1 [0102.999] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0103.000] SetEvent (hEvent=0x7c) returned 1 [0103.000] SetEvent (hEvent=0x6c) returned 1 [0103.000] CloseHandle (hObject=0xbc) returned 1 [0103.000] CloseHandle (hObject=0xe0) returned 1 [0103.000] CloseHandle (hObject=0xcc) returned 1 [0103.000] CloseHandle (hObject=0xd8) returned 1 [0103.000] CloseHandle (hObject=0xc8) returned 1 [0103.000] CloseHandle (hObject=0xd0) returned 1 [0103.000] CloseHandle (hObject=0x98) returned 1 [0103.000] CloseHandle (hObject=0xe4) returned 1 [0103.000] CloseHandle (hObject=0xc0) returned 1 [0103.000] CloseHandle (hObject=0xdc) returned 1 [0103.001] CloseHandle (hObject=0x100) returned 1 [0103.001] CloseHandle (hObject=0xf0) returned 1 [0103.001] SwitchToThread () returned 1 [0103.019] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0104.167] SetEvent (hEvent=0x7c) returned 1 [0104.167] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0104.168] SetEvent (hEvent=0x7c) returned 1 [0104.168] SwitchToThread () returned 1 [0104.258] SetEvent (hEvent=0x6c) returned 1 [0104.258] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0104.622] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0104.761] SetEvent (hEvent=0x7c) returned 1 [0104.761] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0104.761] SetEvent (hEvent=0x7c) returned 1 [0104.761] SwitchToThread () returned 1 [0104.847] SetEvent (hEvent=0x6c) returned 1 [0104.847] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0105.061] SetEvent (hEvent=0x6c) returned 1 [0105.061] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0105.193] SetEvent (hEvent=0x6c) returned 1 [0105.193] SwitchToThread () returned 1 [0105.194] SetEvent (hEvent=0x6c) returned 1 [0105.194] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0105.194] SetEvent (hEvent=0x6c) returned 1 [0105.194] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0105.195] SetEvent (hEvent=0x6c) returned 1 [0105.195] SwitchToThread () returned 1 [0105.290] SetEvent (hEvent=0x7c) returned 1 [0105.290] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0106.450] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0106.497] SetEvent (hEvent=0x6c) returned 1 [0106.497] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0106.505] SetEvent (hEvent=0x6c) returned 1 [0106.505] SwitchToThread () returned 1 [0106.569] SetEvent (hEvent=0x7c) returned 1 [0106.569] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0106.957] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0107.152] SetEvent (hEvent=0x6c) returned 1 [0107.152] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0107.160] SetEvent (hEvent=0x6c) returned 1 [0107.160] SwitchToThread () returned 1 [0107.245] SetEvent (hEvent=0x7c) returned 1 [0107.249] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0107.635] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0107.786] SetEvent (hEvent=0x6c) returned 1 [0107.786] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0107.789] SetEvent (hEvent=0x6c) returned 1 [0107.792] SwitchToThread () returned 1 [0107.811] SetEvent (hEvent=0x7c) returned 1 [0107.811] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0108.413] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0108.478] SetEvent (hEvent=0x6c) returned 1 [0108.478] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0108.479] SetEvent (hEvent=0x6c) returned 1 [0108.479] SwitchToThread () returned 1 [0108.515] SetEvent (hEvent=0x7c) returned 1 [0108.515] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0109.065] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0109.102] SetEvent (hEvent=0x6c) returned 1 [0109.102] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0109.103] SetEvent (hEvent=0x6c) returned 1 [0109.103] SwitchToThread () returned 1 [0109.162] SetEvent (hEvent=0x7c) returned 1 [0109.162] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0109.509] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0109.673] SetEvent (hEvent=0x6c) returned 1 [0109.673] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0109.673] SetEvent (hEvent=0x6c) returned 1 [0109.673] SwitchToThread () returned 1 [0109.759] SetEvent (hEvent=0x7c) returned 1 [0109.759] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0110.145] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0110.395] SetEvent (hEvent=0x6c) returned 1 [0110.395] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0110.396] SetEvent (hEvent=0x6c) returned 1 [0110.396] SwitchToThread () returned 1 [0110.410] SetEvent (hEvent=0x7c) returned 1 [0110.410] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0110.924] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0110.980] SetEvent (hEvent=0x6c) returned 1 [0110.980] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0110.980] SetEvent (hEvent=0x6c) returned 1 [0110.981] SwitchToThread () returned 1 [0111.021] SetEvent (hEvent=0x7c) returned 1 [0111.021] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0111.374] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0111.527] SetEvent (hEvent=0x6c) returned 1 [0111.527] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0111.527] SetEvent (hEvent=0x6c) returned 1 [0111.527] SwitchToThread () returned 1 [0111.594] SetEvent (hEvent=0x7c) returned 1 [0111.594] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0111.777] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0111.961] SetEvent (hEvent=0x7c) returned 1 [0111.961] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0112.063] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0112.063] SetEvent (hEvent=0x7c) returned 1 [0112.063] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0112.065] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0112.065] SetEvent (hEvent=0x7c) returned 1 [0112.065] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0112.065] SetEvent (hEvent=0x7c) returned 1 [0112.065] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0112.067] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0112.067] SetEvent (hEvent=0x7c) returned 1 [0112.113] GetFileType (hFile=0xbc) returned 0x1 [0112.113] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.113] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0112.214] GetFileType (hFile=0xbc) returned 0x1 [0112.214] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.214] GetFileType (hFile=0xbc) returned 0x1 [0112.214] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.214] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0112.307] GetFileType (hFile=0xbc) returned 0x1 [0112.307] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.307] GetFileType (hFile=0xbc) returned 0x1 [0112.307] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.307] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0112.413] GetFileType (hFile=0xbc) returned 0x1 [0112.413] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.413] GetFileType (hFile=0xbc) returned 0x1 [0112.413] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.413] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0112.512] GetFileType (hFile=0xbc) returned 0x1 [0112.512] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.512] GetFileType (hFile=0xbc) returned 0x1 [0112.512] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.512] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0112.611] GetFileType (hFile=0xbc) returned 0x1 [0112.611] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.611] GetFileType (hFile=0xbc) returned 0x1 [0112.611] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.611] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0112.709] GetFileType (hFile=0xbc) returned 0x1 [0112.709] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.709] GetFileType (hFile=0xbc) returned 0x1 [0112.709] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.709] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0112.805] GetFileType (hFile=0xbc) returned 0x1 [0112.805] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.805] GetFileType (hFile=0xbc) returned 0x1 [0112.805] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.805] WriteFile (in: hFile=0xbc, lpBuffer=0x13400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0112.913] GetFileType (hFile=0xbc) returned 0x1 [0112.913] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0112.913] ReadFile (in: hFile=0xbc, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0113.064] SetEvent (hEvent=0x6c) returned 1 [0113.065] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0113.071] SetEvent (hEvent=0x6c) returned 1 [0113.071] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0113.078] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0113.125] GetFileType (hFile=0xbc) returned 0x1 [0113.125] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0113.125] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0113.226] GetFileType (hFile=0xbc) returned 0x1 [0113.227] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x1000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0113.227] ReadFile (in: hFile=0xbc, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0113.369] SetEvent (hEvent=0x7c) returned 1 [0113.369] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0113.376] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0113.376] SetEvent (hEvent=0x7c) returned 1 [0113.376] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0113.384] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0113.432] GetFileType (hFile=0xbc) returned 0x1 [0113.432] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0113.432] WriteFile (in: hFile=0xbc, lpBuffer=0x14400000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x14400000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0113.538] GetFileType (hFile=0xbc) returned 0x1 [0113.538] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x1800000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0113.538] ReadFile (in: hFile=0xbc, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x800000, lpOverlapped=0x0) returned 1 [0113.654] SetEvent (hEvent=0x6c) returned 1 [0113.655] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0113.662] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0113.662] SetEvent (hEvent=0x6c) returned 1 [0113.662] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0113.668] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0113.727] GetFileType (hFile=0xbc) returned 0x1 [0113.728] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0113.728] WriteFile (in: hFile=0xbc, lpBuffer=0x13c00000*, nNumberOfBytesToWrite=0x800000, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x13c00000*, lpNumberOfBytesWritten=0x12429b48*=0x800000, lpOverlapped=0x12429b54) returned 1 [0113.827] GetFileType (hFile=0xbc) returned 0x1 [0113.827] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x2000000, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0113.827] ReadFile (in: hFile=0xbc, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x28df5c, lpOverlapped=0x0) returned 1 [0113.859] SetEvent (hEvent=0x7c) returned 1 [0113.875] GetFileType (hFile=0xbc) returned 0x1 [0113.875] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0113.875] WriteFile (in: hFile=0xbc, lpBuffer=0x1280a000*, nNumberOfBytesToWrite=0x28df5c, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1280a000*, lpNumberOfBytesWritten=0x12429b48*=0x28df5c, lpOverlapped=0x12429b54) returned 1 [0113.908] GetFileType (hFile=0xbc) returned 0x1 [0113.908] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x228df5c, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0113.908] ReadFile (in: hFile=0xbc, lpBuffer=0x12c00000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x12c00000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0113.908] CloseHandle (hObject=0xbc) returned 1 [0113.908] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0113.974] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0114.128] SetEvent (hEvent=0x6c) returned 1 [0114.128] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0114.128] SetEvent (hEvent=0x6c) returned 1 [0114.128] SwitchToThread () returned 1 [0114.252] SetEvent (hEvent=0x7c) returned 1 [0114.252] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0115.681] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0115.838] SetEvent (hEvent=0x6c) returned 1 [0115.841] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0115.867] SetEvent (hEvent=0x6c) returned 1 [0115.867] SwitchToThread () returned 1 [0115.890] SetEvent (hEvent=0x7c) returned 1 [0115.890] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0116.431] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0116.634] SetEvent (hEvent=0x6c) returned 1 [0116.634] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0116.636] SetEvent (hEvent=0x6c) returned 1 [0116.636] SwitchToThread () returned 1 [0116.653] SetEvent (hEvent=0x7c) returned 1 [0116.653] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0117.176] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0117.345] SetEvent (hEvent=0x6c) returned 1 [0117.346] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0117.346] SetEvent (hEvent=0x6c) returned 1 [0117.346] SwitchToThread () returned 1 [0117.436] SetEvent (hEvent=0x7c) returned 1 [0117.436] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0117.782] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0117.930] SetEvent (hEvent=0x6c) returned 1 [0117.930] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0117.931] SetEvent (hEvent=0x6c) returned 1 [0117.931] SwitchToThread () returned 1 [0117.934] SetEvent (hEvent=0x7c) returned 1 [0117.934] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0118.407] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0118.513] SetEvent (hEvent=0x6c) returned 1 [0118.513] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0118.513] SetEvent (hEvent=0x6c) returned 1 [0118.513] SwitchToThread () returned 1 [0118.606] SetEvent (hEvent=0x7c) returned 1 [0118.606] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0119.407] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0119.448] SetEvent (hEvent=0x6c) returned 1 [0119.448] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0119.454] SetEvent (hEvent=0x6c) returned 1 [0119.454] SwitchToThread () returned 1 [0119.521] SetEvent (hEvent=0x7c) returned 1 [0119.521] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0119.896] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0120.103] SetEvent (hEvent=0x6c) returned 1 [0120.103] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0120.105] SetEvent (hEvent=0x6c) returned 1 [0120.105] SwitchToThread () returned 1 [0120.175] SetEvent (hEvent=0x7c) returned 1 [0120.175] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0120.567] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0120.799] SetEvent (hEvent=0x6c) returned 1 [0120.799] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0120.849] SetEvent (hEvent=0x6c) returned 1 [0120.849] SwitchToThread () returned 1 [0120.982] SetEvent (hEvent=0x7c) returned 1 [0120.982] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0121.570] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0121.785] SetEvent (hEvent=0x6c) returned 1 [0121.785] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0121.789] SetEvent (hEvent=0x6c) returned 1 [0121.789] SwitchToThread () returned 1 [0121.889] SetEvent (hEvent=0x7c) returned 1 [0121.889] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0122.326] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0122.489] SetEvent (hEvent=0x6c) returned 1 [0122.489] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0122.499] SetEvent (hEvent=0x6c) returned 1 [0122.499] SwitchToThread () returned 1 [0122.599] SetEvent (hEvent=0x7c) returned 1 [0122.599] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0123.124] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0123.250] SetEvent (hEvent=0x6c) returned 1 [0123.250] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0123.303] SetEvent (hEvent=0x6c) returned 1 [0123.303] SwitchToThread () returned 1 [0123.369] SetEvent (hEvent=0x7c) returned 1 [0123.369] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0124.754] CloseHandle (hObject=0xf0) returned 1 [0124.755] CloseHandle (hObject=0xe8) returned 1 [0124.755] CloseHandle (hObject=0xbc) returned 1 [0124.755] CloseHandle (hObject=0x100) returned 1 [0124.755] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0124.836] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0124.950] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0124.986] SetEvent (hEvent=0x6c) returned 1 [0124.986] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0124.986] SetEvent (hEvent=0x6c) returned 1 [0124.986] SetEvent (hEvent=0x7c) returned 1 [0124.986] CloseHandle (hObject=0x100) returned 1 [0124.987] CloseHandle (hObject=0xe4) returned 1 [0124.987] CloseHandle (hObject=0xe8) returned 1 [0124.987] CloseHandle (hObject=0xbc) returned 1 [0124.987] SwitchToThread () returned 1 [0124.989] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.005] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.019] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.095] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.248] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.298] SetEvent (hEvent=0x7c) returned 1 [0125.298] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0125.300] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.300] SetEvent (hEvent=0x7c) returned 1 [0125.300] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0125.301] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.301] CloseHandle (hObject=0x114) returned 1 [0125.301] CloseHandle (hObject=0x110) returned 1 [0125.301] CloseHandle (hObject=0x10c) returned 1 [0125.301] CloseHandle (hObject=0x108) returned 1 [0125.301] CloseHandle (hObject=0x104) returned 1 [0125.301] CloseHandle (hObject=0xfc) returned 1 [0125.302] CloseHandle (hObject=0xf8) returned 1 [0125.302] CloseHandle (hObject=0xf4) returned 1 [0125.302] CloseHandle (hObject=0xec) returned 1 [0125.302] CloseHandle (hObject=0xe0) returned 1 [0125.302] CloseHandle (hObject=0xcc) returned 1 [0125.302] CloseHandle (hObject=0xd8) returned 1 [0125.302] CloseHandle (hObject=0xc8) returned 1 [0125.302] CloseHandle (hObject=0xd0) returned 1 [0125.302] CloseHandle (hObject=0x98) returned 1 [0125.302] CloseHandle (hObject=0xc0) returned 1 [0125.302] CloseHandle (hObject=0xdc) returned 1 [0125.302] CloseHandle (hObject=0x100) returned 1 [0125.303] CloseHandle (hObject=0xe4) returned 1 [0125.303] CloseHandle (hObject=0xe8) returned 1 [0125.303] CloseHandle (hObject=0xbc) returned 1 [0125.303] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.561] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.637] SetEvent (hEvent=0xa0) returned 1 [0125.637] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.638] SetEvent (hEvent=0xa0) returned 1 [0125.638] SetEvent (hEvent=0x7c) returned 1 [0125.639] CloseHandle (hObject=0x118) returned 1 [0125.639] CloseHandle (hObject=0xf0) returned 1 [0125.639] CloseHandle (hObject=0x114) returned 1 [0125.639] CloseHandle (hObject=0x110) returned 1 [0125.639] CloseHandle (hObject=0xdc) returned 1 [0125.639] CloseHandle (hObject=0x100) returned 1 [0125.639] CloseHandle (hObject=0xe4) returned 1 [0125.639] CloseHandle (hObject=0xe8) returned 1 [0125.639] CloseHandle (hObject=0xbc) returned 1 [0125.639] CloseHandle (hObject=0x11c) returned 1 [0125.639] SwitchToThread () returned 1 [0125.641] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.665] SetEvent (hEvent=0x6c) returned 1 [0125.665] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.665] SetEvent (hEvent=0x6c) returned 1 [0125.666] SetEvent (hEvent=0x7c) returned 1 [0125.666] CloseHandle (hObject=0xe4) returned 1 [0125.666] CloseHandle (hObject=0xe8) returned 1 [0125.666] CloseHandle (hObject=0xbc) returned 1 [0125.666] CloseHandle (hObject=0x11c) returned 1 [0125.666] CloseHandle (hObject=0x120) returned 1 [0125.666] SwitchToThread () returned 1 [0125.667] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.725] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.750] SetEvent (hEvent=0x6c) returned 1 [0125.750] SetEvent (hEvent=0x7c) returned 1 [0125.750] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.752] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.758] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.761] SetEvent (hEvent=0x6c) returned 1 [0125.761] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.761] SetEvent (hEvent=0x6c) returned 1 [0125.761] SwitchToThread () returned 1 [0125.762] SetEvent (hEvent=0x7c) returned 1 [0125.762] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.769] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0125.891] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0126.082] SetEvent (hEvent=0x7c) returned 1 [0126.082] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0126.083] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0126.083] SetEvent (hEvent=0x7c) returned 1 [0126.083] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0126.121] SwitchToThread () returned 1 [0126.121] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0126.122] SetEvent (hEvent=0x7c) returned 1 [0126.122] ReadFile (in: hFile=0x184, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x8f, lpOverlapped=0x0) returned 1 [0126.122] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0126.122] SetEvent (hEvent=0x7c) returned 1 [0126.122] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0126.123] GetFileType (hFile=0x184) returned 0x1 [0126.123] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0126.123] WriteFile (in: hFile=0x184, lpBuffer=0x12594000*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x12594000*, lpNumberOfBytesWritten=0x12429608*=0x8f, lpOverlapped=0x12429614) returned 1 [0126.123] GetFileType (hFile=0x184) returned 0x1 [0126.123] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x8f, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0126.123] ReadFile (in: hFile=0x184, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0126.123] CloseHandle (hObject=0x184) returned 1 [0126.123] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.123] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0126.124] WriteFile (in: hFile=0x184, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0126.124] CloseHandle (hObject=0x184) returned 1 [0126.124] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa7, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124292dc*=0xa7) returned 1 [0126.124] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0126.125] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.125] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0126.125] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442040 | out: pbBuffer=0x12442040) returned 1 [0126.126] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127fe102 | out: pbBuffer=0x127fe102) returned 1 [0126.126] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fe17b | out: pbBuffer=0x127fe17b) returned 1 [0126.126] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fe187 | out: pbBuffer=0x127fe187) returned 1 [0126.128] SetEvent (hEvent=0xa0) returned 1 [0126.128] ReadFile (in: hFile=0x184, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x5c, lpOverlapped=0x0) returned 1 [0126.128] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0126.128] SetEvent (hEvent=0xa0) returned 1 [0126.129] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0126.129] GetFileType (hFile=0x184) returned 0x1 [0126.129] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0126.129] WriteFile (in: hFile=0x184, lpBuffer=0x124d6000*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x124d6000*, lpNumberOfBytesWritten=0x12429608*=0x5c, lpOverlapped=0x12429614) returned 1 [0126.129] GetFileType (hFile=0x184) returned 0x1 [0126.129] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x5c, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0126.129] ReadFile (in: hFile=0x184, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0126.129] CloseHandle (hObject=0x184) returned 1 [0126.129] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.129] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0126.130] WriteFile (in: hFile=0x184, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0126.130] CloseHandle (hObject=0x184) returned 1 [0126.130] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa5, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124292dc*=0xa5) returned 1 [0126.131] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b)) returned 1 [0126.131] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.131] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0126.131] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0126.132] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0126.132] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127fe002 | out: pbBuffer=0x127fe002) returned 1 [0126.132] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fe057 | out: pbBuffer=0x127fe057) returned 1 [0126.132] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fe082 | out: pbBuffer=0x127fe082) returned 1 [0126.132] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x127fe0c5 | out: pbBuffer=0x127fe0c5) returned 1 [0126.133] SetEvent (hEvent=0x7c) returned 1 [0126.133] ReadFile (in: hFile=0x184, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x5b, lpOverlapped=0x0) returned 1 [0126.133] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0126.134] SetEvent (hEvent=0x7c) returned 1 [0126.134] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0126.134] GetFileType (hFile=0x184) returned 0x1 [0126.134] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0126.134] WriteFile (in: hFile=0x184, lpBuffer=0x124d6000*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x124d6000*, lpNumberOfBytesWritten=0x12429608*=0x5b, lpOverlapped=0x12429614) returned 1 [0126.134] GetFileType (hFile=0x184) returned 0x1 [0126.134] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x5b, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0126.134] ReadFile (in: hFile=0x184, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0126.135] CloseHandle (hObject=0x184) returned 1 [0126.135] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.135] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0126.135] WriteFile (in: hFile=0x184, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0126.135] CloseHandle (hObject=0x184) returned 1 [0126.135] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12476580*, nNumberOfCharsToWrite=0xa3, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x12476580*, lpNumberOfCharsWritten=0x124292dc*=0xa3) returned 1 [0126.136] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5)) returned 1 [0126.136] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.136] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.136] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.136] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.136] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.137] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.137] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0126.137] CloseHandle (hObject=0x184) returned 1 [0126.137] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.138] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.138] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.138] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429728 | out: lpMode=0x12429728) returned 0 [0126.138] WriteFile (in: hFile=0x184, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242972c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242972c*=0x1033, lpOverlapped=0x0) returned 1 [0126.139] CloseHandle (hObject=0x184) returned 1 [0126.140] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.140] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.140] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.140] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales\\*", lpFindFileData=0x1242939c | out: lpFindFileData=0x1242939c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfccfdd80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfccfdd80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfccfdd80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfccfdd80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfccfdd80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfccfdd80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd02ba0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0126.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0126.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0126.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0126.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0126.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0126.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0126.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0126.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0126.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0126.140] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0126.142] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.142] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.142] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.142] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.142] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.142] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.142] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.142] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.142] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.143] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.143] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.143] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.144] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.144] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.144] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.144] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.144] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.144] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.145] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.146] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.146] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.146] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.147] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.147] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.147] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.147] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.148] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.148] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.148] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.148] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.149] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.149] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.149] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.149] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.150] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.150] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.150] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.151] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.151] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.151] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.151] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.151] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.151] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.152] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.152] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.152] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.153] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.153] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.153] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.154] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.154] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.154] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.154] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.154] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.154] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.155] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.155] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.155] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.155] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.155] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.155] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.156] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.156] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.156] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.157] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.157] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.157] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.157] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.158] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.158] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.158] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.158] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.158] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.159] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.159] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.159] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.159] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.159] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.159] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.160] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.160] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.160] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.160] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.161] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.161] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.161] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.161] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.162] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.162] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.162] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.162] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.163] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.163] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.163] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ro\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.163] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.163] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.163] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ru\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.164] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.164] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.164] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sk\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.164] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.164] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.165] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.165] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.165] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.165] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.166] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.166] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.166] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sv\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.166] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.167] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.167] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/th\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.167] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.167] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.167] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/tr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.168] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.168] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.168] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/uk\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.168] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.168] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.169] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/vi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.169] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.169] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.169] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/zh_CN\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.170] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.170] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.170] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/zh_TW\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.170] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.170] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.170] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.170] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.170] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293b8 | out: lpFindFileData=0x124293b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.170] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.171] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.171] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x124295bc | out: lpMode=0x124295bc) returned 0 [0126.171] CloseHandle (hObject=0x184) returned 1 [0126.171] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.171] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.171] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.171] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.172] WriteFile (in: hFile=0x184, lpBuffer=0x12454000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12454000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.172] CloseHandle (hObject=0x184) returned 1 [0126.176] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.176] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.177] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.177] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcd50da0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd50da0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.177] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcd50da0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd50da0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.177] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcd50da0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcd50da0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd534b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.177] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.177] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.177] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.177] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.177] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.177] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.178] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.178] ReadFile (in: hFile=0x184, lpBuffer=0x127fe100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe100*, lpNumberOfBytesRead=0x124295f0*=0xf6, lpOverlapped=0x0) returned 1 [0126.179] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6)) returned 1 [0126.179] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.179] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.179] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.179] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.179] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.179] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0126.180] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.180] CloseHandle (hObject=0x15c) returned 1 [0126.180] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.180] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.180] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0126.180] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.180] WriteFile (in: hFile=0x15c, lpBuffer=0x12456600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12456600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.181] CloseHandle (hObject=0x15c) returned 1 [0126.182] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.182] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.182] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.182] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcd64620, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd64620, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.182] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcd64620, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd64620, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.182] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcd64620, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcd64620, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd66d30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.182] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.182] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.182] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.182] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.182] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.183] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0126.183] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.183] ReadFile (in: hFile=0x15c, lpBuffer=0x127fe200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe200*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.184] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0126.184] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.184] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.184] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.184] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.185] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.185] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0126.185] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.185] CloseHandle (hObject=0x160) returned 1 [0126.185] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.185] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.185] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0126.186] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.186] WriteFile (in: hFile=0x160, lpBuffer=0x12458c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12458c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.187] CloseHandle (hObject=0x160) returned 1 [0126.187] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.187] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.188] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.188] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcd70970, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd70970, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.188] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcd70970, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd70970, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.188] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcd70970, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcd70970, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd75790, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.188] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.188] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.188] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.188] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.188] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.188] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0126.188] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.189] ReadFile (in: hFile=0x160, lpBuffer=0x127fe300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe300*, lpNumberOfBytesRead=0x124295f0*=0xcf, lpOverlapped=0x0) returned 1 [0126.189] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1 [0126.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.190] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.190] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.190] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0126.190] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.190] CloseHandle (hObject=0x164) returned 1 [0126.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.191] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.191] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0126.191] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.191] WriteFile (in: hFile=0x164, lpBuffer=0x127b7300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127b7300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.192] CloseHandle (hObject=0x164) returned 1 [0126.192] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.192] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.192] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.193] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcd7ccc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd7ccc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.193] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcd7ccc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd7ccc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.193] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcd7ccc0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcd7ccc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd81ae0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.193] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.193] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.193] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.193] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.193] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.193] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0126.193] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.194] ReadFile (in: hFile=0x164, lpBuffer=0x127fe400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe400*, lpNumberOfBytesRead=0x124295f0*=0xde, lpOverlapped=0x0) returned 1 [0126.194] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0126.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.195] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.195] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.195] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0126.195] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.195] CloseHandle (hObject=0x168) returned 1 [0126.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.195] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.195] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0126.196] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.196] WriteFile (in: hFile=0x168, lpBuffer=0x127b9900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127b9900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.197] CloseHandle (hObject=0x168) returned 1 [0126.197] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.197] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.197] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.198] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcd89010, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd89010, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcd89010, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd89010, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcd89010, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcd89010, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd8de30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.198] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.198] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.198] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.198] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0126.198] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.199] ReadFile (in: hFile=0x168, lpBuffer=0x127fe500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe500*, lpNumberOfBytesRead=0x124295f0*=0xd8, lpOverlapped=0x0) returned 1 [0126.200] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0126.200] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.200] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.200] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.200] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.200] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.200] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0126.200] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.200] CloseHandle (hObject=0x16c) returned 1 [0126.200] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.200] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.201] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0126.201] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.201] WriteFile (in: hFile=0x16c, lpBuffer=0x124ac000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124ac000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.202] CloseHandle (hObject=0x16c) returned 1 [0126.203] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.204] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.204] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.205] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcd95360, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd95360, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.205] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcd95360, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd95360, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.205] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcd95360, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcd95360, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcd9c890, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.205] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.205] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.205] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.205] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.205] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.205] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0126.205] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.205] ReadFile (in: hFile=0x16c, lpBuffer=0x127fe600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe600*, lpNumberOfBytesRead=0x124295f0*=0xd9, lpOverlapped=0x0) returned 1 [0126.207] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0126.207] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.207] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.207] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.207] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.207] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.207] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0126.207] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.208] CloseHandle (hObject=0x144) returned 1 [0126.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.208] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0126.209] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.209] WriteFile (in: hFile=0x144, lpBuffer=0x124ae600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124ae600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.210] CloseHandle (hObject=0x144) returned 1 [0126.210] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.210] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.210] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.210] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcda8be0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcda8be0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.210] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcda8be0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcda8be0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.211] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcda8be0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcda8be0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcdab2f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.211] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.211] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.211] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0126.211] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.211] ReadFile (in: hFile=0x144, lpBuffer=0x127fe700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe700*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.212] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0126.212] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.213] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.213] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.213] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.213] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.213] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0126.213] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.213] CloseHandle (hObject=0x148) returned 1 [0126.213] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.213] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.213] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0126.214] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.214] WriteFile (in: hFile=0x148, lpBuffer=0x124b0c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124b0c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.215] CloseHandle (hObject=0x148) returned 1 [0126.215] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.215] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.215] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.215] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcdb4f30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcdb4f30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcdb4f30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcdb4f30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcdb4f30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcdb4f30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcdb7640, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.215] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.216] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.216] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.216] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.216] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0126.216] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.216] ReadFile (in: hFile=0x148, lpBuffer=0x127fe800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe800*, lpNumberOfBytesRead=0x124295f0*=0xd0, lpOverlapped=0x0) returned 1 [0126.217] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0126.217] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.217] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.217] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.217] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.218] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.218] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0126.218] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.218] CloseHandle (hObject=0x14c) returned 1 [0126.218] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.218] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.218] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0126.218] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.219] WriteFile (in: hFile=0x14c, lpBuffer=0x12789300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12789300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.220] CloseHandle (hObject=0x14c) returned 1 [0126.220] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.220] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.220] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.232] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcdc1280, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcdc1280, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.232] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcdc1280, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcdc1280, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.232] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcdc1280, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcdc1280, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcdc3990, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.232] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.232] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.232] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.233] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.233] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.233] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0126.233] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.233] ReadFile (in: hFile=0x14c, lpBuffer=0x127fe900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fe900*, lpNumberOfBytesRead=0x124295f0*=0xd1, lpOverlapped=0x0) returned 1 [0126.234] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0126.234] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.234] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.234] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.234] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.234] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.234] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0126.235] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.235] CloseHandle (hObject=0x150) returned 1 [0126.235] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.235] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.235] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0126.235] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.235] WriteFile (in: hFile=0x150, lpBuffer=0x1278b900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1278b900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.236] CloseHandle (hObject=0x150) returned 1 [0126.237] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.237] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.237] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.237] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcdeaa90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcdeaa90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.237] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcdeaa90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcdeaa90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.237] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcdeaa90, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcdeaa90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcded1a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.237] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.237] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.237] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.237] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.237] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.238] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0126.238] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.238] ReadFile (in: hFile=0x150, lpBuffer=0x127fea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fea00*, lpNumberOfBytesRead=0x124295f0*=0xce, lpOverlapped=0x0) returned 1 [0126.239] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0126.239] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.239] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.239] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.239] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.239] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.240] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0126.240] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.240] CloseHandle (hObject=0x154) returned 1 [0126.240] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.240] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.240] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0126.240] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.241] WriteFile (in: hFile=0x154, lpBuffer=0x1279c000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1279c000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.242] CloseHandle (hObject=0x154) returned 1 [0126.242] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.242] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.242] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.242] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcdf6de0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcdf6de0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.242] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcdf6de0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcdf6de0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.242] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcdf6de0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcdf6de0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcdf94f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.242] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.242] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.242] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.242] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.243] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.243] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0126.243] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.243] ReadFile (in: hFile=0x154, lpBuffer=0x127feb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127feb00*, lpNumberOfBytesRead=0x124295f0*=0xce, lpOverlapped=0x0) returned 1 [0126.244] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0126.244] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.244] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.244] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.244] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.244] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.244] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0126.245] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.245] CloseHandle (hObject=0x158) returned 1 [0126.245] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.245] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.245] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0126.245] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.245] WriteFile (in: hFile=0x158, lpBuffer=0x1279e600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1279e600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.246] CloseHandle (hObject=0x158) returned 1 [0126.247] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.247] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.247] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.247] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcdfe310, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcdfe310, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.247] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcdfe310, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcdfe310, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.247] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcdfe310, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcdfe310, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce00a20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.247] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.247] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.247] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.247] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.247] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.248] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0126.248] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.248] ReadFile (in: hFile=0x158, lpBuffer=0x127fec00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fec00*, lpNumberOfBytesRead=0x124295f0*=0xd8, lpOverlapped=0x0) returned 1 [0126.249] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0126.249] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.249] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.249] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.249] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.249] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.249] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0126.249] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.250] CloseHandle (hObject=0xf8) returned 1 [0126.250] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.250] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.250] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0126.253] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.253] WriteFile (in: hFile=0xf8, lpBuffer=0x127a0c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127a0c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.254] CloseHandle (hObject=0xf8) returned 1 [0126.254] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.254] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.254] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.254] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce0f480, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce0f480, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.255] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce0f480, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce0f480, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.255] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfce0f480, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfce0f480, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce11b90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.255] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.255] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.255] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.255] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.255] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.255] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0126.255] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.255] ReadFile (in: hFile=0xf8, lpBuffer=0x127fed00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fed00*, lpNumberOfBytesRead=0x124295f0*=0xd8, lpOverlapped=0x0) returned 1 [0126.258] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0126.258] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.258] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.258] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.258] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.258] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.258] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0126.258] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.258] CloseHandle (hObject=0xfc) returned 1 [0126.259] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.259] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.259] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0126.259] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.259] WriteFile (in: hFile=0xfc, lpBuffer=0x127d9300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127d9300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.260] CloseHandle (hObject=0xfc) returned 1 [0126.260] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.260] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.261] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.261] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce1dee0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce1dee0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.261] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce1dee0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce1dee0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.261] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfce1dee0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfce1dee0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce22d00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.261] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.261] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.261] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.261] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.261] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.261] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0126.262] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.262] ReadFile (in: hFile=0xfc, lpBuffer=0x127fee00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fee00*, lpNumberOfBytesRead=0x124295f0*=0xdb, lpOverlapped=0x0) returned 1 [0126.263] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb)) returned 1 [0126.263] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.263] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.263] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.263] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.264] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.264] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0126.264] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.264] CloseHandle (hObject=0x104) returned 1 [0126.264] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.264] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.264] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0126.264] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.265] WriteFile (in: hFile=0x104, lpBuffer=0x127db900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127db900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.266] CloseHandle (hObject=0x104) returned 1 [0126.266] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.266] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.266] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.266] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce2c940, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce2c940, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.266] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce2c940, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce2c940, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.266] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfce2c940, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfce2c940, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce2f050, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.266] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.266] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.267] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.267] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.267] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.267] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0126.267] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.267] ReadFile (in: hFile=0x104, lpBuffer=0x127fef00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127fef00*, lpNumberOfBytesRead=0x124295f0*=0xd7, lpOverlapped=0x0) returned 1 [0126.268] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0126.268] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.268] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.268] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.268] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.269] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.269] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0126.269] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.269] CloseHandle (hObject=0x108) returned 1 [0126.269] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.269] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.269] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0126.269] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.270] WriteFile (in: hFile=0x108, lpBuffer=0x127f0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127f0000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.271] CloseHandle (hObject=0x108) returned 1 [0126.271] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.271] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.271] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.271] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce38c90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce38c90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.271] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce38c90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce38c90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.271] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfce38c90, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfce38c90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce3b3a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.271] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.271] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.271] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.272] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.272] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.272] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0126.272] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.272] ReadFile (in: hFile=0x108, lpBuffer=0x127ff000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff000*, lpNumberOfBytesRead=0x124295f0*=0xdd, lpOverlapped=0x0) returned 1 [0126.273] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0126.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.273] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.273] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.273] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0126.274] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.274] CloseHandle (hObject=0x10c) returned 1 [0126.274] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.274] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.274] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0126.275] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.275] WriteFile (in: hFile=0x10c, lpBuffer=0x127f2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127f2600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.276] CloseHandle (hObject=0x10c) returned 1 [0126.276] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.276] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.276] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.277] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce44fe0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce44fe0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.277] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce44fe0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce44fe0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.277] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfce44fe0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfce44fe0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce476f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.277] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.277] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.277] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.277] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.277] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.277] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0126.277] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.278] ReadFile (in: hFile=0x10c, lpBuffer=0x127ff100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff100*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.278] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117)) returned 1 [0126.279] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.279] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.279] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.279] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.279] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.279] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0126.279] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.279] CloseHandle (hObject=0x140) returned 1 [0126.279] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.279] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.280] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0126.280] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.281] WriteFile (in: hFile=0x140, lpBuffer=0x127f4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127f4c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.281] CloseHandle (hObject=0x140) returned 1 [0126.282] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.282] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.282] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.282] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce53a40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce53a40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.282] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce53a40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce53a40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.282] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfce53a40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfce53a40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce56150, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.282] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.282] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.282] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.282] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.283] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.283] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0126.283] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.283] ReadFile (in: hFile=0x140, lpBuffer=0x127ff200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff200*, lpNumberOfBytesRead=0x124295f0*=0xeb, lpOverlapped=0x0) returned 1 [0126.284] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0126.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.284] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.284] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.285] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.285] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0126.285] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.285] CloseHandle (hObject=0xd8) returned 1 [0126.285] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.285] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.285] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0126.285] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.286] WriteFile (in: hFile=0xd8, lpBuffer=0x1259d300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1259d300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.287] CloseHandle (hObject=0xd8) returned 1 [0126.287] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.287] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.287] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.287] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce5fd90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce5fd90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.287] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce5fd90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce5fd90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.287] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfce5fd90, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfce5fd90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce624a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.287] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.287] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.288] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.288] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0126.288] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.288] ReadFile (in: hFile=0xd8, lpBuffer=0x127ff300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff300*, lpNumberOfBytesRead=0x124295f0*=0xd1, lpOverlapped=0x0) returned 1 [0126.289] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0126.289] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.289] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.289] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.289] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.290] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.290] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0126.290] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.290] CloseHandle (hObject=0xcc) returned 1 [0126.290] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.290] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.290] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0126.290] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.291] WriteFile (in: hFile=0xcc, lpBuffer=0x1259f900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1259f900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.292] CloseHandle (hObject=0xcc) returned 1 [0126.292] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.292] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.292] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.292] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce6c0e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce6c0e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce6c0e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce6c0e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfce6c0e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfce6c0e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce6e7f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.293] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.293] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.293] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.293] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0126.293] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.293] ReadFile (in: hFile=0xcc, lpBuffer=0x127ff400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff400*, lpNumberOfBytesRead=0x124295f0*=0xd5, lpOverlapped=0x0) returned 1 [0126.294] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0126.294] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.294] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.294] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.294] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.295] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0126.295] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.295] CloseHandle (hObject=0xe0) returned 1 [0126.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.295] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0126.296] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.296] WriteFile (in: hFile=0xe0, lpBuffer=0x125b6000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125b6000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.297] CloseHandle (hObject=0xe0) returned 1 [0126.297] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.297] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.298] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.298] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce78430, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce78430, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.298] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce78430, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce78430, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.298] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfce78430, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfce78430, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce7d250, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.298] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.298] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.298] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.298] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.298] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.298] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0126.298] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.299] ReadFile (in: hFile=0xe0, lpBuffer=0x127ff500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff500*, lpNumberOfBytesRead=0x124295f0*=0xdd, lpOverlapped=0x0) returned 1 [0126.300] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0126.300] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.300] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.300] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.300] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.300] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.300] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0126.300] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.300] CloseHandle (hObject=0xec) returned 1 [0126.300] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.301] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.301] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0126.301] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.301] WriteFile (in: hFile=0xec, lpBuffer=0x125b8600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125b8600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.302] CloseHandle (hObject=0xec) returned 1 [0126.302] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.302] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.302] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.303] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce84780, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce84780, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce84780, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce84780, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfce84780, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfce84780, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce895a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.303] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.303] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.303] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.303] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0126.304] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.304] ReadFile (in: hFile=0xec, lpBuffer=0x127ff600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff600*, lpNumberOfBytesRead=0x124295f0*=0xda, lpOverlapped=0x0) returned 1 [0126.305] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0126.305] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.305] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.305] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.305] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.305] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0126.306] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.306] CloseHandle (hObject=0xf4) returned 1 [0126.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.306] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.306] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0126.306] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.307] WriteFile (in: hFile=0xf4, lpBuffer=0x125bac00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125bac00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.307] CloseHandle (hObject=0xf4) returned 1 [0126.308] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.308] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.308] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.308] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce931e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce931e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.308] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce931e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce931e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.308] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfce931e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfce931e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce958f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.308] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.308] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.308] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.308] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.308] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.309] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0126.309] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.310] ReadFile (in: hFile=0xf4, lpBuffer=0x127ff700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127ff700*, lpNumberOfBytesRead=0x124295f0*=0xe4, lpOverlapped=0x0) returned 1 [0126.310] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4)) returned 1 [0126.311] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.311] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.311] SetEvent (hEvent=0xa0) returned 1 [0126.311] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.311] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.311] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.311] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0126.311] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.312] CloseHandle (hObject=0x138) returned 1 [0126.312] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.312] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.312] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0126.312] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.313] WriteFile (in: hFile=0x138, lpBuffer=0x12731300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12731300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.314] CloseHandle (hObject=0x138) returned 1 [0126.314] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.314] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.314] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.314] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce9ce20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce9ce20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfce9ce20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce9ce20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfce9ce20, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfce9ce20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfce9f530, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.315] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.315] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.315] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.315] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.315] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0126.315] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.317] ReadFile (in: hFile=0x138, lpBuffer=0x12466000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x12466000*, lpNumberOfBytesRead=0x124295f0*=0xe0, lpOverlapped=0x0) returned 1 [0126.318] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0126.318] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.319] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.319] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.319] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.319] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.319] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.319] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.319] CloseHandle (hObject=0x184) returned 1 [0126.319] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.319] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.320] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.320] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.321] WriteFile (in: hFile=0x184, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.322] CloseHandle (hObject=0x184) returned 1 [0126.322] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.322] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.322] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.322] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfceb06a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfceb06a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.322] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfceb06a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfceb06a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.322] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfceb06a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfceb06a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfceb2db0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.322] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.322] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.322] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.323] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.323] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ms/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.326] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.334] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfceba2e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfceba2e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.334] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfceba2e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfceba2e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcebc9f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.334] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.334] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.334] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.337] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.337] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcec3f20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcec3f20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.337] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcec3f20, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcec3f20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcec6630, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.338] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.338] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.338] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.340] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.341] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcecdb60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcecdb60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.341] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcecdb60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcecdb60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfced0270, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.341] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.341] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.341] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.344] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_BR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.344] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfced5090, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfced5090, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.344] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfced5090, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfced5090, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfced77a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.344] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.344] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.344] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.347] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/pt_PT\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.347] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcedc5c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcedc5c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.347] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcedc5c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcedc5c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcedecd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.347] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.347] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.347] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.350] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ro\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.351] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcee6200, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcee6200, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.351] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcee6200, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcee6200, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcee8910, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.351] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.351] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.351] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.353] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/ru\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.354] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfceed730, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfceed730, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.354] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfceed730, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfceed730, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfceefe40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.354] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.354] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.354] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.357] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcef4c60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcef4c60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcef4c60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcef4c60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcef7370, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.357] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.358] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.358] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.360] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.361] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcefe8a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcefe8a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.361] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcefe8a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcefe8a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf00fb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.361] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.361] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.361] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.364] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.364] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcf05dd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf05dd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.364] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcf05dd0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcf05dd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf084e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.364] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.364] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.364] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.367] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/sv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.367] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcf0d300, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf0d300, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.367] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcf0d300, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcf0d300, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf0fa10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.367] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.367] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.367] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.371] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/th\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.371] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcf16f40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf16f40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.371] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcf16f40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcf16f40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf19650, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.371] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.371] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.371] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.378] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/tr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.378] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcf1e470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf1e470, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.378] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcf1e470, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcf1e470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf20b80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.378] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.378] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.378] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.381] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/uk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.381] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcf2a7c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf2a7c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.381] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcf2a7c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcf2a7c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf2ced0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.381] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.381] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.381] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.384] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/vi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.384] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcf31cf0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf31cf0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.384] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcf31cf0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcf31cf0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf34400, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.384] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.384] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.384] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.392] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/zh_CN\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.393] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcf45570, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf45570, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.393] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcf45570, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcf45570, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf47c80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.393] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.393] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.393] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.396] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_locales/zh_TW\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.396] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcf4f1b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf4f1b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.396] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcf4f1b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcf4f1b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf518c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.396] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.396] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.396] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.400] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/aohghmighlieiainnegkcijnfilokake/0.9_0/_metadata\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.401] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcf5b500, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf5b500, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.401] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcf566e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcf566e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcf5dc10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.401] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0126.401] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0126.401] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.401] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.468] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.468] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcff32b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcff32b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.468] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.1_0", cAlternateFileName="")) returned 1 [0126.468] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcff32b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcff32b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcff32b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.468] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.468] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.473] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.473] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfcff32b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcff32b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.473] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0126.473] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfcff32b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfcff32b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfcff32b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.473] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8716c790, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0126.473] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0126.474] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0126.474] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.474] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.489] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240f820 | out: pbBuffer=0x1240f820) returned 1 [0126.489] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12467a02 | out: pbBuffer=0x12467a02) returned 1 [0126.491] SetEvent (hEvent=0x7c) returned 1 [0126.491] ReadFile (in: hFile=0xf4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x1a33, lpOverlapped=0x0) returned 1 [0126.491] GetFileType (hFile=0xf4) returned 0x1 [0126.491] SetFilePointerEx (in: hFile=0xf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0126.491] WriteFile (in: hFile=0xf4, lpBuffer=0x127de000*, nNumberOfBytesToWrite=0x1a33, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x127de000*, lpNumberOfBytesWritten=0x12429608*=0x1a33, lpOverlapped=0x12429614) returned 1 [0126.491] GetFileType (hFile=0xf4) returned 0x1 [0126.491] SetFilePointerEx (in: hFile=0xf4, liDistanceToMove=0x1a33, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0126.492] ReadFile (in: hFile=0xf4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0126.492] CloseHandle (hObject=0xf4) returned 1 [0126.492] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0126.492] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0126.492] WriteFile (in: hFile=0xf4, lpBuffer=0x12797d40*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x12797d40*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0126.492] CloseHandle (hObject=0xf4) returned 1 [0126.493] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127b89a0*, nNumberOfCharsToWrite=0xa4, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x127b89a0*, lpNumberOfCharsWritten=0x124292dc*=0xa4) returned 1 [0126.494] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8716c790, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ec)) returned 1 [0126.494] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.494] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.494] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.494] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.494] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.494] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0126.494] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0126.497] CloseHandle (hObject=0xf4) returned 1 [0126.497] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.498] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.498] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0126.499] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429728 | out: lpMode=0x12429728) returned 0 [0126.499] WriteFile (in: hFile=0xf4, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242972c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242972c*=0x1033, lpOverlapped=0x0) returned 1 [0126.500] CloseHandle (hObject=0xf4) returned 1 [0126.500] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.500] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.501] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.501] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales\\*", lpFindFileData=0x1242939c | out: lpFindFileData=0x1242939c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd04dfd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd04dfd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd04dfd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd04dfd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd04b8c0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd04b8c0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0506e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0126.502] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.502] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.503] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.503] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.503] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.503] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.503] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.503] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.503] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.504] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.504] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.504] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.505] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.505] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.505] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.506] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.506] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.506] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.506] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.506] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.506] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.507] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.507] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.507] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.508] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.508] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.508] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.509] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.509] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.509] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.509] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.509] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.509] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.510] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.510] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.510] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.511] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.511] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.511] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.511] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.512] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.512] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.512] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.512] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.512] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.513] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.513] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.513] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.513] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.514] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.514] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.515] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.515] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.515] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.515] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.515] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.515] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.516] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.516] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.516] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.516] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.516] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.516] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.518] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.518] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.518] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.518] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.518] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.518] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.519] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.519] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.519] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.519] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.520] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.520] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.520] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.520] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.521] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/lt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.521] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.521] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.521] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/lv\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.522] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.522] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.522] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ms\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.522] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.522] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.522] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/nl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.523] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.523] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.523] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/no\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.523] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.524] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.524] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/pl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.524] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.525] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.525] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/pt_BR\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.525] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.525] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.525] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/pt_PT\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.526] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.526] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.526] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ro\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.526] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.526] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.526] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ru\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.527] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.527] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.527] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/sk\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.528] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.528] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.528] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/sl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.529] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.529] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.529] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/sr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.529] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.529] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.529] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/sv\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.530] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.531] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.531] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/th\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.531] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.531] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.531] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/tr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.532] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.532] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.532] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/uk\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.532] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.532] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.532] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/vi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.533] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.533] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.533] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/zh_CN\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.533] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.533] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.534] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/zh_TW\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.534] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.534] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.534] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.534] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.534] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293b8 | out: lpFindFileData=0x124293b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.534] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.534] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0126.534] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x124295bc | out: lpMode=0x124295bc) returned 0 [0126.535] CloseHandle (hObject=0xf4) returned 1 [0126.535] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.535] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.535] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0126.535] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.535] WriteFile (in: hFile=0xf4, lpBuffer=0x12774000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12774000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.536] CloseHandle (hObject=0xf4) returned 1 [0126.536] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.537] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.537] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.537] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd0a5e10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0a5e10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.537] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd0a5e10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0a5e10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.537] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd0a5e10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd0a5e10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0a8520, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.537] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.537] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.537] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.537] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.537] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.537] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0126.538] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.538] ReadFile (in: hFile=0xf4, lpBuffer=0x127bc000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bc000*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.540] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1 [0126.540] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.540] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.540] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.540] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.540] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.540] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0126.541] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.541] CloseHandle (hObject=0x16c) returned 1 [0126.541] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.541] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.541] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0126.541] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.541] WriteFile (in: hFile=0x16c, lpBuffer=0x12776600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12776600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.543] CloseHandle (hObject=0x16c) returned 1 [0126.543] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.543] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.543] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.543] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd0b4870, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0b4870, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd0b4870, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0b4870, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd0b4870, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd0b4870, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0b9690, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.543] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.543] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.544] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.544] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.544] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0126.544] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.544] ReadFile (in: hFile=0x16c, lpBuffer=0x127bc100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bc100*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.545] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13f)) returned 1 [0126.545] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.545] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.545] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.546] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.546] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.546] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0126.546] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.546] CloseHandle (hObject=0x144) returned 1 [0126.546] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.546] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.546] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0126.547] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.547] WriteFile (in: hFile=0x144, lpBuffer=0x12778c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12778c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.548] CloseHandle (hObject=0x144) returned 1 [0126.548] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.548] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.548] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.548] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd0c0bc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0c0bc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd0c0bc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0c0bc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd0c0bc0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd0c0bc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0c59e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.549] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.549] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.549] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.549] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.549] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0126.549] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.549] ReadFile (in: hFile=0x144, lpBuffer=0x127bc200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bc200*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.550] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1 [0126.550] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.551] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.551] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.551] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.551] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.551] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0126.551] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.551] CloseHandle (hObject=0x148) returned 1 [0126.551] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.551] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.552] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0126.552] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.552] WriteFile (in: hFile=0x148, lpBuffer=0x127d7300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127d7300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.553] CloseHandle (hObject=0x148) returned 1 [0126.553] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.553] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.554] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.554] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd0cf620, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0cf620, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.554] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd0cf620, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0cf620, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.554] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd0cf620, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd0cf620, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0d1d30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.554] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.554] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.554] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.554] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.554] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.554] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0126.555] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.555] ReadFile (in: hFile=0x148, lpBuffer=0x127bc300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bc300*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.556] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0126.556] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.556] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.556] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.556] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.556] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.556] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0126.556] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.556] CloseHandle (hObject=0x14c) returned 1 [0126.557] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.557] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.557] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0126.557] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.557] WriteFile (in: hFile=0x14c, lpBuffer=0x127d9900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127d9900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.558] CloseHandle (hObject=0x14c) returned 1 [0126.558] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.559] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.559] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.559] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd0db970, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0db970, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.559] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd0db970, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0db970, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.559] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd0db970, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd0db970, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0de080, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.559] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.559] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.559] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.559] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.559] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.560] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0126.560] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.560] ReadFile (in: hFile=0x14c, lpBuffer=0x127bc400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bc400*, lpNumberOfBytesRead=0x124295f0*=0xf3, lpOverlapped=0x0) returned 1 [0126.561] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf3)) returned 1 [0126.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.561] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.561] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.561] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0126.562] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.562] CloseHandle (hObject=0x150) returned 1 [0126.562] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.562] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.562] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0126.562] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.563] WriteFile (in: hFile=0x150, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.564] CloseHandle (hObject=0x150) returned 1 [0126.564] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.564] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.564] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.564] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd0e7cc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0e7cc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.564] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd0e7cc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0e7cc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.564] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd0e7cc0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd0e7cc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0ecae0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.565] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.565] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.565] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.565] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.565] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.565] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0126.565] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.565] ReadFile (in: hFile=0x150, lpBuffer=0x127bc500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bc500*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.567] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0126.567] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.567] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.567] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.567] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.568] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.568] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0126.568] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.568] CloseHandle (hObject=0xfc) returned 1 [0126.568] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.568] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.568] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0126.569] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.569] WriteFile (in: hFile=0xfc, lpBuffer=0x1258a600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1258a600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.570] CloseHandle (hObject=0xfc) returned 1 [0126.570] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.570] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.570] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.570] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd0f6720, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0f6720, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.571] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd0f6720, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0f6720, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.571] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd0f6720, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd0f6720, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd0fb540, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.571] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.571] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.571] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.571] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.571] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.571] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0126.571] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.571] ReadFile (in: hFile=0xfc, lpBuffer=0x127bc600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bc600*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.572] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x149)) returned 1 [0126.572] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.573] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.573] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.573] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.573] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.573] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0126.573] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.573] CloseHandle (hObject=0x104) returned 1 [0126.573] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.573] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.574] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0126.574] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.574] WriteFile (in: hFile=0x104, lpBuffer=0x1258cc00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1258cc00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.575] CloseHandle (hObject=0x104) returned 1 [0126.575] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.575] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.575] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.576] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd105180, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd105180, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.576] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd105180, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd105180, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.576] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd105180, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd105180, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd107890, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.576] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.576] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.576] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.576] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.576] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.576] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0126.576] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.577] ReadFile (in: hFile=0x104, lpBuffer=0x127bc700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bc700*, lpNumberOfBytesRead=0x124295f0*=0xf9, lpOverlapped=0x0) returned 1 [0126.577] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1 [0126.578] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.578] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.578] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.578] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.578] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.578] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_GB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0126.578] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.578] CloseHandle (hObject=0x108) returned 1 [0126.578] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.579] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.579] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0126.579] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.579] WriteFile (in: hFile=0x108, lpBuffer=0x12453300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12453300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.580] CloseHandle (hObject=0x108) returned 1 [0126.580] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.580] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.581] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.581] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd1114d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd1114d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.581] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd1114d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd1114d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.581] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd1114d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd1114d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd113be0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.581] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.581] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.581] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.581] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.581] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.581] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0126.581] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.582] ReadFile (in: hFile=0x108, lpBuffer=0x127bc800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bc800*, lpNumberOfBytesRead=0x124295f0*=0xf9, lpOverlapped=0x0) returned 1 [0126.583] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1 [0126.583] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.583] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.583] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.583] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.583] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.583] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/en_US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0126.583] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.583] CloseHandle (hObject=0x10c) returned 1 [0126.584] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.584] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.584] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0126.584] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.584] WriteFile (in: hFile=0x10c, lpBuffer=0x12455900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12455900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.586] CloseHandle (hObject=0x10c) returned 1 [0126.586] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.586] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.586] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.586] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd11d820, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd11d820, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.586] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd11d820, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd11d820, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.586] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd11d820, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd11d820, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd122640, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.586] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.586] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.586] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.587] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.587] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.587] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0126.587] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.587] ReadFile (in: hFile=0x10c, lpBuffer=0x127bc900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bc900*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.588] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0126.588] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.588] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.588] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.588] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.589] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.589] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0126.589] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.589] CloseHandle (hObject=0x140) returned 1 [0126.589] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.589] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.589] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0126.590] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.590] WriteFile (in: hFile=0x140, lpBuffer=0x124ae000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124ae000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.591] CloseHandle (hObject=0x140) returned 1 [0126.591] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.591] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.591] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.591] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd129b70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd129b70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.591] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd129b70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd129b70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd129b70, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd129b70, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd12e990, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.592] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.592] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.592] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.592] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.592] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0126.592] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.592] ReadFile (in: hFile=0x140, lpBuffer=0x127bca00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bca00*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.593] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0126.594] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.594] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.594] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.594] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.594] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.594] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/es_419/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0126.594] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.594] CloseHandle (hObject=0xd8) returned 1 [0126.594] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.594] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.594] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0126.595] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.595] WriteFile (in: hFile=0xd8, lpBuffer=0x124b0600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124b0600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.596] CloseHandle (hObject=0xd8) returned 1 [0126.596] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.596] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.596] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.596] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd1385d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd1385d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.597] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd1385d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd1385d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.597] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd1385d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd1385d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd13ace0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.597] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.597] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.597] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.597] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.597] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.597] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0126.597] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.597] ReadFile (in: hFile=0xd8, lpBuffer=0x127bcb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bcb00*, lpNumberOfBytesRead=0x124295f0*=0xfb, lpOverlapped=0x0) returned 1 [0126.598] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1 [0126.598] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.598] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.599] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.599] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.599] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.599] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/et/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0126.599] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.599] CloseHandle (hObject=0xcc) returned 1 [0126.599] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.599] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.599] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0126.600] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.600] WriteFile (in: hFile=0xcc, lpBuffer=0x124b2c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124b2c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.601] CloseHandle (hObject=0xcc) returned 1 [0126.601] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.601] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.602] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.602] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd142210, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd142210, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.603] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd142210, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd142210, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.603] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd142210, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd142210, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd147030, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.603] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.603] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.603] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.603] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.603] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.603] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0126.603] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.603] ReadFile (in: hFile=0xcc, lpBuffer=0x127bcc00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bcc00*, lpNumberOfBytesRead=0x124295f0*=0xf3, lpOverlapped=0x0) returned 1 [0126.604] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3)) returned 1 [0126.604] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.605] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.605] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.605] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.605] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.605] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/eu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0126.605] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.605] CloseHandle (hObject=0xe0) returned 1 [0126.605] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.605] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.605] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0126.606] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.606] WriteFile (in: hFile=0xe0, lpBuffer=0x127e9300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127e9300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.607] CloseHandle (hObject=0xe0) returned 1 [0126.607] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.607] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.608] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.608] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd153380, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd153380, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.608] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd153380, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd153380, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.608] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd153380, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd153380, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd155a90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.608] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.608] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.608] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.608] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.608] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.608] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0126.609] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.609] ReadFile (in: hFile=0xe0, lpBuffer=0x127bcd00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bcd00*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.610] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1 [0126.610] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.610] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.610] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.610] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.610] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.610] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0126.610] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.611] CloseHandle (hObject=0xec) returned 1 [0126.611] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.611] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.611] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0126.611] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.611] WriteFile (in: hFile=0xec, lpBuffer=0x127eb900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127eb900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.612] CloseHandle (hObject=0xec) returned 1 [0126.613] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.613] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.613] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.613] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd15f6d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd15f6d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.613] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd15f6d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd15f6d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.613] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd15f6d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd15f6d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd1644f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.613] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.613] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.613] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.613] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.613] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.614] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0126.614] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.614] ReadFile (in: hFile=0xec, lpBuffer=0x127bce00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bce00*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.615] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0126.615] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.615] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.615] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.615] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.615] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.615] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0126.639] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.640] CloseHandle (hObject=0x154) returned 1 [0126.640] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.640] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.640] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0126.640] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.641] WriteFile (in: hFile=0x154, lpBuffer=0x127fa000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127fa000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.642] CloseHandle (hObject=0x154) returned 1 [0126.642] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.642] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.642] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.642] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd170840, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd170840, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.642] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd170840, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd170840, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.642] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd170840, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd170840, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd175660, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.642] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.642] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.642] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.643] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.643] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.643] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0126.643] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.643] ReadFile (in: hFile=0x154, lpBuffer=0x127bcf00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bcf00*, lpNumberOfBytesRead=0x124295f0*=0xfc, lpOverlapped=0x0) returned 1 [0126.644] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfc)) returned 1 [0126.644] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.644] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.644] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.645] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.645] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.645] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0126.645] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.645] CloseHandle (hObject=0x158) returned 1 [0126.645] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.645] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.645] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0126.646] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.646] WriteFile (in: hFile=0x158, lpBuffer=0x127fc600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127fc600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.647] CloseHandle (hObject=0x158) returned 1 [0126.647] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.647] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.647] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.647] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd17cb90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd17cb90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd17cb90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd17cb90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd17cb90, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd17cb90, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd1819b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.647] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.648] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.648] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.648] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.648] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.648] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0126.648] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.648] ReadFile (in: hFile=0x158, lpBuffer=0x127bd000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bd000*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.649] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1 [0126.649] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.649] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.649] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.649] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.650] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.650] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0126.650] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.650] CloseHandle (hObject=0xf8) returned 1 [0126.650] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.650] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.650] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0126.650] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.651] WriteFile (in: hFile=0xf8, lpBuffer=0x127fec00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127fec00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.652] CloseHandle (hObject=0xf8) returned 1 [0126.652] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.652] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.652] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.652] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd188ee0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd188ee0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd188ee0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd188ee0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd188ee0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd188ee0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd18dd00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.653] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.653] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.653] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.653] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.653] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0126.653] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.653] ReadFile (in: hFile=0xf8, lpBuffer=0x127bd100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bd100*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.654] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x159)) returned 1 [0126.654] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.654] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.655] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.655] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.655] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.655] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0126.655] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.655] CloseHandle (hObject=0x138) returned 1 [0126.655] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.655] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.655] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0126.656] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.755] WriteFile (in: hFile=0x138, lpBuffer=0x125a7300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125a7300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.756] CloseHandle (hObject=0x138) returned 1 [0126.757] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.757] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.757] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.757] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd195230, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd195230, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.757] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd195230, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd195230, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.757] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd195230, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd195230, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd28e290, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.757] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.757] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.757] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.758] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.758] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.758] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0126.758] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.772] ReadFile (in: hFile=0x138, lpBuffer=0x127bd200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bd200*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.773] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x107)) returned 1 [0126.773] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.773] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.773] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.773] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.773] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.773] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.773] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.774] CloseHandle (hObject=0x184) returned 1 [0126.774] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.774] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.774] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.775] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.780] WriteFile (in: hFile=0x184, lpBuffer=0x125a9900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125a9900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.781] CloseHandle (hObject=0x184) returned 1 [0126.781] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.781] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.781] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.781] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd2b7aa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd2b7aa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd2b7aa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd2b7aa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd2b7aa0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd2b7aa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd2c8c10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.782] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.782] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.782] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.782] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.782] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0126.782] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.791] ReadFile (in: hFile=0x184, lpBuffer=0x127bd300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bd300*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.792] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0126.792] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.792] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.793] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.793] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.793] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.793] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0126.793] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.798] CloseHandle (hObject=0x15c) returned 1 [0126.798] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.798] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.799] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0126.799] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.807] WriteFile (in: hFile=0x15c, lpBuffer=0x125bc000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125bc000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.808] CloseHandle (hObject=0x15c) returned 1 [0126.808] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.808] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.809] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.809] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd2f4b30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd2f4b30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.809] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd2f4b30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd2f4b30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.809] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd2f4b30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd2f4b30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd30aac0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.809] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.809] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.809] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.809] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.809] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.809] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0126.810] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.815] ReadFile (in: hFile=0x15c, lpBuffer=0x127bd400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bd400*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.816] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x105)) returned 1 [0126.816] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.816] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.817] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.817] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.817] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.817] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0126.817] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.824] CloseHandle (hObject=0x160) returned 1 [0126.825] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.825] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.825] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0126.825] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.831] WriteFile (in: hFile=0x160, lpBuffer=0x125be600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125be600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.836] CloseHandle (hObject=0x160) returned 1 [0126.836] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.836] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.836] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.836] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd3342d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd3342d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.836] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd3342d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd3342d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.836] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd3342d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd3342d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd34f080, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.836] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.836] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.836] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.837] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.837] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.837] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0126.837] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.845] ReadFile (in: hFile=0x160, lpBuffer=0x127bd500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bd500*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.847] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1 [0126.847] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.847] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.847] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.847] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.847] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.847] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0126.847] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.860] CloseHandle (hObject=0x164) returned 1 [0126.860] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.860] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0126.861] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.867] WriteFile (in: hFile=0x164, lpBuffer=0x125c0c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125c0c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.868] CloseHandle (hObject=0x164) returned 1 [0126.868] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.868] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.868] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.868] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd38c110, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd38c110, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.868] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd38c110, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd38c110, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.868] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd38c110, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd38c110, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd39d280, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.868] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.869] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.869] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.869] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.869] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.869] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0126.869] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.879] ReadFile (in: hFile=0x164, lpBuffer=0x127bd600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bd600*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.880] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125)) returned 1 [0126.880] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.880] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.880] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.880] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.880] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.880] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0126.880] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.893] CloseHandle (hObject=0x168) returned 1 [0126.893] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.893] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.893] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0126.894] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.899] WriteFile (in: hFile=0x168, lpBuffer=0x1273d300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1273d300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.901] CloseHandle (hObject=0x168) returned 1 [0126.901] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.901] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.902] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.902] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd3dca20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd3dca20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0126.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd3dca20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd3dca20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd3dca20, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd3dca20, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd3edb90, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.902] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.902] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.902] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.902] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0126.903] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0126.908] ReadFile (in: hFile=0x168, lpBuffer=0x127bd700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x127bd700*, lpNumberOfBytesRead=0x124295f0*=0x100, lpOverlapped=0x0) returned 1 [0126.909] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0126.909] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.909] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.910] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.910] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.910] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0126.910] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0126.910] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0126.912] CloseHandle (hObject=0x13c) returned 1 [0126.913] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.913] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0126.913] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0126.913] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0126.926] WriteFile (in: hFile=0x13c, lpBuffer=0x1273f900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1273f900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0126.927] CloseHandle (hObject=0x13c) returned 1 [0126.928] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\@_read_to_recover_files_@.txt")) returned 0x2020 [0126.928] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.928] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd40b050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd40b050, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.928] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd40b050, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd40b050, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd42d330, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.929] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.929] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.929] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.957] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.958] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd456b40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd456b40, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.958] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd456b40, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd456b40, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd476710, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.958] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.958] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.958] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.979] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ms\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.980] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd49d810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd49d810, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.980] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd49d810, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd49d810, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd4ac270, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.980] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.980] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.980] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0126.996] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0126.997] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd4c4910, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd4c4910, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.997] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd4c4910, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd4c4910, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd4d5a80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0126.997] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0126.997] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.997] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.020] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.021] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd4fa470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd4fa470, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.021] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd4fa470, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd4fa470, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd510400, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.021] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.021] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.021] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.027] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.028] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd51ee60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd51ee60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.028] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd51ee60, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd51ee60, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd521570, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.028] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.028] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.028] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.031] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/pt_BR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.031] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd528aa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd528aa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.031] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd528aa0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd528aa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd52b1b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.031] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.031] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.031] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.034] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/pt_PT\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.034] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd52ffd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd52ffd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.035] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd52ffd0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd52ffd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd5326e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.035] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.035] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.035] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.037] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ro\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.038] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd537500, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd537500, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.038] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd537500, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd537500, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd539c10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.038] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.038] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.038] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.041] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/ru\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.041] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd541140, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd541140, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.041] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd541140, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd541140, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd543850, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.041] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.041] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.041] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.044] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/sk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.044] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd548670, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd548670, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.044] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd548670, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd548670, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd54ad80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.045] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f7ed20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.045] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.045] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.047] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/sl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.048] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd54fba0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd54fba0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.048] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd54fba0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd54fba0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd5522b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.048] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.048] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.048] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.051] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/sr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.051] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd5570d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd5570d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.051] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd5570d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd5570d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd55bef0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.051] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.051] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.051] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.054] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/sv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.055] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd560d10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd560d10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.055] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd560d10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd560d10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd563420, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.055] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.055] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.055] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.058] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/th\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd568240, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd568240, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd568240, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd568240, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd56d060, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.058] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.061] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/tr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.061] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd571e80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd571e80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.061] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd571e80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd571e80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd574590, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.061] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.061] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.062] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.065] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/uk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.065] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd57bac0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd57bac0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.065] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd57bac0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd57bac0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd57e1d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.065] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.065] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.065] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.068] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/vi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.068] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd582ff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd582ff0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.069] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd582ff0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd582ff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd585700, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.069] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.069] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.069] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.071] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/zh_CN\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.072] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd58a520, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd58a520, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.072] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd587e10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd587e10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd58cc30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.072] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.072] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.072] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.075] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_locales/zh_TW\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.075] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd594160, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd594160, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.075] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd594160, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd594160, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd596870, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.075] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.075] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.075] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.078] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/apdfllckaahabafndbhieahigkjlhalf/14.1_0/_metadata\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.078] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd59b690, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd59b690, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.078] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd59b690, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd59b690, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd59dda0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.078] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0127.078] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.078] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.085] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.085] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd5ac800, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd5ac800, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.085] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.8_0", cAlternateFileName="4278E1~1.8_0")) returned 1 [0127.085] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd5ac800, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd5ac800, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd5aef10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.085] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.085] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.090] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.091] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd5b8b50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd5b8b50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.091] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0127.091] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd5b8b50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd5b8b50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd5bb260, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.091] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0127.091] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0127.091] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0127.091] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.091] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.097] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12443500 | out: pbBuffer=0x12443500) returned 1 [0127.098] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12519202 | out: pbBuffer=0x12519202) returned 1 [0127.099] SetEvent (hEvent=0x6c) returned 1 [0127.100] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0xd4e, lpOverlapped=0x0) returned 1 [0127.100] GetFileType (hFile=0x178) returned 0x1 [0127.100] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0127.100] WriteFile (in: hFile=0x178, lpBuffer=0x12604000*, nNumberOfBytesToWrite=0xd4e, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x12604000*, lpNumberOfBytesWritten=0x12429608*=0xd4e, lpOverlapped=0x12429614) returned 1 [0127.100] GetFileType (hFile=0x178) returned 0x1 [0127.100] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xd4e, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0127.100] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0127.100] CloseHandle (hObject=0x178) returned 1 [0127.101] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0127.101] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0127.101] WriteFile (in: hFile=0x178, lpBuffer=0x1260a240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x1260a240*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0127.101] CloseHandle (hObject=0x178) returned 1 [0127.102] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x125d6840*, nNumberOfCharsToWrite=0xa5, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x125d6840*, lpNumberOfCharsWritten=0x124292dc*=0xa5) returned 1 [0127.103] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d8)) returned 1 [0127.103] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.103] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.103] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.103] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429460 | out: lpFindFileData=0x12429460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.103] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.103] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0127.104] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429664 | out: lpMode=0x12429664) returned 0 [0127.108] CloseHandle (hObject=0x178) returned 1 [0127.108] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.108] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429468 | out: lpFindFileData=0x12429468*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.109] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0127.109] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429728 | out: lpMode=0x12429728) returned 0 [0127.109] WriteFile (in: hFile=0x178, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242972c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x1242972c*=0x1033, lpOverlapped=0x0) returned 1 [0127.110] CloseHandle (hObject=0x178) returned 1 [0127.110] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.110] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.111] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.111] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales\\*", lpFindFileData=0x1242939c | out: lpFindFileData=0x1242939c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd5e9890, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd5e9890, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd5e9890, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd5e9890, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd5e9890, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd5e9890, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd5ebfa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0127.112] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.112] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.113] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.113] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.113] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.113] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.113] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.113] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.113] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.114] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.114] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.114] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.114] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.115] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.115] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.116] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.116] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.116] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.116] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.116] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.116] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.117] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.117] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.117] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.117] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.118] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.118] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.118] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.118] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.119] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.119] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.119] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.119] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.120] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.120] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.120] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.120] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.120] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.120] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.121] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.121] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.121] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.122] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.122] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.122] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.123] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.123] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.123] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.123] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.123] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.123] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.124] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.124] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.124] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.125] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.125] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.125] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.126] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.126] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.126] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.126] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.126] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.126] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.127] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.127] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.127] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.128] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.128] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.128] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.129] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.129] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.129] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.129] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.130] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.130] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.131] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.131] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.131] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.132] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.132] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.132] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pt_BR\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.133] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.133] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.133] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pt_PT\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.133] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.133] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.133] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ro\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.134] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.134] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.134] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ru\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.134] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.134] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.134] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/sk\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.135] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.135] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.135] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/sl\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.136] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.136] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.136] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/sr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.136] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.137] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.137] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/sv\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.137] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.137] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.137] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/th\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.138] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.138] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.138] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/tr\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.138] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.138] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.138] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/uk\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.139] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.139] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.139] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/vi\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.139] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.140] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.140] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/zh_CN\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.140] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.140] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.141] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/zh_TW\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.141] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.141] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.141] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293b8 | out: lpFindFileData=0x124293b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.141] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0127.141] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124295bc | out: lpMode=0x124295bc) returned 0 [0127.142] CloseHandle (hObject=0x178) returned 1 [0127.142] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.142] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.142] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0127.142] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.142] WriteFile (in: hFile=0x178, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.144] CloseHandle (hObject=0x178) returned 1 [0127.144] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.144] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.144] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.144] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd63a1a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd63a1a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd63a1a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd63a1a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd63a1a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd63a1a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd63efc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.145] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.145] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.145] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.145] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.145] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.145] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0127.145] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.145] ReadFile (in: hFile=0x178, lpBuffer=0x1276e000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e000*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.146] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.147] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.147] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.147] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.147] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.147] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.147] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0127.147] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.147] CloseHandle (hObject=0x11c) returned 1 [0127.147] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.147] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.147] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0127.148] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.148] WriteFile (in: hFile=0x11c, lpBuffer=0x12774600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12774600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.149] CloseHandle (hObject=0x11c) returned 1 [0127.149] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.149] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.149] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.150] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd648c00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd648c00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.150] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd648c00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd648c00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.150] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd648c00, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd648c00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd64b310, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.150] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.150] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.150] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.150] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0127.150] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.151] ReadFile (in: hFile=0x11c, lpBuffer=0x1276e100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e100*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.152] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.152] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.152] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.152] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.152] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.152] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.152] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/bg/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0127.152] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.152] CloseHandle (hObject=0x170) returned 1 [0127.153] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.153] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.153] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0127.153] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.153] WriteFile (in: hFile=0x170, lpBuffer=0x12776c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12776c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.154] CloseHandle (hObject=0x170) returned 1 [0127.154] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.154] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.155] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.155] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd654f50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd654f50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.155] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd654f50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd654f50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.155] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd654f50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd654f50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd657660, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.155] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.155] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.155] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.155] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.155] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.155] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0127.171] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.172] ReadFile (in: hFile=0x170, lpBuffer=0x1276e200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e200*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.173] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.173] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.173] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.173] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.173] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.173] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.173] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ca/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0127.173] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.173] CloseHandle (hObject=0x174) returned 1 [0127.173] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.174] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.174] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0127.174] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.174] WriteFile (in: hFile=0x174, lpBuffer=0x1248d300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1248d300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.175] CloseHandle (hObject=0x174) returned 1 [0127.176] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.176] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.176] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.176] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6883a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6883a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.176] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6883a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6883a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.176] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd6883a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd6883a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd68d1c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.176] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.176] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.176] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.176] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.177] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.177] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0127.177] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.177] ReadFile (in: hFile=0x174, lpBuffer=0x1276e300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e300*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.178] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.178] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.178] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.178] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.179] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.179] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.179] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/cs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0127.179] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.179] CloseHandle (hObject=0xf4) returned 1 [0127.179] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.179] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.179] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0127.179] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.180] WriteFile (in: hFile=0xf4, lpBuffer=0x1248f900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1248f900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.181] CloseHandle (hObject=0xf4) returned 1 [0127.181] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.181] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.181] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.181] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6946f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6946f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.182] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6946f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6946f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.182] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd6946f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd6946f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd696e00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.182] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.182] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.182] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.182] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.182] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.182] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0127.182] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.182] ReadFile (in: hFile=0xf4, lpBuffer=0x1276e400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e400*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.183] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.183] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.184] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.184] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.184] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.184] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.184] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/da/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.184] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.184] CloseHandle (hObject=0x16c) returned 1 [0127.184] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.184] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.185] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.185] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.185] WriteFile (in: hFile=0x16c, lpBuffer=0x125cc000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125cc000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.187] CloseHandle (hObject=0x16c) returned 1 [0127.187] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.187] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.187] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.187] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6a3150, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6a3150, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.188] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6a3150, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6a3150, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.188] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd6a3150, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd6a3150, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6a7f70, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.188] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.188] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.188] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.188] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.188] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.188] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0127.188] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.188] ReadFile (in: hFile=0x16c, lpBuffer=0x1276e500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e500*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.189] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.190] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.190] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.190] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/de/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0127.190] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.190] CloseHandle (hObject=0x144) returned 1 [0127.190] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.190] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.191] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0127.196] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.196] WriteFile (in: hFile=0x144, lpBuffer=0x125ce600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125ce600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.197] CloseHandle (hObject=0x144) returned 1 [0127.197] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.197] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.198] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.198] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6bdf00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6bdf00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6bdf00, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6bdf00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd6b1bb0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd6b1bb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6c0610, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.198] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.198] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.198] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.198] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.198] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0127.199] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.199] ReadFile (in: hFile=0x144, lpBuffer=0x1276e600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e600*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.200] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.200] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.200] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.200] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.200] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.200] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.200] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/el/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0127.200] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.200] CloseHandle (hObject=0x148) returned 1 [0127.201] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.201] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.201] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0127.201] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.201] WriteFile (in: hFile=0x148, lpBuffer=0x125d0c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125d0c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.202] CloseHandle (hObject=0x148) returned 1 [0127.203] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.203] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.203] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.203] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6ca250, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6ca250, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.203] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6ca250, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6ca250, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.203] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd6ca250, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd6ca250, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6cf070, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.203] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.203] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.203] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.203] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.203] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.204] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0127.204] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.204] ReadFile (in: hFile=0x148, lpBuffer=0x1276e700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e700*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.205] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.205] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.205] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.205] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.205] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.206] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.206] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/en/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0127.206] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.206] CloseHandle (hObject=0x14c) returned 1 [0127.206] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.206] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.206] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0127.207] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.207] WriteFile (in: hFile=0x14c, lpBuffer=0x12455300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12455300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.208] CloseHandle (hObject=0x14c) returned 1 [0127.208] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.208] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.208] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.208] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6d65a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6d65a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.209] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6d65a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6d65a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.209] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd6d65a0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd6d65a0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6db3c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.209] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.209] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.209] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.209] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.209] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.209] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0127.209] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.209] ReadFile (in: hFile=0x14c, lpBuffer=0x1276e800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e800*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.210] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.210] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.211] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/es/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0127.211] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.211] CloseHandle (hObject=0x140) returned 1 [0127.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.211] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.211] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0127.212] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.212] WriteFile (in: hFile=0x140, lpBuffer=0x12457900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12457900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.213] CloseHandle (hObject=0x140) returned 1 [0127.213] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.213] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.214] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.214] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6e28f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6e28f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.214] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6e28f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6e28f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.214] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd6e28f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd6e28f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6e7710, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.214] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.214] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.214] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.214] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.214] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.214] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0127.214] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.215] ReadFile (in: hFile=0x140, lpBuffer=0x1276e900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276e900*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.216] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.216] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.216] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.216] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.216] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.216] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.216] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0127.216] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.216] CloseHandle (hObject=0xd8) returned 1 [0127.217] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.217] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.217] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0127.217] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.217] WriteFile (in: hFile=0xd8, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.218] CloseHandle (hObject=0xd8) returned 1 [0127.218] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.218] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.219] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.219] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6f1350, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6f1350, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.219] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6f1350, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6f1350, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.219] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd6f1350, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd6f1350, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6f3a60, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.219] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.219] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.219] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.219] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.219] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.219] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0127.220] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.221] ReadFile (in: hFile=0xd8, lpBuffer=0x1276ea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276ea00*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.222] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.222] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.222] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.222] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.222] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.222] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.222] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fil/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0127.222] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.222] CloseHandle (hObject=0xcc) returned 1 [0127.223] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.223] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.223] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0127.223] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.223] WriteFile (in: hFile=0xcc, lpBuffer=0x127b2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127b2600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.224] CloseHandle (hObject=0xcc) returned 1 [0127.225] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.225] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.225] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.225] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6ffdb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6ffdb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.225] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd6ffdb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd6ffdb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.225] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd6ffdb0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd6ffdb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd704bd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.225] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.225] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.225] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.225] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.225] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.226] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0127.226] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.226] ReadFile (in: hFile=0xcc, lpBuffer=0x1276eb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276eb00*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.227] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.227] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.227] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.227] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.227] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.227] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.227] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/fr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0127.227] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.228] CloseHandle (hObject=0xe0) returned 1 [0127.228] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.228] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.228] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0127.228] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.228] WriteFile (in: hFile=0xe0, lpBuffer=0x127b4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x127b4c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.230] CloseHandle (hObject=0xe0) returned 1 [0127.230] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.230] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.230] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.230] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd70c100, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd70c100, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.230] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd70c100, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd70c100, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.230] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd70c100, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd70c100, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd710f20, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.230] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.230] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.230] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.231] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.231] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.231] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0127.231] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.231] ReadFile (in: hFile=0xe0, lpBuffer=0x1276ec00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276ec00*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.232] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.232] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.232] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.232] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.232] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.233] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.233] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/he/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0127.233] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.233] CloseHandle (hObject=0xec) returned 1 [0127.233] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.233] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.233] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0127.233] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.234] WriteFile (in: hFile=0xec, lpBuffer=0x124a1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124a1300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.235] CloseHandle (hObject=0xec) returned 1 [0127.235] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.235] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.235] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.235] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd718450, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd718450, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.236] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd718450, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd718450, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.236] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd718450, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd718450, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd71d270, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.236] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.236] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.236] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.236] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.236] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.236] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0127.236] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.236] ReadFile (in: hFile=0xec, lpBuffer=0x1276ed00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276ed00*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.237] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.238] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.238] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.238] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.238] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.238] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.238] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hi/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0127.238] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.238] CloseHandle (hObject=0x154) returned 1 [0127.238] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.238] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.238] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0127.239] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.239] WriteFile (in: hFile=0x154, lpBuffer=0x124a3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124a3900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.240] CloseHandle (hObject=0x154) returned 1 [0127.240] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.240] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.241] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.241] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd726eb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd726eb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.241] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd726eb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd726eb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.241] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd726eb0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd726eb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7295c0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.241] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.241] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.241] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.241] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.241] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.241] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0127.242] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.242] ReadFile (in: hFile=0x154, lpBuffer=0x1276ee00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276ee00*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.243] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.243] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.243] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.243] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.243] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.243] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.243] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hr/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0127.243] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.244] CloseHandle (hObject=0x130) returned 1 [0127.244] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.244] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.244] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0127.244] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.244] WriteFile (in: hFile=0x130, lpBuffer=0x125e0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125e0000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.245] CloseHandle (hObject=0x130) returned 1 [0127.246] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.246] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.246] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.246] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd733200, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd733200, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.246] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd733200, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd733200, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.246] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd733200, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd733200, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd738020, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.246] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.246] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.246] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.247] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.247] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.247] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0127.247] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.247] ReadFile (in: hFile=0x130, lpBuffer=0x1276ef00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276ef00*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.248] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.248] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.248] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.248] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.248] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.249] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.249] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/hu/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0127.249] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.249] CloseHandle (hObject=0x134) returned 1 [0127.249] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.249] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.249] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0127.249] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.250] WriteFile (in: hFile=0x134, lpBuffer=0x125e2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125e2600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.251] CloseHandle (hObject=0x134) returned 1 [0127.251] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.251] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.251] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.251] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd73f550, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd73f550, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.251] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd73f550, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd73f550, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.251] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd73f550, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd73f550, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd744370, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.252] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.252] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.252] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.252] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.252] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.252] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0127.252] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.252] ReadFile (in: hFile=0x134, lpBuffer=0x1276f000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f000*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.253] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.253] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.254] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.254] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.254] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.254] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.254] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/id/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0127.254] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.254] CloseHandle (hObject=0xbc) returned 1 [0127.254] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.254] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.254] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0127.255] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.255] WriteFile (in: hFile=0xbc, lpBuffer=0x125e4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x125e4c00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.264] CloseHandle (hObject=0xbc) returned 1 [0127.265] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.265] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.265] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.265] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd74dfb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd74dfb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.265] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd74dfb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd74dfb0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.265] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd74dfb0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd74dfb0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd766650, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.265] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.265] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.265] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.266] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.266] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.266] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0127.266] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.266] ReadFile (in: hFile=0xbc, lpBuffer=0x1276f100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f100*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.267] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.267] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.267] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.267] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.268] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.268] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.268] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/it/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0127.268] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.268] CloseHandle (hObject=0xe8) returned 1 [0127.268] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.268] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.268] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0127.269] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.269] WriteFile (in: hFile=0xe8, lpBuffer=0x124f3300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124f3300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.270] CloseHandle (hObject=0xe8) returned 1 [0127.270] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.270] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.270] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.270] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd76db80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd76db80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.271] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd76db80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd76db80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.271] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd76db80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd76db80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7729a0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.271] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.271] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.271] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.271] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.271] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.271] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0127.271] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.271] ReadFile (in: hFile=0xe8, lpBuffer=0x1276f200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f200*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.272] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.273] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.273] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.273] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ja/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0127.273] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.273] CloseHandle (hObject=0xdc) returned 1 [0127.273] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.273] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.274] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0127.274] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.274] WriteFile (in: hFile=0xdc, lpBuffer=0x124f5900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x124f5900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.275] CloseHandle (hObject=0xdc) returned 1 [0127.275] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.275] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.276] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.276] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd77c5e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd77c5e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.276] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd77c5e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd77c5e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.276] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd77c5e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd77c5e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd77ecf0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.276] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.276] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.276] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.276] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.276] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.276] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0127.277] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.277] ReadFile (in: hFile=0xdc, lpBuffer=0x1276f300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f300*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.278] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.278] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.278] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.278] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.278] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.278] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.278] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ko/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0127.278] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.279] CloseHandle (hObject=0x110) returned 1 [0127.279] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.279] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.279] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0127.279] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.279] WriteFile (in: hFile=0x110, lpBuffer=0x12508000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12508000*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.280] CloseHandle (hObject=0x110) returned 1 [0127.281] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.281] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.281] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.281] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd788930, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd788930, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.281] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd788930, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd788930, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.281] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd788930, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd788930, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd78d750, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.281] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.281] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.281] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.281] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.282] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.282] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0127.282] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.282] ReadFile (in: hFile=0x110, lpBuffer=0x1276f400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f400*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.283] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.283] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.283] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.283] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.283] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.283] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lt/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0127.284] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.284] CloseHandle (hObject=0x114) returned 1 [0127.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.284] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0127.284] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.285] WriteFile (in: hFile=0x114, lpBuffer=0x1250a600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1250a600*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.286] CloseHandle (hObject=0x114) returned 1 [0127.286] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.286] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.286] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.286] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd794c80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd794c80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.286] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd794c80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd794c80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.286] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd794c80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd794c80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd799aa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.286] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.287] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.287] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.287] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.287] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.287] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0127.287] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.287] ReadFile (in: hFile=0x114, lpBuffer=0x1276f500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f500*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.288] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.288] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.288] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.289] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.289] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.289] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.289] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/lv/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0127.289] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.289] CloseHandle (hObject=0xf0) returned 1 [0127.289] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.289] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.289] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0127.290] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.290] WriteFile (in: hFile=0xf0, lpBuffer=0x1250cc00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x1250cc00*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.291] CloseHandle (hObject=0xf0) returned 1 [0127.291] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.291] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.291] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.291] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd7a0fd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7a0fd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd7a0fd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7a0fd0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd7a0fd0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd7a0fd0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7a5df0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.292] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.292] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.292] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.292] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.292] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0127.292] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.292] ReadFile (in: hFile=0xf0, lpBuffer=0x1276f600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f600*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.293] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.294] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.294] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.294] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.294] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.294] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.294] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/nl/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0127.294] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.294] CloseHandle (hObject=0xe4) returned 1 [0127.294] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.294] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.295] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0127.295] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.295] WriteFile (in: hFile=0xe4, lpBuffer=0x12571300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12571300*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.296] CloseHandle (hObject=0xe4) returned 1 [0127.296] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.296] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.297] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.297] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd7afa30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7afa30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.297] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd7afa30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7afa30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.297] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd7afa30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd7afa30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7b2140, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.297] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c12fb00, ftLastWriteTime.dwHighDateTime=0x1d0f3ee, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.297] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.297] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.297] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.297] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.297] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0127.298] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.298] ReadFile (in: hFile=0xe4, lpBuffer=0x1276f700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f700*, lpNumberOfBytesRead=0x124295f0*=0x9f, lpOverlapped=0x0) returned 1 [0127.299] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c12fb00, ftLastWriteTime.dwHighDateTime=0x1d0f3ee, nFileSizeHigh=0x0, nFileSizeLow=0x9f)) returned 1 [0127.299] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.299] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.299] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.299] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.299] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.299] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/no/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0127.299] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429514 | out: lpMode=0x12429514) returned 0 [0127.299] CloseHandle (hObject=0x100) returned 1 [0127.300] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.300] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124293c0 | out: lpFindFileData=0x124293c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.300] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0127.300] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429680 | out: lpMode=0x12429680) returned 0 [0127.300] WriteFile (in: hFile=0x100, lpBuffer=0x12573900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429684, lpOverlapped=0x0 | out: lpBuffer=0x12573900*, lpNumberOfBytesWritten=0x12429684*=0x1033, lpOverlapped=0x0) returned 1 [0127.301] CloseHandle (hObject=0x100) returned 1 [0127.301] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\@_read_to_recover_files_@.txt")) returned 0x2020 [0127.302] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.302] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.302] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl\\*", lpFindFileData=0x124292f4 | out: lpFindFileData=0x124292f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd7bbd80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7bbd80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0127.302] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd7bbd80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7bbd80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.302] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd7bbd80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd7bbd80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7be490, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.302] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.302] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.302] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.302] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.302] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.303] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0127.303] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124295e0 | out: lpMode=0x124295e0) returned 0 [0127.303] ReadFile (in: hFile=0x100, lpBuffer=0x1276f800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124295f0, lpOverlapped=0x0 | out: lpBuffer=0x1276f800*, lpNumberOfBytesRead=0x124295f0*=0xb3, lpOverlapped=0x0) returned 1 [0127.304] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl/messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124293c8 | out: lpFileInformation=0x124293c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0127.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.304] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429318 | out: lpFindFileData=0x12429318*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.304] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0127.304] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429310 | out: lpFindFileData=0x12429310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.304] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pl/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0127.306] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pt_BR\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.307] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd7c80d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7c80d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.307] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd7c80d0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd7c80d0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7ca7e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.307] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.307] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.307] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.310] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/pt_PT\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.310] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd7d1d10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7d1d10, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.310] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd7d1d10, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd7d1d10, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7d4420, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.311] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.311] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.311] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.314] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ro\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd7d9240, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7d9240, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd7d9240, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd7d9240, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7de060, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.314] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.314] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.317] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/ru\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.317] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd7e2e80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7e2e80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.317] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd7e2e80, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd7e2e80, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7e5590, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.317] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.318] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.318] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.321] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/sk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.321] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd7ea3b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7ea3b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.321] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd7ea3b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd7ea3b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7ecac0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.321] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.321] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.321] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.324] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/sl\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.324] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd7f3ff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7f3ff0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.324] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd7f3ff0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd7f3ff0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7f6700, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.324] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.324] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.324] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.327] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/sr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.328] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd7fb520, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7fb520, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.328] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd7fb520, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd7fb520, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd7fdc30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.328] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.328] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.328] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.331] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/sv\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.339] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd802a50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd802a50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.339] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd802a50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd802a50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd807870, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.339] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.339] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.339] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.342] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/th\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.342] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd8114b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd8114b0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.342] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd8114b0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd8114b0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd813bc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.342] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.342] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.342] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.346] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/tr\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.346] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd8189e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd8189e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.346] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd8189e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd8189e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd81d800, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.346] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.346] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.346] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.349] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/uk\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.349] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd822620, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd822620, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.349] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd822620, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd822620, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd824d30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.349] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.349] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.349] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.352] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/vi\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.353] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd829b50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd829b50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.353] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd829b50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd829b50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd82c260, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.353] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.353] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.353] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.356] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/zh_CN\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd831080, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd831080, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd831080, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd831080, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd835ea0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.356] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.356] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.359] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_locales/zh_TW\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.359] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd83acc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd83acc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.360] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd83acc0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd83acc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd83d3d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.360] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0127.360] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429370 | out: lpFindFileData=0x12429370*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.360] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.363] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/blpcfgokakmgnkcojhhkbfbldkacnbeo/4.2.8_0/_metadata\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.363] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd8421f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd8421f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.363] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd8421f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd8421f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd847010, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.363] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x628aed00, ftLastWriteTime.dwHighDateTime=0x1d0f5b2, nFileSizeHigh=0x0, nFileSizeLow=0x2769, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0127.363] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429418 | out: lpFindFileData=0x12429418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.363] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.368] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.368] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd850c50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd850c50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.369] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1_0", cAlternateFileName="")) returned 1 [0127.369] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd850c50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd850c50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd853360, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.369] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.369] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.374] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0127.374] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xfd85cfa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd85cfa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.374] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xfd85cfa0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xfd85cfa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xfd861dc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0127.374] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84234950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd47, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0127.374] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84239770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0127.374] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8423be80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8423e590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0127.374] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84240ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84240ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0127.374] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x840205b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84245ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844aa770, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0127.374] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0127.374] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0127.374] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124294c0 | out: lpFindFileData=0x124294c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.374] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0127.385] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240efa0 | out: pbBuffer=0x1240efa0) returned 1 [0127.386] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12411494 | out: pbBuffer=0x12411494) returned 1 [0127.386] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12797202 | out: pbBuffer=0x12797202) returned 1 [0127.386] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12797257 | out: pbBuffer=0x12797257) returned 1 [0127.387] SetEvent (hEvent=0xa0) returned 1 [0127.387] ReadFile (in: hFile=0x124, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0xd47, lpOverlapped=0x0) returned 1 [0127.388] GetFileType (hFile=0x124) returned 0x1 [0127.388] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0127.388] WriteFile (in: hFile=0x124, lpBuffer=0x12605b00*, nNumberOfBytesToWrite=0xd47, lpNumberOfBytesWritten=0x12429608, lpOverlapped=0x12429614 | out: lpBuffer=0x12605b00*, lpNumberOfBytesWritten=0x12429608*=0xd47, lpOverlapped=0x12429614) returned 1 [0127.388] GetFileType (hFile=0x124) returned 0x1 [0127.388] SetFilePointerEx (in: hFile=0x124, liDistanceToMove=0xd47, lpNewFilePointer=0x0, dwMoveMethod=0x124295ec | out: lpNewFilePointer=0x0) returned 1 [0127.388] ReadFile (in: hFile=0x124, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429624, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429624*=0x0, lpOverlapped=0x0) returned 1 [0127.388] CloseHandle (hObject=0x124) returned 1 [0127.388] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.389] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0127.389] WriteFile (in: hFile=0x124, lpBuffer=0x12752900*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429618, lpOverlapped=0x0 | out: lpBuffer=0x12752900*, lpNumberOfBytesWritten=0x12429618*=0x108, lpOverlapped=0x0) returned 1 [0127.389] CloseHandle (hObject=0x124) returned 1 [0127.389] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127efa20*, nNumberOfCharsToWrite=0xa8, lpNumberOfCharsWritten=0x124292dc, lpReserved=0x0 | out: lpBuffer=0x127efa20*, lpNumberOfCharsWritten=0x124292dc*=0xa8) returned 1 [0127.390] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x12429518 | out: lpFileInformation=0x12429518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84239770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9d)) returned 1 [0127.390] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Google/Chrome/User Data/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap/1.1_0/icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0127.390] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429614 | out: lpMode=0x12429614) returned 0 [0127.390] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1 [0127.391] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12410084 | out: pbBuffer=0x12410084) returned 1 [0127.391] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1276e002 | out: pbBuffer=0x1276e002) returned 1 [0127.391] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1276e0cb | out: pbBuffer=0x1276e0cb) returned 1 [0127.393] CloseHandle (hObject=0x104) returned 1 [0127.393] CloseHandle (hObject=0xfc) returned 1 [0127.393] CloseHandle (hObject=0x150) returned 1 [0127.393] CloseHandle (hObject=0x15c) returned 1 [0127.393] CloseHandle (hObject=0x184) returned 1 [0127.393] CloseHandle (hObject=0x138) returned 1 [0127.393] CloseHandle (hObject=0xf8) returned 1 [0127.393] CloseHandle (hObject=0x158) returned 1 [0127.394] CloseHandle (hObject=0x120) returned 1 [0127.394] CloseHandle (hObject=0x100) returned 1 [0127.394] CloseHandle (hObject=0xe4) returned 1 [0127.394] CloseHandle (hObject=0xf0) returned 1 [0127.394] CloseHandle (hObject=0x114) returned 1 [0127.394] CloseHandle (hObject=0x110) returned 1 [0127.394] CloseHandle (hObject=0xdc) returned 1 [0127.394] CloseHandle (hObject=0xe8) returned 1 [0127.394] CloseHandle (hObject=0xbc) returned 1 [0127.394] CloseHandle (hObject=0x134) returned 1 [0127.394] CloseHandle (hObject=0x130) returned 1 [0127.394] CloseHandle (hObject=0x154) returned 1 [0127.394] CloseHandle (hObject=0xec) returned 1 [0127.394] CloseHandle (hObject=0xe0) returned 1 [0127.394] CloseHandle (hObject=0xcc) returned 1 [0127.395] CloseHandle (hObject=0xd8) returned 1 [0127.395] CloseHandle (hObject=0x140) returned 1 [0127.395] CloseHandle (hObject=0x14c) returned 1 [0127.395] CloseHandle (hObject=0x148) returned 1 [0127.395] CloseHandle (hObject=0x144) returned 1 [0127.395] CloseHandle (hObject=0x16c) returned 1 [0127.395] CloseHandle (hObject=0xf4) returned 1 [0127.395] CloseHandle (hObject=0x174) returned 1 [0127.395] CloseHandle (hObject=0x170) returned 1 [0127.395] CloseHandle (hObject=0x11c) returned 1 [0127.395] CloseHandle (hObject=0x178) returned 1 [0127.395] CloseHandle (hObject=0x13c) returned 1 [0127.395] CloseHandle (hObject=0x168) returned 1 [0127.395] CloseHandle (hObject=0x164) returned 1 [0127.396] CloseHandle (hObject=0x160) returned 1 [0127.396] CloseHandle (hObject=0x10c) returned 1 [0127.396] CloseHandle (hObject=0x108) returned 1 [0127.396] CloseHandle (hObject=0x118) returned 1 [0127.396] CloseHandle (hObject=0xc8) returned 1 [0127.396] CloseHandle (hObject=0xd0) returned 1 [0127.396] CloseHandle (hObject=0x98) returned 1 [0127.396] CloseHandle (hObject=0xc0) returned 1 [0127.396] SwitchToThread () returned 1 [0127.397] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0127.400] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0127.403] SetEvent (hEvent=0xa0) returned 1 [0127.403] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0127.403] SetEvent (hEvent=0xa0) returned 1 [0127.403] SwitchToThread () returned 1 [0127.410] SetEvent (hEvent=0x7c) returned 1 [0127.410] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0127.417] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0127.612] SetEvent (hEvent=0x7c) returned 1 [0127.612] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0127.614] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0127.614] SetEvent (hEvent=0x7c) returned 1 [0127.614] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0127.617] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0127.617] CloseHandle (hObject=0x140) returned 1 [0127.617] CloseHandle (hObject=0x14c) returned 1 [0127.617] CloseHandle (hObject=0x148) returned 1 [0127.617] CloseHandle (hObject=0x144) returned 1 [0127.617] CloseHandle (hObject=0x16c) returned 1 [0127.617] CloseHandle (hObject=0xf4) returned 1 [0127.617] CloseHandle (hObject=0x174) returned 1 [0127.617] CloseHandle (hObject=0x170) returned 1 [0127.617] CloseHandle (hObject=0x11c) returned 1 [0127.617] CloseHandle (hObject=0x178) returned 1 [0127.617] CloseHandle (hObject=0x13c) returned 1 [0127.617] CloseHandle (hObject=0x168) returned 1 [0127.618] CloseHandle (hObject=0x164) returned 1 [0127.618] CloseHandle (hObject=0x160) returned 1 [0127.618] CloseHandle (hObject=0x10c) returned 1 [0127.618] CloseHandle (hObject=0x108) returned 1 [0127.618] CloseHandle (hObject=0x118) returned 1 [0127.618] CloseHandle (hObject=0xc8) returned 1 [0127.618] CloseHandle (hObject=0xd0) returned 1 [0127.618] CloseHandle (hObject=0x98) returned 1 [0127.618] CloseHandle (hObject=0xc0) returned 1 [0127.618] CloseHandle (hObject=0x124) returned 1 [0127.618] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0127.886] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.114] SetEvent (hEvent=0xa0) returned 1 [0128.114] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.124] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.128] SetEvent (hEvent=0xa0) returned 1 [0128.129] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0128.130] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.130] SetEvent (hEvent=0x7c) returned 1 [0128.130] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0128.134] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.202] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.206] SetEvent (hEvent=0xa0) returned 1 [0128.206] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.207] SetEvent (hEvent=0xa0) returned 1 [0128.207] SetEvent (hEvent=0x6c) returned 1 [0128.207] CloseHandle (hObject=0x180) returned 1 [0128.207] CloseHandle (hObject=0x17c) returned 1 [0128.207] CloseHandle (hObject=0x12c) returned 1 [0128.207] CloseHandle (hObject=0x128) returned 1 [0128.207] CloseHandle (hObject=0x19c) returned 1 [0128.208] SwitchToThread () returned 1 [0128.209] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.433] SetEvent (hEvent=0x6c) returned 1 [0128.433] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0128.435] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.435] SetEvent (hEvent=0x6c) returned 1 [0128.435] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0128.436] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.436] CloseHandle (hObject=0xc0) returned 1 [0128.436] CloseHandle (hObject=0x124) returned 1 [0128.436] CloseHandle (hObject=0x110) returned 1 [0128.436] CloseHandle (hObject=0xdc) returned 1 [0128.436] CloseHandle (hObject=0xf4) returned 1 [0128.436] CloseHandle (hObject=0x174) returned 1 [0128.437] CloseHandle (hObject=0x170) returned 1 [0128.437] CloseHandle (hObject=0x11c) returned 1 [0128.437] CloseHandle (hObject=0x178) returned 1 [0128.437] CloseHandle (hObject=0x13c) returned 1 [0128.437] CloseHandle (hObject=0x168) returned 1 [0128.437] CloseHandle (hObject=0x164) returned 1 [0128.437] CloseHandle (hObject=0x160) returned 1 [0128.437] CloseHandle (hObject=0x10c) returned 1 [0128.437] CloseHandle (hObject=0x114) returned 1 [0128.437] CloseHandle (hObject=0xe8) returned 1 [0128.437] CloseHandle (hObject=0xbc) returned 1 [0128.438] CloseHandle (hObject=0x180) returned 1 [0128.438] CloseHandle (hObject=0x17c) returned 1 [0128.438] CloseHandle (hObject=0x12c) returned 1 [0128.438] CloseHandle (hObject=0x128) returned 1 [0128.438] CloseHandle (hObject=0x19c) returned 1 [0128.438] CloseHandle (hObject=0x15c) returned 1 [0128.438] CloseHandle (hObject=0x184) returned 1 [0128.438] CloseHandle (hObject=0x138) returned 1 [0128.438] CloseHandle (hObject=0x18c) returned 1 [0128.438] CloseHandle (hObject=0xe4) returned 1 [0128.438] CloseHandle (hObject=0xf0) returned 1 [0128.438] CloseHandle (hObject=0x104) returned 1 [0128.438] CloseHandle (hObject=0xfc) returned 1 [0128.438] CloseHandle (hObject=0x150) returned 1 [0128.439] CloseHandle (hObject=0x134) returned 1 [0128.439] CloseHandle (hObject=0x130) returned 1 [0128.439] CloseHandle (hObject=0xf8) returned 1 [0128.439] CloseHandle (hObject=0x158) returned 1 [0128.439] CloseHandle (hObject=0x120) returned 1 [0128.439] CloseHandle (hObject=0x100) returned 1 [0128.439] CloseHandle (hObject=0x188) returned 1 [0128.439] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.464] SetEvent (hEvent=0x6c) returned 1 [0128.464] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.464] SetEvent (hEvent=0x6c) returned 1 [0128.464] SetEvent (hEvent=0xa0) returned 1 [0128.464] CloseHandle (hObject=0x134) returned 1 [0128.464] CloseHandle (hObject=0x130) returned 1 [0128.464] CloseHandle (hObject=0xf8) returned 1 [0128.464] CloseHandle (hObject=0x158) returned 1 [0128.465] CloseHandle (hObject=0x120) returned 1 [0128.465] CloseHandle (hObject=0x100) returned 1 [0128.465] CloseHandle (hObject=0x188) returned 1 [0128.465] CloseHandle (hObject=0x98) returned 1 [0128.465] SwitchToThread () returned 1 [0128.467] SetEvent (hEvent=0x7c) returned 1 [0128.467] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.468] SetEvent (hEvent=0x7c) returned 1 [0128.468] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.468] SetEvent (hEvent=0x7c) returned 1 [0128.468] SwitchToThread () returned 1 [0128.470] SetEvent (hEvent=0xa0) returned 1 [0128.470] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.476] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.479] SetEvent (hEvent=0x7c) returned 1 [0128.479] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.479] SetEvent (hEvent=0x7c) returned 1 [0128.479] SwitchToThread () returned 1 [0128.480] SetEvent (hEvent=0xa0) returned 1 [0128.480] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.486] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.489] SetEvent (hEvent=0x7c) returned 1 [0128.489] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.489] SetEvent (hEvent=0x7c) returned 1 [0128.489] SwitchToThread () returned 1 [0128.490] SetEvent (hEvent=0xa0) returned 1 [0128.490] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.496] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.499] SetEvent (hEvent=0x7c) returned 1 [0128.499] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.499] SetEvent (hEvent=0x7c) returned 1 [0128.499] SwitchToThread () returned 1 [0128.500] SetEvent (hEvent=0xa0) returned 1 [0128.500] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0128.525] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.171] SetEvent (hEvent=0xa0) returned 1 [0129.172] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.186] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.190] SetEvent (hEvent=0x7c) returned 1 [0129.191] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.191] SetEvent (hEvent=0x7c) returned 1 [0129.191] SwitchToThread () returned 1 [0129.192] SetEvent (hEvent=0xa0) returned 1 [0129.192] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.200] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.203] SetEvent (hEvent=0x7c) returned 1 [0129.203] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.203] SetEvent (hEvent=0x7c) returned 1 [0129.203] SwitchToThread () returned 1 [0129.205] SetEvent (hEvent=0xa0) returned 1 [0129.205] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.210] SetEvent (hEvent=0xa0) returned 1 [0129.210] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.214] SetEvent (hEvent=0xa0) returned 1 [0129.214] SwitchToThread () returned 1 [0129.214] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.218] SetEvent (hEvent=0x7c) returned 1 [0129.218] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.218] SetEvent (hEvent=0x7c) returned 1 [0129.218] SwitchToThread () returned 1 [0129.220] SetEvent (hEvent=0xa0) returned 1 [0129.220] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.226] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.229] SetEvent (hEvent=0x7c) returned 1 [0129.229] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.229] SetEvent (hEvent=0x7c) returned 1 [0129.229] SwitchToThread () returned 1 [0129.230] SetEvent (hEvent=0xa0) returned 1 [0129.230] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.237] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.240] SetEvent (hEvent=0x7c) returned 1 [0129.240] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.240] SetEvent (hEvent=0x7c) returned 1 [0129.240] SwitchToThread () returned 1 [0129.241] SetEvent (hEvent=0xa0) returned 1 [0129.241] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.245] SetEvent (hEvent=0xa0) returned 1 [0129.245] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.246] SetEvent (hEvent=0xa0) returned 1 [0129.246] SwitchToThread () returned 1 [0129.249] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.254] SetEvent (hEvent=0xa0) returned 1 [0129.254] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0129.255] SetEvent (hEvent=0xa0) returned 1 [0129.255] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0129.255] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.273] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.697] SetEvent (hEvent=0xa0) returned 1 [0129.697] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0129.700] SetEvent (hEvent=0xa0) returned 1 [0129.700] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0129.708] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.708] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0129.958] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0130.012] SetEvent (hEvent=0x6c) returned 1 [0130.012] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0130.016] SetEvent (hEvent=0x6c) returned 1 [0130.016] SetEvent (hEvent=0xa0) returned 1 [0130.016] CloseHandle (hObject=0x15c) returned 1 [0130.016] CloseHandle (hObject=0x120) returned 1 [0130.016] CloseHandle (hObject=0x148) returned 1 [0130.016] SwitchToThread () returned 1 [0130.018] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0130.086] SetEvent (hEvent=0xa0) returned 1 [0130.086] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0130.087] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0130.087] SetEvent (hEvent=0xa0) returned 1 [0130.087] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0130.102] SwitchToThread () returned 1 [0130.103] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0130.103] SetEvent (hEvent=0xa0) returned 1 [0130.103] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x2fa9, lpOverlapped=0x0) returned 1 [0130.103] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0130.103] SetEvent (hEvent=0xa0) returned 1 [0130.104] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0130.104] GetFileType (hFile=0x154) returned 0x1 [0130.104] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.104] WriteFile (in: hFile=0x154, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x2fa9, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429950*=0x2fa9, lpOverlapped=0x1242995c) returned 1 [0130.104] GetFileType (hFile=0x154) returned 0x1 [0130.104] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x2fa9, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.104] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0130.104] CloseHandle (hObject=0x154) returned 1 [0130.104] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.104] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.105] WriteFile (in: hFile=0x154, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0130.105] CloseHandle (hObject=0x154) returned 1 [0130.105] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x71, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x12429624*=0x71) returned 1 [0130.106] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d977900, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0)) returned 1 [0130.106] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.106] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.106] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e040 | out: pbBuffer=0x1249e040) returned 1 [0130.107] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2094 | out: pbBuffer=0x124e2094) returned 1 [0130.107] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d8102 | out: pbBuffer=0x124d8102) returned 1 [0130.107] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d811f | out: pbBuffer=0x124d811f) returned 1 [0130.107] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d81db | out: pbBuffer=0x124d81db) returned 1 [0130.108] SetEvent (hEvent=0x6c) returned 1 [0130.108] ReadFile (in: hFile=0x154, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242996c*=0x2fb0, lpOverlapped=0x0) returned 1 [0130.108] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0130.109] SetEvent (hEvent=0x6c) returned 1 [0130.109] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0130.109] GetFileType (hFile=0x154) returned 0x1 [0130.109] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.109] WriteFile (in: hFile=0x154, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x2fb0, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429950*=0x2fb0, lpOverlapped=0x1242995c) returned 1 [0130.109] GetFileType (hFile=0x154) returned 0x1 [0130.109] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x2fb0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.109] ReadFile (in: hFile=0x154, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0130.109] CloseHandle (hObject=0x154) returned 1 [0130.110] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.110] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.110] WriteFile (in: hFile=0x154, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0130.110] CloseHandle (hObject=0x154) returned 1 [0130.110] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x71, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x12429624*=0x71) returned 1 [0130.111] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4)) returned 1 [0130.111] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.111] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.111] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0130.112] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0130.112] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d8002 | out: pbBuffer=0x124d8002) returned 1 [0130.112] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d80d2 | out: pbBuffer=0x124d80d2) returned 1 [0130.113] SetEvent (hEvent=0xa0) returned 1 [0130.113] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x23f4, lpOverlapped=0x0) returned 1 [0130.113] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0130.114] SetEvent (hEvent=0xa0) returned 1 [0130.114] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0130.114] GetFileType (hFile=0x154) returned 0x1 [0130.114] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.114] WriteFile (in: hFile=0x154, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x23f4, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429950*=0x23f4, lpOverlapped=0x1242995c) returned 1 [0130.114] GetFileType (hFile=0x154) returned 0x1 [0130.114] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x23f4, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0130.114] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0130.114] CloseHandle (hObject=0x154) returned 1 [0130.114] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.115] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0130.115] WriteFile (in: hFile=0x154, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0130.115] CloseHandle (hObject=0x154) returned 1 [0130.115] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1244a000*, nNumberOfCharsToWrite=0x78, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x1244a000*, lpNumberOfCharsWritten=0x12429624*=0x78) returned 1 [0130.116] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.116] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.116] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.116] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.116] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.116] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.116] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0130.116] CloseHandle (hObject=0x154) returned 1 [0130.116] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.116] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.116] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.118] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0130.119] WriteFile (in: hFile=0x154, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0130.120] CloseHandle (hObject=0x154) returned 1 [0130.120] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.120] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.120] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.120] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xff1e8870, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff1e8870, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.120] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xff1e8870, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff1e8870, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.120] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3LKBQZJ3", cAlternateFileName="")) returned 1 [0130.121] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8NES5H33", cAlternateFileName="")) returned 1 [0130.121] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff1e3a50, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff1e3a50, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff1eaf80, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.121] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FKLUIDU0", cAlternateFileName="")) returned 1 [0130.121] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0130.121] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 1 [0130.121] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.121] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.121] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.121] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.121] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.121] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.121] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.121] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.122] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.122] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.122] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.122] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.122] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.122] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.122] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.122] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.122] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.123] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0130.123] ReadFile (in: hFile=0x154, lpBuffer=0x124d8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d8200*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0130.125] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0130.125] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0130.125] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0130.125] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e1c0 | out: pbBuffer=0x1249e1c0) returned 1 [0130.126] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d8302 | out: pbBuffer=0x124d8302) returned 1 [0130.126] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d8339 | out: pbBuffer=0x124d8339) returned 1 [0130.127] SetEvent (hEvent=0x6c) returned 1 [0130.127] ReadFile (in: hFile=0x10c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x8000, lpOverlapped=0x0) returned 1 [0130.128] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0130.128] SetEvent (hEvent=0x6c) returned 1 [0130.128] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0130.128] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0130.129] GetFileType (hFile=0x10c) returned 0x1 [0130.129] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0130.129] WriteFile (in: hFile=0x10c, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x124298a8*=0x8000, lpOverlapped=0x124298b4) returned 1 [0130.129] GetFileType (hFile=0x10c) returned 0x1 [0130.129] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0130.129] ReadFile (in: hFile=0x10c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0130.129] CloseHandle (hObject=0x10c) returned 1 [0130.129] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0130.129] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0130.130] WriteFile (in: hFile=0x10c, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0130.130] CloseHandle (hObject=0x10c) returned 1 [0130.130] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x78, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x1242957c*=0x78) returned 1 [0130.130] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.130] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.131] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0130.131] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0130.131] WriteFile (in: hFile=0x10c, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0130.132] CloseHandle (hObject=0x10c) returned 1 [0130.132] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.132] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.133] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.133] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xff205d30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff205d30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.133] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xff205d30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff205d30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.133] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff205d30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff205d30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff20ab50, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.133] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.133] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.133] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.133] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.133] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.133] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.133] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.133] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.133] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.134] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/3LKBQZJ3/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0130.134] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0130.134] CloseHandle (hObject=0x10c) returned 1 [0130.134] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.134] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.134] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0130.134] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0130.135] WriteFile (in: hFile=0x10c, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0130.136] CloseHandle (hObject=0x10c) returned 1 [0130.136] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.136] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.136] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.136] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xff20f970, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff20f970, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.136] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xff20f970, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff20f970, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.136] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff20f970, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff20f970, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff212080, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.136] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 1 [0130.136] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.136] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.136] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.136] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.136] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33/get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0130.137] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0130.137] ReadFile (in: hFile=0x10c, lpBuffer=0x124d8600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x124d8600*, lpNumberOfBytesRead=0x12429938*=0xd, lpOverlapped=0x0) returned 1 [0130.138] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33/get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd)) returned 1 [0130.138] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.138] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.138] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.138] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.138] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.138] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/8NES5H33/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.138] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0130.139] CloseHandle (hObject=0x154) returned 1 [0130.139] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.139] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.139] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.139] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.139] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.139] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.139] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.139] CloseHandle (hObject=0x154) returned 1 [0130.139] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.139] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.140] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.140] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0130.140] WriteFile (in: hFile=0x154, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0130.141] CloseHandle (hObject=0x154) returned 1 [0130.141] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.141] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.141] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xff21bcc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff21bcc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.142] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xff21bcc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff21bcc0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.142] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff21bcc0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff21bcc0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff21e3d0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.142] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.142] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.142] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.142] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.142] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.142] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.142] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.142] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.142] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.142] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/FKLUIDU0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.142] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0130.143] CloseHandle (hObject=0x154) returned 1 [0130.143] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.143] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.143] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.143] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0130.143] WriteFile (in: hFile=0x154, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0130.145] CloseHandle (hObject=0x154) returned 1 [0130.145] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.145] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.145] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.145] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xff2231f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff2231f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.145] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xff2231f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff2231f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.145] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff2231f0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff2231f0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff228010, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.145] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.145] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.145] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.145] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.145] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.145] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.146] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.146] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.146] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.146] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/DOMStore/OWLVMZRC/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.146] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0130.146] CloseHandle (hObject=0x154) returned 1 [0130.146] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.146] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.146] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.147] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0130.147] WriteFile (in: hFile=0x154, lpBuffer=0x12491300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12491300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0130.148] CloseHandle (hObject=0x154) returned 1 [0130.148] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.148] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.148] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.148] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xff22ce30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff22ce30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.148] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xff22ce30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff22ce30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.148] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff22ce30, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff22ce30, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff22f540, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.149] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1 [0130.149] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1 [0130.149] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.149] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.149] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.149] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.149] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.149] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.149] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.149] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.149] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.152] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.152] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.152] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.153] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.153] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.153] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.153] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.153] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0130.153] CloseHandle (hObject=0x154) returned 1 [0130.153] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.153] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.153] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.154] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0130.157] WriteFile (in: hFile=0x154, lpBuffer=0x12493900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12493900*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0130.158] CloseHandle (hObject=0x154) returned 1 [0130.158] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.158] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.159] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.159] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xff23dfa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff23dfa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.159] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xff23dfa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff23dfa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.159] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff23dfa0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff23dfa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff24a2f0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.159] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.159] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.159] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.159] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.159] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.159] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.159] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.159] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.160] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0130.160] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Active/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.160] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0130.160] CloseHandle (hObject=0x154) returned 1 [0130.160] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.161] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.161] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.161] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0130.161] WriteFile (in: hFile=0x154, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0130.162] CloseHandle (hObject=0x154) returned 1 [0130.163] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\@_read_to_recover_files_@.txt")) returned 0x2020 [0130.163] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0130.163] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.163] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xff24f110, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff24f110, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0130.163] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xff24f110, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff24f110, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.163] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0xff24f110, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xff24f110, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xff253f30, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0130.163] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="RECOVE~2.DAT")) returned 1 [0130.163] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6dd28c60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6dd28c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0130.163] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{4BD65~1.DAT")) returned 1 [0130.163] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 1 [0130.163] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.163] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0130.163] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0130.163] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.163] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0130.164] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0130.164] ReadFile (in: hFile=0x154, lpBuffer=0x124d9100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x124d9100*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0130.165] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0130.166] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0130.166] ReadFile (in: hFile=0x148, lpBuffer=0x124d9200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x124d9200*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0130.167] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0130.168] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0130.168] ReadFile (in: hFile=0x120, lpBuffer=0x124d9300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x124d9300*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0130.170] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0130.171] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0130.171] ReadFile (in: hFile=0x15c, lpBuffer=0x124d9400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x124d9400*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0130.173] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0130.173] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.173] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0130.173] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e7e0 | out: pbBuffer=0x1249e7e0) returned 1 [0130.174] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e24b4 | out: pbBuffer=0x124e24b4) returned 1 [0130.174] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d9502 | out: pbBuffer=0x124d9502) returned 1 [0130.174] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d951e | out: pbBuffer=0x124d951e) returned 1 [0130.174] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d9563 | out: pbBuffer=0x124d9563) returned 1 [0130.174] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d95d9 | out: pbBuffer=0x124d95d9) returned 1 [0130.175] SetEvent (hEvent=0x6c) returned 1 [0130.175] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0xe00, lpOverlapped=0x0) returned 1 [0130.176] GetFileType (hFile=0x19c) returned 0x1 [0130.176] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0130.176] WriteFile (in: hFile=0x19c, lpBuffer=0x1265c000*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1265c000*, lpNumberOfBytesWritten=0x12429800*=0xe00, lpOverlapped=0x1242980c) returned 1 [0130.176] GetFileType (hFile=0x19c) returned 0x1 [0130.176] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0xe00, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0130.176] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0130.176] CloseHandle (hObject=0x19c) returned 1 [0130.176] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.176] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0130.177] WriteFile (in: hFile=0x19c, lpBuffer=0x1245cb40*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x1245cb40*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0130.177] CloseHandle (hObject=0x19c) returned 1 [0130.177] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127b8000*, nNumberOfCharsToWrite=0xb3, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x127b8000*, lpNumberOfCharsWritten=0x124294d4*=0xb3) returned 1 [0130.178] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6dd28c60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6dd28c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1 [0130.178] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Local/Microsoft/Internet Explorer/Recovery/Last Active/RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0130.178] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0130.178] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0130.179] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0130.180] CloseHandle (hObject=0x10c) returned 1 [0130.180] SwitchToThread () returned 1 [0130.181] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0130.184] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0130.187] SetEvent (hEvent=0x6c) returned 1 [0130.187] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0130.187] SetEvent (hEvent=0x6c) returned 1 [0130.187] SwitchToThread () returned 1 [0130.188] SetEvent (hEvent=0xa0) returned 1 [0130.188] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0130.195] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0130.369] SetEvent (hEvent=0xa0) returned 1 [0130.369] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0130.370] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0130.370] SetEvent (hEvent=0xa0) returned 1 [0130.370] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0130.372] CloseHandle (hObject=0xf0) returned 1 [0130.372] CloseHandle (hObject=0x104) returned 1 [0130.372] CloseHandle (hObject=0xfc) returned 1 [0130.372] CloseHandle (hObject=0x134) returned 1 [0130.372] CloseHandle (hObject=0x130) returned 1 [0130.372] CloseHandle (hObject=0xf8) returned 1 [0130.372] CloseHandle (hObject=0x158) returned 1 [0130.372] CloseHandle (hObject=0x164) returned 1 [0130.372] CloseHandle (hObject=0x160) returned 1 [0130.372] CloseHandle (hObject=0x114) returned 1 [0130.372] CloseHandle (hObject=0xe8) returned 1 [0130.372] CloseHandle (hObject=0xbc) returned 1 [0130.372] CloseHandle (hObject=0x180) returned 1 [0130.372] CloseHandle (hObject=0x17c) returned 1 [0130.372] CloseHandle (hObject=0x118) returned 1 [0130.373] CloseHandle (hObject=0xc8) returned 1 [0130.373] CloseHandle (hObject=0x16c) returned 1 [0130.373] CloseHandle (hObject=0x144) returned 1 [0130.373] CloseHandle (hObject=0xd0) returned 1 [0130.373] CloseHandle (hObject=0x168) returned 1 [0130.373] CloseHandle (hObject=0x198) returned 1 [0130.373] CloseHandle (hObject=0x12c) returned 1 [0130.373] CloseHandle (hObject=0x128) returned 1 [0130.373] CloseHandle (hObject=0xc0) returned 1 [0130.373] CloseHandle (hObject=0x110) returned 1 [0130.373] CloseHandle (hObject=0xdc) returned 1 [0130.373] CloseHandle (hObject=0x124) returned 1 [0130.373] CloseHandle (hObject=0x10c) returned 1 [0130.373] CloseHandle (hObject=0x15c) returned 1 [0130.373] CloseHandle (hObject=0x120) returned 1 [0130.373] CloseHandle (hObject=0x148) returned 1 [0130.373] CloseHandle (hObject=0x154) returned 1 [0130.373] CloseHandle (hObject=0x19c) returned 1 [0130.373] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.006] SwitchToThread () returned 1 [0131.008] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.042] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.066] SetEvent (hEvent=0x6c) returned 1 [0131.066] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.068] SetEvent (hEvent=0x6c) returned 1 [0131.071] SwitchToThread () returned 1 [0131.080] SetEvent (hEvent=0x7c) returned 1 [0131.080] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.090] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.093] SetEvent (hEvent=0x6c) returned 1 [0131.093] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.093] SetEvent (hEvent=0x6c) returned 1 [0131.093] SwitchToThread () returned 1 [0131.094] SetEvent (hEvent=0x7c) returned 1 [0131.094] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.101] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.104] SetEvent (hEvent=0x6c) returned 1 [0131.104] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.104] SetEvent (hEvent=0x6c) returned 1 [0131.104] SwitchToThread () returned 1 [0131.105] SetEvent (hEvent=0x7c) returned 1 [0131.105] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.111] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.114] SetEvent (hEvent=0x6c) returned 1 [0131.114] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.114] SetEvent (hEvent=0x6c) returned 1 [0131.114] SwitchToThread () returned 1 [0131.115] SetEvent (hEvent=0x7c) returned 1 [0131.115] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.121] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.124] SetEvent (hEvent=0x6c) returned 1 [0131.124] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.124] SetEvent (hEvent=0x6c) returned 1 [0131.124] SwitchToThread () returned 1 [0131.125] SetEvent (hEvent=0x7c) returned 1 [0131.125] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.132] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.135] SetEvent (hEvent=0x6c) returned 1 [0131.135] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.135] SetEvent (hEvent=0x6c) returned 1 [0131.135] SwitchToThread () returned 1 [0131.136] SetEvent (hEvent=0x7c) returned 1 [0131.136] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.141] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.144] SetEvent (hEvent=0x6c) returned 1 [0131.144] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.145] SetEvent (hEvent=0x6c) returned 1 [0131.145] SwitchToThread () returned 1 [0131.145] SetEvent (hEvent=0x7c) returned 1 [0131.146] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.151] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.154] SetEvent (hEvent=0x6c) returned 1 [0131.154] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.155] SetEvent (hEvent=0x6c) returned 1 [0131.155] SwitchToThread () returned 1 [0131.155] SetEvent (hEvent=0x7c) returned 1 [0131.155] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.162] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.165] SetEvent (hEvent=0x6c) returned 1 [0131.165] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.165] SetEvent (hEvent=0x6c) returned 1 [0131.165] SwitchToThread () returned 1 [0131.166] SetEvent (hEvent=0x7c) returned 1 [0131.166] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.171] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.187] SetEvent (hEvent=0x6c) returned 1 [0131.187] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.187] SetEvent (hEvent=0x6c) returned 1 [0131.187] SetEvent (hEvent=0x7c) returned 1 [0131.187] CloseHandle (hObject=0x19c) returned 1 [0131.187] CloseHandle (hObject=0x180) returned 1 [0131.187] SwitchToThread () returned 1 [0131.188] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.465] SetEvent (hEvent=0x7c) returned 1 [0131.465] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0131.467] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.467] SetEvent (hEvent=0x7c) returned 1 [0131.468] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0131.469] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.469] CloseHandle (hObject=0x110) returned 1 [0131.469] CloseHandle (hObject=0xdc) returned 1 [0131.469] CloseHandle (hObject=0x124) returned 1 [0131.469] CloseHandle (hObject=0x10c) returned 1 [0131.469] CloseHandle (hObject=0x15c) returned 1 [0131.469] CloseHandle (hObject=0x120) returned 1 [0131.469] CloseHandle (hObject=0x148) returned 1 [0131.469] CloseHandle (hObject=0x18c) returned 1 [0131.470] CloseHandle (hObject=0x154) returned 1 [0131.470] CloseHandle (hObject=0x19c) returned 1 [0131.470] CloseHandle (hObject=0x180) returned 1 [0131.470] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.550] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.592] SetEvent (hEvent=0xa0) returned 1 [0131.592] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.596] SetEvent (hEvent=0xa0) returned 1 [0131.596] SwitchToThread () returned 1 [0131.596] SetEvent (hEvent=0xa0) returned 1 [0131.596] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.597] SetEvent (hEvent=0xa0) returned 1 [0131.597] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.598] SetEvent (hEvent=0xa0) returned 1 [0131.598] SwitchToThread () returned 1 [0131.599] SetEvent (hEvent=0x6c) returned 1 [0131.599] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.606] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.699] SetEvent (hEvent=0x6c) returned 1 [0131.699] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0131.700] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.700] SetEvent (hEvent=0x6c) returned 1 [0131.700] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0131.700] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0131.700] CloseHandle (hObject=0x100) returned 1 [0131.701] CloseHandle (hObject=0x98) returned 1 [0131.701] CloseHandle (hObject=0x150) returned 1 [0131.701] CloseHandle (hObject=0x188) returned 1 [0131.701] CloseHandle (hObject=0x190) returned 1 [0131.701] CloseHandle (hObject=0x108) returned 1 [0131.701] CloseHandle (hObject=0x138) returned 1 [0131.701] CloseHandle (hObject=0xe4) returned 1 [0131.701] CloseHandle (hObject=0xf0) returned 1 [0131.701] CloseHandle (hObject=0x104) returned 1 [0131.701] CloseHandle (hObject=0xfc) returned 1 [0131.701] CloseHandle (hObject=0x134) returned 1 [0131.701] CloseHandle (hObject=0x130) returned 1 [0131.701] CloseHandle (hObject=0xf8) returned 1 [0131.701] CloseHandle (hObject=0x158) returned 1 [0131.701] CloseHandle (hObject=0x164) returned 1 [0131.701] CloseHandle (hObject=0x160) returned 1 [0131.701] CloseHandle (hObject=0x114) returned 1 [0131.701] CloseHandle (hObject=0xe8) returned 1 [0131.701] CloseHandle (hObject=0xbc) returned 1 [0131.701] CloseHandle (hObject=0x17c) returned 1 [0131.701] CloseHandle (hObject=0x118) returned 1 [0131.702] CloseHandle (hObject=0xc8) returned 1 [0131.702] CloseHandle (hObject=0x16c) returned 1 [0131.702] CloseHandle (hObject=0x144) returned 1 [0131.702] CloseHandle (hObject=0xd0) returned 1 [0131.702] CloseHandle (hObject=0x168) returned 1 [0131.702] CloseHandle (hObject=0x198) returned 1 [0131.702] CloseHandle (hObject=0x12c) returned 1 [0131.702] CloseHandle (hObject=0x128) returned 1 [0131.702] CloseHandle (hObject=0x110) returned 1 [0131.702] CloseHandle (hObject=0x19c) returned 1 [0131.702] CloseHandle (hObject=0x180) returned 1 [0131.702] CloseHandle (hObject=0xc0) returned 1 [0131.702] CloseHandle (hObject=0x10c) returned 1 [0131.702] CloseHandle (hObject=0x15c) returned 1 [0131.702] CloseHandle (hObject=0x120) returned 1 [0131.702] CloseHandle (hObject=0x148) returned 1 [0131.702] CloseHandle (hObject=0x18c) returned 1 [0131.702] CloseHandle (hObject=0x124) returned 1 [0131.702] CloseHandle (hObject=0x154) returned 1 [0131.702] CloseHandle (hObject=0xdc) returned 1 [0131.703] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.141] SetEvent (hEvent=0x7c) returned 1 [0132.141] SetEvent (hEvent=0x6c) returned 1 [0132.141] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.143] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.160] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.161] SetEvent (hEvent=0x6c) returned 1 [0132.161] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.162] SetEvent (hEvent=0x6c) returned 1 [0132.162] SetEvent (hEvent=0x7c) returned 1 [0132.162] CloseHandle (hObject=0xdc) returned 1 [0132.162] CloseHandle (hObject=0x178) returned 1 [0132.162] SwitchToThread () returned 1 [0132.166] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.181] SetEvent (hEvent=0x7c) returned 1 [0132.181] SetEvent (hEvent=0x6c) returned 1 [0132.181] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0132.182] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.182] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0132.183] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.183] SetEvent (hEvent=0x7c) returned 1 [0132.183] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0132.186] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.186] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.251] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.665] SetEvent (hEvent=0x6c) returned 1 [0132.665] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.669] SetEvent (hEvent=0x6c) returned 1 [0132.669] SetEvent (hEvent=0x7c) returned 1 [0132.669] CloseHandle (hObject=0x278) returned 1 [0132.669] SwitchToThread () returned 1 [0132.677] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.737] SetEvent (hEvent=0x7c) returned 1 [0132.737] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0132.737] SetEvent (hEvent=0x7c) returned 1 [0132.737] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0132.738] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.738] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.758] SetEvent (hEvent=0x7c) returned 1 [0132.758] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.760] SetEvent (hEvent=0x7c) returned 1 [0132.760] SwitchToThread () returned 1 [0132.761] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.839] SetEvent (hEvent=0x7c) returned 1 [0132.840] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0132.871] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.871] SetEvent (hEvent=0x7c) returned 1 [0132.871] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0132.948] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0132.948] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0133.089] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0133.090] SetEvent (hEvent=0xa0) returned 1 [0133.090] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0133.090] SetEvent (hEvent=0xa0) returned 1 [0133.090] SwitchToThread () returned 1 [0133.141] SetEvent (hEvent=0x7c) returned 1 [0133.141] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0134.373] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0134.487] SetEvent (hEvent=0xa0) returned 1 [0134.487] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0134.488] SetEvent (hEvent=0xa0) returned 1 [0134.488] SwitchToThread () returned 1 [0134.513] SetEvent (hEvent=0x7c) returned 1 [0134.513] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0134.852] SetEvent (hEvent=0x7c) returned 1 [0134.852] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0134.856] SetEvent (hEvent=0x7c) returned 1 [0134.856] SwitchToThread () returned 1 [0134.857] SetEvent (hEvent=0x7c) returned 1 [0134.857] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0134.858] SetEvent (hEvent=0x6c) returned 1 [0134.858] SetEvent (hEvent=0xa8) returned 1 [0134.858] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.860] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0134.862] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0134.862] SetEvent (hEvent=0xa8) returned 1 [0134.862] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.863] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.863] SetEvent (hEvent=0xa8) returned 1 [0134.863] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x234f, lpOverlapped=0x0) returned 1 [0134.864] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.864] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.864] SetEvent (hEvent=0x7c) returned 1 [0134.864] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.864] GetFileType (hFile=0x190) returned 0x1 [0134.864] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.864] WriteFile (in: hFile=0x190, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x234f, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429aa0*=0x234f, lpOverlapped=0x12429aac) returned 1 [0134.865] GetFileType (hFile=0x190) returned 0x1 [0134.865] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x234f, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.865] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.865] CloseHandle (hObject=0x190) returned 1 [0134.865] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/5eNMeUMrObI.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\5enmeumrobi.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.866] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.866] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.866] CloseHandle (hObject=0x190) returned 1 [0134.866] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfCharsWritten=0x12429774*=0x5b) returned 1 [0134.866] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/7PpN_qwAVlI9gVO3D3.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\7ppn_qwavli9gvo3d3.wav"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca0e0d10, ftCreationTime.dwHighDateTime=0x1d4cbb3, ftLastAccessTime.dwLowDateTime=0x4b3cb060, ftLastAccessTime.dwHighDateTime=0x1d4cf0d, ftLastWriteTime.dwLowDateTime=0x4b3cb060, ftLastWriteTime.dwHighDateTime=0x1d4cf0d, nFileSizeHigh=0x0, nFileSizeLow=0x9b76)) returned 1 [0134.867] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/7PpN_qwAVlI9gVO3D3.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\7ppn_qwavli9gvo3d3.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.867] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.867] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.868] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0134.868] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a102 | out: pbBuffer=0x1244a102) returned 1 [0134.869] SetEvent (hEvent=0x7c) returned 1 [0134.869] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x9b76, lpOverlapped=0x0) returned 1 [0134.869] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.870] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.870] SetEvent (hEvent=0xa8) returned 1 [0134.870] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.870] GetFileType (hFile=0x190) returned 0x1 [0134.870] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.870] WriteFile (in: hFile=0x190, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x9b76, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x12429aa0*=0x9b76, lpOverlapped=0x12429aac) returned 1 [0134.871] GetFileType (hFile=0x190) returned 0x1 [0134.871] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x9b76, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.871] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.871] CloseHandle (hObject=0x190) returned 1 [0134.871] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/7PpN_qwAVlI9gVO3D3.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\7ppn_qwavli9gvo3d3.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.871] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.871] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.871] CloseHandle (hObject=0x190) returned 1 [0134.872] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c2000*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c2000*, lpNumberOfCharsWritten=0x12429774*=0x62) returned 1 [0134.872] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/AJa3N8BK.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aja3n8bk.wav"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a95c190, ftCreationTime.dwHighDateTime=0x1d4d1f8, ftLastAccessTime.dwLowDateTime=0xcc7cbab0, ftLastAccessTime.dwHighDateTime=0x1d4c7a3, ftLastWriteTime.dwLowDateTime=0xcc7cbab0, ftLastWriteTime.dwHighDateTime=0x1d4c7a3, nFileSizeHigh=0x0, nFileSizeLow=0x17295)) returned 1 [0134.872] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/AJa3N8BK.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aja3n8bk.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.872] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.872] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.873] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a002 | out: pbBuffer=0x1244a002) returned 1 [0134.873] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a039 | out: pbBuffer=0x1244a039) returned 1 [0134.874] SetEvent (hEvent=0xa8) returned 1 [0134.874] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x17295, lpOverlapped=0x0) returned 1 [0134.875] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.875] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.875] SetEvent (hEvent=0x7c) returned 1 [0134.875] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.876] GetFileType (hFile=0x190) returned 0x1 [0134.876] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.876] WriteFile (in: hFile=0x190, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x17295, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x17295, lpOverlapped=0x12429aac) returned 1 [0134.876] GetFileType (hFile=0x190) returned 0x1 [0134.876] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x17295, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.877] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.877] CloseHandle (hObject=0x190) returned 1 [0134.877] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/AJa3N8BK.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aja3n8bk.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.877] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.877] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.877] CloseHandle (hObject=0x190) returned 1 [0134.877] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fc000*, nNumberOfCharsToWrite=0x58, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fc000*, lpNumberOfCharsWritten=0x12429774*=0x58) returned 1 [0134.878] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/AvEXqQEtSFz.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\avexqqetsfz.m4a"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77827770, ftCreationTime.dwHighDateTime=0x1d4c843, ftLastAccessTime.dwLowDateTime=0x54823930, ftLastAccessTime.dwHighDateTime=0x1d4d0dc, ftLastWriteTime.dwLowDateTime=0x54823930, ftLastWriteTime.dwHighDateTime=0x1d4d0dc, nFileSizeHigh=0x0, nFileSizeLow=0x8e19)) returned 1 [0134.878] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/B9yf_.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b9yf_.m4a"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459e1fa0, ftCreationTime.dwHighDateTime=0x1d4d259, ftLastAccessTime.dwLowDateTime=0x530a6220, ftLastAccessTime.dwHighDateTime=0x1d4d501, ftLastWriteTime.dwLowDateTime=0x530a6220, ftLastWriteTime.dwHighDateTime=0x1d4d501, nFileSizeHigh=0x0, nFileSizeLow=0x948a)) returned 1 [0134.878] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Bb7rti-T 7OusysW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bb7rti-t 7ousysw.swf"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x485047f0, ftCreationTime.dwHighDateTime=0x1d4cf93, ftLastAccessTime.dwLowDateTime=0x88247ff0, ftLastAccessTime.dwHighDateTime=0x1d4c97f, ftLastWriteTime.dwLowDateTime=0x88247ff0, ftLastWriteTime.dwHighDateTime=0x1d4c97f, nFileSizeHigh=0x0, nFileSizeLow=0x919b)) returned 1 [0134.878] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Bb7rti-T 7OusysW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bb7rti-t 7ousysw.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.878] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.878] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.879] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0134.879] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a202 | out: pbBuffer=0x1244a202) returned 1 [0134.879] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a240 | out: pbBuffer=0x1244a240) returned 1 [0134.879] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a2d1 | out: pbBuffer=0x1244a2d1) returned 1 [0134.881] SetEvent (hEvent=0x7c) returned 1 [0134.881] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x919b, lpOverlapped=0x0) returned 1 [0134.881] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0134.881] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0134.881] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.882] SetEvent (hEvent=0xa8) returned 1 [0134.882] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.882] GetFileType (hFile=0x190) returned 0x1 [0134.882] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.882] WriteFile (in: hFile=0x190, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x919b, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x12429aa0*=0x919b, lpOverlapped=0x12429aac) returned 1 [0134.883] GetFileType (hFile=0x190) returned 0x1 [0134.883] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x919b, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.883] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.883] CloseHandle (hObject=0x190) returned 1 [0134.883] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Bb7rti-T 7OusysW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bb7rti-t 7ousysw.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.883] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.883] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.883] CloseHandle (hObject=0x190) returned 1 [0134.883] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c000*, nNumberOfCharsToWrite=0x60, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfCharsWritten=0x12429774*=0x60) returned 1 [0134.884] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Dv37yfvj PyKcAHbu1H.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\dv37yfvj pykcahbu1h.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f36fd0, ftCreationTime.dwHighDateTime=0x1d4c7d4, ftLastAccessTime.dwLowDateTime=0xfa75e880, ftLastAccessTime.dwHighDateTime=0x1d4c6f7, ftLastWriteTime.dwLowDateTime=0xfa75e880, ftLastWriteTime.dwHighDateTime=0x1d4c6f7, nFileSizeHigh=0x0, nFileSizeLow=0x153ff)) returned 1 [0134.884] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Dv37yfvj PyKcAHbu1H.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\dv37yfvj pykcahbu1h.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.884] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.884] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.885] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a002 | out: pbBuffer=0x1244a002) returned 1 [0134.886] SetEvent (hEvent=0xa8) returned 1 [0134.886] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x153ff, lpOverlapped=0x0) returned 1 [0134.886] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.887] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.887] SetEvent (hEvent=0x7c) returned 1 [0134.887] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.888] GetFileType (hFile=0x190) returned 0x1 [0134.888] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.888] WriteFile (in: hFile=0x190, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x153ff, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x153ff, lpOverlapped=0x12429aac) returned 1 [0134.888] GetFileType (hFile=0x190) returned 0x1 [0134.888] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x153ff, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.888] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.888] CloseHandle (hObject=0x190) returned 1 [0134.888] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Dv37yfvj PyKcAHbu1H.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\dv37yfvj pykcahbu1h.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.889] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.889] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.889] CloseHandle (hObject=0x190) returned 1 [0134.889] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c000*, nNumberOfCharsToWrite=0x63, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfCharsWritten=0x12429774*=0x63) returned 1 [0134.889] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/H0Izx8nD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\h0izx8nd.swf"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48efbd50, ftCreationTime.dwHighDateTime=0x1d4d135, ftLastAccessTime.dwLowDateTime=0x2fdeaae0, ftLastAccessTime.dwHighDateTime=0x1d4d114, ftLastWriteTime.dwLowDateTime=0x2fdeaae0, ftLastWriteTime.dwHighDateTime=0x1d4d114, nFileSizeHigh=0x0, nFileSizeLow=0xf464)) returned 1 [0134.889] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/H0Izx8nD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\h0izx8nd.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.889] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.890] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.890] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0134.890] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a102 | out: pbBuffer=0x1244a102) returned 1 [0134.890] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a1a9 | out: pbBuffer=0x1244a1a9) returned 1 [0134.891] SetEvent (hEvent=0x7c) returned 1 [0134.892] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0xf464, lpOverlapped=0x0) returned 1 [0134.892] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0134.892] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0134.892] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.893] SetEvent (hEvent=0xa8) returned 1 [0134.893] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.893] GetFileType (hFile=0x190) returned 0x1 [0134.893] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.893] WriteFile (in: hFile=0x190, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0xf464, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x12429aa0*=0xf464, lpOverlapped=0x12429aac) returned 1 [0134.894] GetFileType (hFile=0x190) returned 0x1 [0134.894] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf464, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.894] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.894] CloseHandle (hObject=0x190) returned 1 [0134.894] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/H0Izx8nD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\h0izx8nd.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.894] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.894] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.894] CloseHandle (hObject=0x190) returned 1 [0134.895] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fc000*, nNumberOfCharsToWrite=0x58, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fc000*, lpNumberOfCharsWritten=0x12429774*=0x58) returned 1 [0134.895] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/IcNU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\icnu.pptx"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3fbea3a0, ftCreationTime.dwHighDateTime=0x1d4c8d3, ftLastAccessTime.dwLowDateTime=0x578eb630, ftLastAccessTime.dwHighDateTime=0x1d4c5b5, ftLastWriteTime.dwLowDateTime=0x578eb630, ftLastWriteTime.dwHighDateTime=0x1d4c5b5, nFileSizeHigh=0x0, nFileSizeLow=0x23ee)) returned 1 [0134.895] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/IcNU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\icnu.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.895] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.895] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.896] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a002 | out: pbBuffer=0x1244a002) returned 1 [0134.897] SetEvent (hEvent=0xa8) returned 1 [0134.897] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x23ee, lpOverlapped=0x0) returned 1 [0134.898] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.898] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.898] SetEvent (hEvent=0x7c) returned 1 [0134.898] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.898] GetFileType (hFile=0x190) returned 0x1 [0134.898] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.899] WriteFile (in: hFile=0x190, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x23ee, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429aa0*=0x23ee, lpOverlapped=0x12429aac) returned 1 [0134.899] GetFileType (hFile=0x190) returned 0x1 [0134.899] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x23ee, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.899] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.899] CloseHandle (hObject=0x190) returned 1 [0134.899] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/IcNU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\icnu.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.899] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.899] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.899] CloseHandle (hObject=0x190) returned 1 [0134.900] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fc000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fc000*, lpNumberOfCharsWritten=0x12429774*=0x55) returned 1 [0134.900] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Kaz43j9ZpivhoK.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\kaz43j9zpivhok.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea4a5630, ftCreationTime.dwHighDateTime=0x1d4d52a, ftLastAccessTime.dwLowDateTime=0x263fb2f0, ftLastAccessTime.dwHighDateTime=0x1d4ce3e, ftLastWriteTime.dwLowDateTime=0x263fb2f0, ftLastWriteTime.dwHighDateTime=0x1d4ce3e, nFileSizeHigh=0x0, nFileSizeLow=0xa67a)) returned 1 [0134.900] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/M_VKKEHCyvkgTM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\m_vkkehcyvkgtm.flv"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55ce7920, ftCreationTime.dwHighDateTime=0x1d4cf38, ftLastAccessTime.dwLowDateTime=0x2c1e75a0, ftLastAccessTime.dwHighDateTime=0x1d4cb21, ftLastWriteTime.dwLowDateTime=0x2c1e75a0, ftLastWriteTime.dwHighDateTime=0x1d4cb21, nFileSizeHigh=0x0, nFileSizeLow=0x4cac)) returned 1 [0134.900] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/M_VKKEHCyvkgTM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\m_vkkehcyvkgtm.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.900] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.900] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.901] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0134.901] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a102 | out: pbBuffer=0x1244a102) returned 1 [0134.901] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a1a6 | out: pbBuffer=0x1244a1a6) returned 1 [0134.902] SetEvent (hEvent=0x7c) returned 1 [0134.902] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x4cac, lpOverlapped=0x0) returned 1 [0134.903] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.903] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.903] SetEvent (hEvent=0xa8) returned 1 [0134.903] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.903] GetFileType (hFile=0x190) returned 0x1 [0134.903] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.904] WriteFile (in: hFile=0x190, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x4cac, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x12429aa0*=0x4cac, lpOverlapped=0x12429aac) returned 1 [0134.904] GetFileType (hFile=0x190) returned 0x1 [0134.904] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x4cac, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.904] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.904] CloseHandle (hObject=0x190) returned 1 [0134.904] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/M_VKKEHCyvkgTM.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\m_vkkehcyvkgtm.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.904] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.904] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.905] CloseHandle (hObject=0x190) returned 1 [0134.905] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c000*, nNumberOfCharsToWrite=0x5e, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfCharsWritten=0x12429774*=0x5e) returned 1 [0134.905] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Oo2Q-jg42k9M.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\oo2q-jg42k9m.m4a"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1ec1b0, ftCreationTime.dwHighDateTime=0x1d4d40f, ftLastAccessTime.dwLowDateTime=0x8937fed0, ftLastAccessTime.dwHighDateTime=0x1d4c7ea, ftLastWriteTime.dwLowDateTime=0x8937fed0, ftLastWriteTime.dwHighDateTime=0x1d4c7ea, nFileSizeHigh=0x0, nFileSizeLow=0x11eeb)) returned 1 [0134.905] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/PP6jPt9JMM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\pp6jpt9jmm.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5103d740, ftCreationTime.dwHighDateTime=0x1d4cf70, ftLastAccessTime.dwLowDateTime=0x1a4cbfb0, ftLastAccessTime.dwHighDateTime=0x1d4cd67, ftLastWriteTime.dwLowDateTime=0x1a4cbfb0, ftLastWriteTime.dwHighDateTime=0x1d4cd67, nFileSizeHigh=0x0, nFileSizeLow=0x927c)) returned 1 [0134.905] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/PP6jPt9JMM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\pp6jpt9jmm.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.905] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.905] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.906] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a402 | out: pbBuffer=0x1244a402) returned 1 [0134.907] SetEvent (hEvent=0xa8) returned 1 [0134.907] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x927c, lpOverlapped=0x0) returned 1 [0134.908] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.908] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.908] SetEvent (hEvent=0x7c) returned 1 [0134.908] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.909] GetFileType (hFile=0x190) returned 0x1 [0134.909] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.909] WriteFile (in: hFile=0x190, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x927c, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x12429aa0*=0x927c, lpOverlapped=0x12429aac) returned 1 [0134.909] GetFileType (hFile=0x190) returned 0x1 [0134.909] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x927c, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.909] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.909] CloseHandle (hObject=0x190) returned 1 [0134.909] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/PP6jPt9JMM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\pp6jpt9jmm.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.909] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.910] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.910] CloseHandle (hObject=0x190) returned 1 [0134.910] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c000*, nNumberOfCharsToWrite=0x5a, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfCharsWritten=0x12429774*=0x5a) returned 1 [0134.910] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Q0EaU-pYxFnNwI.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q0eau-pyxfnnwi.avi"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44c24ae0, ftCreationTime.dwHighDateTime=0x1d4ce01, ftLastAccessTime.dwLowDateTime=0x2f83fb40, ftLastAccessTime.dwHighDateTime=0x1d4d2d6, ftLastWriteTime.dwLowDateTime=0x2f83fb40, ftLastWriteTime.dwHighDateTime=0x1d4d2d6, nFileSizeHigh=0x0, nFileSizeLow=0x5b9a)) returned 1 [0134.910] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Q0EaU-pYxFnNwI.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q0eau-pyxfnnwi.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.910] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.910] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.911] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a102 | out: pbBuffer=0x1244a102) returned 1 [0134.912] SetEvent (hEvent=0x7c) returned 1 [0134.912] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x5b9a, lpOverlapped=0x0) returned 1 [0134.913] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.913] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.913] SetEvent (hEvent=0xa8) returned 1 [0134.913] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.914] GetFileType (hFile=0x190) returned 0x1 [0134.914] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.914] WriteFile (in: hFile=0x190, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x5b9a, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429aa0*=0x5b9a, lpOverlapped=0x12429aac) returned 1 [0134.914] GetFileType (hFile=0x190) returned 0x1 [0134.914] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x5b9a, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.914] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.914] CloseHandle (hObject=0x190) returned 1 [0134.914] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Q0EaU-pYxFnNwI.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q0eau-pyxfnnwi.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.914] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.915] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.915] CloseHandle (hObject=0x190) returned 1 [0134.915] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c000*, nNumberOfCharsToWrite=0x5e, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfCharsWritten=0x12429774*=0x5e) returned 1 [0134.915] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/SDSnkbK5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sdsnkbk5.wav"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed03810, ftCreationTime.dwHighDateTime=0x1d4cd58, ftLastAccessTime.dwLowDateTime=0x25d18c70, ftLastAccessTime.dwHighDateTime=0x1d4d02e, ftLastWriteTime.dwLowDateTime=0x25d18c70, ftLastWriteTime.dwHighDateTime=0x1d4d02e, nFileSizeHigh=0x0, nFileSizeLow=0x7c28)) returned 1 [0134.915] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/SDSnkbK5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sdsnkbk5.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.915] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.915] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.916] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446124 | out: pbBuffer=0x12446124) returned 1 [0134.916] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a002 | out: pbBuffer=0x1244a002) returned 1 [0134.917] SetEvent (hEvent=0xa8) returned 1 [0134.917] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x7c28, lpOverlapped=0x0) returned 1 [0134.918] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.918] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.918] SetEvent (hEvent=0x7c) returned 1 [0134.918] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.919] GetFileType (hFile=0x190) returned 0x1 [0134.919] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.919] WriteFile (in: hFile=0x190, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x7c28, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429aa0*=0x7c28, lpOverlapped=0x12429aac) returned 1 [0134.919] GetFileType (hFile=0x190) returned 0x1 [0134.919] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x7c28, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.919] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.919] CloseHandle (hObject=0x190) returned 1 [0134.919] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/SDSnkbK5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sdsnkbk5.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.919] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.920] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.920] CloseHandle (hObject=0x190) returned 1 [0134.920] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fc000*, nNumberOfCharsToWrite=0x58, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fc000*, lpNumberOfCharsWritten=0x12429774*=0x58) returned 1 [0134.920] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/UDpgafGVfgkzOCjYtG7.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\udpgafgvfgkzocjytg7.rtf"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f084090, ftCreationTime.dwHighDateTime=0x1d4d055, ftLastAccessTime.dwLowDateTime=0xb94ab7e0, ftLastAccessTime.dwHighDateTime=0x1d4cb9e, ftLastWriteTime.dwLowDateTime=0xb94ab7e0, ftLastWriteTime.dwHighDateTime=0x1d4cb9e, nFileSizeHigh=0x0, nFileSizeLow=0x14ba5)) returned 1 [0134.920] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/UDpgafGVfgkzOCjYtG7.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\udpgafgvfgkzocjytg7.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.920] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.920] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.921] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0134.921] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a102 | out: pbBuffer=0x1244a102) returned 1 [0134.921] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a107 | out: pbBuffer=0x1244a107) returned 1 [0134.921] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a170 | out: pbBuffer=0x1244a170) returned 1 [0134.922] SetEvent (hEvent=0x7c) returned 1 [0134.922] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x14ba5, lpOverlapped=0x0) returned 1 [0134.923] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.923] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.924] SetEvent (hEvent=0xa8) returned 1 [0134.924] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.924] GetFileType (hFile=0x190) returned 0x1 [0134.924] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.924] WriteFile (in: hFile=0x190, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x14ba5, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x14ba5, lpOverlapped=0x12429aac) returned 1 [0134.925] GetFileType (hFile=0x190) returned 0x1 [0134.925] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x14ba5, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.925] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.925] CloseHandle (hObject=0x190) returned 1 [0134.925] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/UDpgafGVfgkzOCjYtG7.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\udpgafgvfgkzocjytg7.rtf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.925] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.925] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.926] CloseHandle (hObject=0x190) returned 1 [0134.926] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c000*, nNumberOfCharsToWrite=0x63, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfCharsWritten=0x12429774*=0x63) returned 1 [0134.926] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/UdYEwbii2LgwNXNHUv_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\udyewbii2lgwnxnhuv_.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf74b91f0, ftCreationTime.dwHighDateTime=0x1d4cdfa, ftLastAccessTime.dwLowDateTime=0xa95fd470, ftLastAccessTime.dwHighDateTime=0x1d4c930, ftLastWriteTime.dwLowDateTime=0xa95fd470, ftLastWriteTime.dwHighDateTime=0x1d4c930, nFileSizeHigh=0x0, nFileSizeLow=0x1284e)) returned 1 [0134.926] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/UdYEwbii2LgwNXNHUv_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\udyewbii2lgwnxnhuv_.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.926] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.926] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.927] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a002 | out: pbBuffer=0x1244a002) returned 1 [0134.927] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a0b1 | out: pbBuffer=0x1244a0b1) returned 1 [0134.928] SetEvent (hEvent=0xa8) returned 1 [0134.928] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x1284e, lpOverlapped=0x0) returned 1 [0134.929] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.929] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.929] SetEvent (hEvent=0x7c) returned 1 [0134.929] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.930] GetFileType (hFile=0x190) returned 0x1 [0134.930] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.930] WriteFile (in: hFile=0x190, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x1284e, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429aa0*=0x1284e, lpOverlapped=0x12429aac) returned 1 [0134.930] GetFileType (hFile=0x190) returned 0x1 [0134.930] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1284e, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.930] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.931] CloseHandle (hObject=0x190) returned 1 [0134.931] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/UdYEwbii2LgwNXNHUv_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\udyewbii2lgwnxnhuv_.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.931] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.931] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.931] CloseHandle (hObject=0x190) returned 1 [0134.931] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c000*, nNumberOfCharsToWrite=0x63, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfCharsWritten=0x12429774*=0x63) returned 1 [0134.932] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/WnSo.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wnso.gif"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x801c5090, ftCreationTime.dwHighDateTime=0x1d4c799, ftLastAccessTime.dwLowDateTime=0x14c6d270, ftLastAccessTime.dwHighDateTime=0x1d4d455, ftLastWriteTime.dwLowDateTime=0x14c6d270, ftLastWriteTime.dwHighDateTime=0x1d4d455, nFileSizeHigh=0x0, nFileSizeLow=0x10abf)) returned 1 [0134.932] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/WnSo.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wnso.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.932] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.932] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.933] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a102 | out: pbBuffer=0x1244a102) returned 1 [0134.933] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a18c | out: pbBuffer=0x1244a18c) returned 1 [0134.934] SetEvent (hEvent=0x7c) returned 1 [0134.934] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x10abf, lpOverlapped=0x0) returned 1 [0134.934] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.935] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.935] SetEvent (hEvent=0xa8) returned 1 [0134.935] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.936] GetFileType (hFile=0x190) returned 0x1 [0134.936] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.936] WriteFile (in: hFile=0x190, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x10abf, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x12429aa0*=0x10abf, lpOverlapped=0x12429aac) returned 1 [0134.936] GetFileType (hFile=0x190) returned 0x1 [0134.936] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x10abf, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.936] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.936] CloseHandle (hObject=0x190) returned 1 [0134.936] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/WnSo.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wnso.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.936] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.937] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.937] CloseHandle (hObject=0x190) returned 1 [0134.937] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fc000*, nNumberOfCharsToWrite=0x54, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fc000*, lpNumberOfCharsWritten=0x12429774*=0x54) returned 1 [0134.937] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/_zvQWRzLV.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\_zvqwrzlv.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84d12ac0, ftCreationTime.dwHighDateTime=0x1d4cda7, ftLastAccessTime.dwLowDateTime=0x4408fc60, ftLastAccessTime.dwHighDateTime=0x1d4d3e8, ftLastWriteTime.dwLowDateTime=0x4408fc60, ftLastWriteTime.dwHighDateTime=0x1d4d3e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bc4)) returned 1 [0134.937] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/_zvQWRzLV.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\_zvqwrzlv.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.937] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.937] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.938] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a002 | out: pbBuffer=0x1244a002) returned 1 [0134.938] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a086 | out: pbBuffer=0x1244a086) returned 1 [0134.939] SetEvent (hEvent=0xa8) returned 1 [0134.939] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x10bc4, lpOverlapped=0x0) returned 1 [0134.940] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.940] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.940] SetEvent (hEvent=0x7c) returned 1 [0134.940] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.941] GetFileType (hFile=0x190) returned 0x1 [0134.941] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.941] WriteFile (in: hFile=0x190, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x10bc4, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x12429aa0*=0x10bc4, lpOverlapped=0x12429aac) returned 1 [0134.941] GetFileType (hFile=0x190) returned 0x1 [0134.941] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x10bc4, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.941] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.942] CloseHandle (hObject=0x190) returned 1 [0134.942] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/_zvQWRzLV.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\_zvqwrzlv.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.942] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.942] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.942] CloseHandle (hObject=0x190) returned 1 [0134.942] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c000*, nNumberOfCharsToWrite=0x59, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfCharsWritten=0x12429774*=0x59) returned 1 [0134.942] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/bgJrCSmkUc1Roq2vVxN_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bgjrcsmkuc1roq2vvxn_.pptx"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa9d98320, ftCreationTime.dwHighDateTime=0x1d4d3b6, ftLastAccessTime.dwLowDateTime=0xa1938500, ftLastAccessTime.dwHighDateTime=0x1d4c62b, ftLastWriteTime.dwLowDateTime=0xa1938500, ftLastWriteTime.dwHighDateTime=0x1d4c62b, nFileSizeHigh=0x0, nFileSizeLow=0x17b45)) returned 1 [0134.943] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/bgJrCSmkUc1Roq2vVxN_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bgjrcsmkuc1roq2vvxn_.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.943] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.943] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.944] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0134.944] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a102 | out: pbBuffer=0x1244a102) returned 1 [0134.944] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a12e | out: pbBuffer=0x1244a12e) returned 1 [0134.944] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a18c | out: pbBuffer=0x1244a18c) returned 1 [0134.945] SetEvent (hEvent=0x7c) returned 1 [0134.945] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x17b45, lpOverlapped=0x0) returned 1 [0134.945] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.946] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.946] SetEvent (hEvent=0xa8) returned 1 [0134.946] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.947] GetFileType (hFile=0x190) returned 0x1 [0134.947] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.947] WriteFile (in: hFile=0x190, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x17b45, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x17b45, lpOverlapped=0x12429aac) returned 1 [0134.947] GetFileType (hFile=0x190) returned 0x1 [0134.947] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x17b45, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.947] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.947] CloseHandle (hObject=0x190) returned 1 [0134.948] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/bgJrCSmkUc1Roq2vVxN_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bgjrcsmkuc1roq2vvxn_.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.948] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.948] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.948] CloseHandle (hObject=0x190) returned 1 [0134.948] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c000*, nNumberOfCharsToWrite=0x65, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfCharsWritten=0x12429774*=0x65) returned 1 [0134.948] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/d1T_U.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\d1t_u.png"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f689850, ftCreationTime.dwHighDateTime=0x1d4ce74, ftLastAccessTime.dwLowDateTime=0x50a40400, ftLastAccessTime.dwHighDateTime=0x1d4c81d, ftLastWriteTime.dwLowDateTime=0x50a40400, ftLastWriteTime.dwHighDateTime=0x1d4c81d, nFileSizeHigh=0x0, nFileSizeLow=0x3f4e)) returned 1 [0134.948] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/d1T_U.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\d1t_u.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.949] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.949] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.949] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446124 | out: pbBuffer=0x12446124) returned 1 [0134.949] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a002 | out: pbBuffer=0x1244a002) returned 1 [0134.950] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a038 | out: pbBuffer=0x1244a038) returned 1 [0134.950] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a049 | out: pbBuffer=0x1244a049) returned 1 [0134.951] SetEvent (hEvent=0xa8) returned 1 [0134.951] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x3f4e, lpOverlapped=0x0) returned 1 [0134.951] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.951] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.951] SetEvent (hEvent=0x7c) returned 1 [0134.951] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.952] GetFileType (hFile=0x190) returned 0x1 [0134.952] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.952] WriteFile (in: hFile=0x190, lpBuffer=0x1249a000*, nNumberOfBytesToWrite=0x3f4e, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1249a000*, lpNumberOfBytesWritten=0x12429aa0*=0x3f4e, lpOverlapped=0x12429aac) returned 1 [0134.952] GetFileType (hFile=0x190) returned 0x1 [0134.952] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3f4e, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.952] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.952] CloseHandle (hObject=0x190) returned 1 [0134.952] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/d1T_U.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\d1t_u.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.952] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.953] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.953] CloseHandle (hObject=0x190) returned 1 [0134.953] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fc000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fc000*, lpNumberOfCharsWritten=0x12429774*=0x55) returned 1 [0134.953] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/eohr3zKKFMjhq.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\eohr3zkkfmjhq.docx"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe9476f80, ftCreationTime.dwHighDateTime=0x1d4d024, ftLastAccessTime.dwLowDateTime=0xf732fd60, ftLastAccessTime.dwHighDateTime=0x1d4c806, ftLastWriteTime.dwLowDateTime=0xf732fd60, ftLastWriteTime.dwHighDateTime=0x1d4c806, nFileSizeHigh=0x0, nFileSizeLow=0x14628)) returned 1 [0134.953] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/eohr3zKKFMjhq.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\eohr3zkkfmjhq.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.953] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.954] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.954] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a102 | out: pbBuffer=0x1244a102) returned 1 [0134.954] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a10f | out: pbBuffer=0x1244a10f) returned 1 [0134.955] SetEvent (hEvent=0x7c) returned 1 [0134.956] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x14628, lpOverlapped=0x0) returned 1 [0134.956] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.957] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.957] SetEvent (hEvent=0xa8) returned 1 [0134.957] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.957] GetFileType (hFile=0x190) returned 0x1 [0134.958] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.958] WriteFile (in: hFile=0x190, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x14628, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x14628, lpOverlapped=0x12429aac) returned 1 [0134.958] GetFileType (hFile=0x190) returned 0x1 [0134.958] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x14628, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.958] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.958] CloseHandle (hObject=0x190) returned 1 [0134.958] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/eohr3zKKFMjhq.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\eohr3zkkfmjhq.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.958] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.959] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.959] CloseHandle (hObject=0x190) returned 1 [0134.959] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c000*, nNumberOfCharsToWrite=0x5e, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfCharsWritten=0x12429774*=0x5e) returned 1 [0134.959] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/fIjLE.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fijle.ods"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90f6f0c0, ftCreationTime.dwHighDateTime=0x1d4d192, ftLastAccessTime.dwLowDateTime=0x781164c0, ftLastAccessTime.dwHighDateTime=0x1d4d59b, ftLastWriteTime.dwLowDateTime=0x781164c0, ftLastWriteTime.dwHighDateTime=0x1d4d59b, nFileSizeHigh=0x0, nFileSizeLow=0x155d1)) returned 1 [0134.959] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/fIjLE.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fijle.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.959] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.959] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.960] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a002 | out: pbBuffer=0x1244a002) returned 1 [0134.960] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a04a | out: pbBuffer=0x1244a04a) returned 1 [0134.961] SetEvent (hEvent=0xa8) returned 1 [0134.961] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x155d1, lpOverlapped=0x0) returned 1 [0134.962] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.962] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.963] SetEvent (hEvent=0x7c) returned 1 [0134.963] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.963] GetFileType (hFile=0x190) returned 0x1 [0134.963] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.963] WriteFile (in: hFile=0x190, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x155d1, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x155d1, lpOverlapped=0x12429aac) returned 1 [0134.964] GetFileType (hFile=0x190) returned 0x1 [0134.964] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x155d1, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.964] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.964] CloseHandle (hObject=0x190) returned 1 [0134.964] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/fIjLE.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fijle.ods"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.964] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.965] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.965] CloseHandle (hObject=0x190) returned 1 [0134.965] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fc000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fc000*, lpNumberOfCharsWritten=0x12429774*=0x55) returned 1 [0134.965] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/g-xY9LQ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\g-xy9lq.m4a"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63cce5a0, ftCreationTime.dwHighDateTime=0x1d4d566, ftLastAccessTime.dwLowDateTime=0x42cc1b20, ftLastAccessTime.dwHighDateTime=0x1d4c538, ftLastWriteTime.dwLowDateTime=0x42cc1b20, ftLastWriteTime.dwHighDateTime=0x1d4c538, nFileSizeHigh=0x0, nFileSizeLow=0xbb16)) returned 1 [0134.965] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/h6DRaJyxlSr4I.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\h6drajyxlsr4i.avi"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x73798950, ftCreationTime.dwHighDateTime=0x1d4cc28, ftLastAccessTime.dwLowDateTime=0x4ad67a80, ftLastAccessTime.dwHighDateTime=0x1d4d13c, ftLastWriteTime.dwLowDateTime=0x4ad67a80, ftLastWriteTime.dwHighDateTime=0x1d4d13c, nFileSizeHigh=0x0, nFileSizeLow=0x5edd)) returned 1 [0134.965] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/h6DRaJyxlSr4I.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\h6drajyxlsr4i.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.965] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.965] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.966] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a302 | out: pbBuffer=0x1244a302) returned 1 [0134.966] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a361 | out: pbBuffer=0x1244a361) returned 1 [0134.967] SetEvent (hEvent=0x7c) returned 1 [0134.967] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x5edd, lpOverlapped=0x0) returned 1 [0134.968] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.968] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.968] SetEvent (hEvent=0xa8) returned 1 [0134.968] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0134.968] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0134.969] GetFileType (hFile=0x190) returned 0x1 [0134.969] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.969] WriteFile (in: hFile=0x190, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x5edd, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429aa0*=0x5edd, lpOverlapped=0x12429aac) returned 1 [0134.969] GetFileType (hFile=0x190) returned 0x1 [0134.969] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x5edd, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.969] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.969] CloseHandle (hObject=0x190) returned 1 [0134.969] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/h6DRaJyxlSr4I.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\h6drajyxlsr4i.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.969] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.970] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.970] CloseHandle (hObject=0x190) returned 1 [0134.970] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c000*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfCharsWritten=0x12429774*=0x5d) returned 1 [0134.970] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/hhL9fj9N.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hhl9fj9n.m4a"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x22381650, ftCreationTime.dwHighDateTime=0x1d4ce9f, ftLastAccessTime.dwLowDateTime=0x9176c830, ftLastAccessTime.dwHighDateTime=0x1d4c757, ftLastWriteTime.dwLowDateTime=0x9176c830, ftLastWriteTime.dwHighDateTime=0x1d4c757, nFileSizeHigh=0x0, nFileSizeLow=0xd0d0)) returned 1 [0134.970] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/lYdw_c6ujU9hekwMzKxZ.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lydw_c6uju9hekwmzkxz.ots"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7b41cb0, ftCreationTime.dwHighDateTime=0x1d4d53e, ftLastAccessTime.dwLowDateTime=0x476b1a60, ftLastAccessTime.dwHighDateTime=0x1d4d2fc, ftLastWriteTime.dwLowDateTime=0x476b1a60, ftLastWriteTime.dwHighDateTime=0x1d4d2fc, nFileSizeHigh=0x0, nFileSizeLow=0x2c3c)) returned 1 [0134.970] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/lYdw_c6ujU9hekwMzKxZ.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lydw_c6uju9hekwmzkxz.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.970] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.971] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.971] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a102 | out: pbBuffer=0x1244a102) returned 1 [0134.972] SetEvent (hEvent=0xa8) returned 1 [0134.973] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x2c3c, lpOverlapped=0x0) returned 1 [0134.973] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.973] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.973] SetEvent (hEvent=0x7c) returned 1 [0134.973] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.974] GetFileType (hFile=0x190) returned 0x1 [0134.974] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.974] WriteFile (in: hFile=0x190, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x2c3c, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429aa0*=0x2c3c, lpOverlapped=0x12429aac) returned 1 [0134.974] GetFileType (hFile=0x190) returned 0x1 [0134.974] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x2c3c, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.974] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.974] CloseHandle (hObject=0x190) returned 1 [0134.974] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/lYdw_c6ujU9hekwMzKxZ.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lydw_c6uju9hekwmzkxz.ots"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.974] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.975] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.975] CloseHandle (hObject=0x190) returned 1 [0134.975] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c000*, nNumberOfCharsToWrite=0x64, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfCharsWritten=0x12429774*=0x64) returned 1 [0134.975] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/mghf7Ph6XAtyL.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mghf7ph6xatyl.avi"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcffca500, ftCreationTime.dwHighDateTime=0x1d4d35c, ftLastAccessTime.dwLowDateTime=0xb2b37130, ftLastAccessTime.dwHighDateTime=0x1d4c845, ftLastWriteTime.dwLowDateTime=0xb2b37130, ftLastWriteTime.dwHighDateTime=0x1d4c845, nFileSizeHigh=0x0, nFileSizeLow=0x7b30)) returned 1 [0134.975] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/mghf7Ph6XAtyL.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mghf7ph6xatyl.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.975] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.975] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.976] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0134.976] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a302 | out: pbBuffer=0x1244a302) returned 1 [0134.976] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a32b | out: pbBuffer=0x1244a32b) returned 1 [0134.977] SetEvent (hEvent=0x7c) returned 1 [0134.977] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x7b30, lpOverlapped=0x0) returned 1 [0134.978] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.978] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.978] SetEvent (hEvent=0xa8) returned 1 [0134.978] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0134.979] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0134.979] GetFileType (hFile=0x190) returned 0x1 [0134.979] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.979] WriteFile (in: hFile=0x190, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x7b30, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429aa0*=0x7b30, lpOverlapped=0x12429aac) returned 1 [0134.979] GetFileType (hFile=0x190) returned 0x1 [0134.979] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x7b30, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.979] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.979] CloseHandle (hObject=0x190) returned 1 [0134.979] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/mghf7Ph6XAtyL.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mghf7ph6xatyl.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.979] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.980] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.980] CloseHandle (hObject=0x190) returned 1 [0134.980] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c000*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfCharsWritten=0x12429774*=0x5d) returned 1 [0134.980] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/mxSz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mxsz.mkv"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4921c380, ftCreationTime.dwHighDateTime=0x1d4cb87, ftLastAccessTime.dwLowDateTime=0xdf2b3850, ftLastAccessTime.dwHighDateTime=0x1d4d390, ftLastWriteTime.dwLowDateTime=0xdf2b3850, ftLastWriteTime.dwHighDateTime=0x1d4d390, nFileSizeHigh=0x0, nFileSizeLow=0xa5fc)) returned 1 [0134.980] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/na V3QV3XM.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\na v3qv3xm.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81882230, ftCreationTime.dwHighDateTime=0x1d4c931, ftLastAccessTime.dwLowDateTime=0x306022b0, ftLastAccessTime.dwHighDateTime=0x1d4c65a, ftLastWriteTime.dwLowDateTime=0x306022b0, ftLastWriteTime.dwHighDateTime=0x1d4c65a, nFileSizeHigh=0x0, nFileSizeLow=0x61e)) returned 1 [0134.980] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/na V3QV3XM.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\na v3qv3xm.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.980] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.981] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.981] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a402 | out: pbBuffer=0x1244a402) returned 1 [0134.981] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a423 | out: pbBuffer=0x1244a423) returned 1 [0134.982] SetEvent (hEvent=0xa8) returned 1 [0134.983] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x61e, lpOverlapped=0x0) returned 1 [0134.983] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.983] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.983] SetEvent (hEvent=0x7c) returned 1 [0134.983] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.984] GetFileType (hFile=0x190) returned 0x1 [0134.984] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.984] WriteFile (in: hFile=0x190, lpBuffer=0x1249a000*, nNumberOfBytesToWrite=0x61e, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1249a000*, lpNumberOfBytesWritten=0x12429aa0*=0x61e, lpOverlapped=0x12429aac) returned 1 [0134.984] GetFileType (hFile=0x190) returned 0x1 [0134.984] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x61e, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.984] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.984] CloseHandle (hObject=0x190) returned 1 [0134.984] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/na V3QV3XM.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\na v3qv3xm.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.984] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.984] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.985] CloseHandle (hObject=0x190) returned 1 [0134.985] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c000*, nNumberOfCharsToWrite=0x5a, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfCharsWritten=0x12429774*=0x5a) returned 1 [0134.985] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/q1dK.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q1dk.avi"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b8e9660, ftCreationTime.dwHighDateTime=0x1d4c9dc, ftLastAccessTime.dwLowDateTime=0xfe733130, ftLastAccessTime.dwHighDateTime=0x1d4d355, ftLastWriteTime.dwLowDateTime=0xfe733130, ftLastWriteTime.dwHighDateTime=0x1d4d355, nFileSizeHigh=0x0, nFileSizeLow=0x16ea6)) returned 1 [0134.985] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/q1dK.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q1dk.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.985] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.985] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.986] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a102 | out: pbBuffer=0x1244a102) returned 1 [0134.986] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a172 | out: pbBuffer=0x1244a172) returned 1 [0134.987] SetEvent (hEvent=0x7c) returned 1 [0134.987] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x16ea6, lpOverlapped=0x0) returned 1 [0134.988] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.988] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.988] SetEvent (hEvent=0xa8) returned 1 [0134.988] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.989] GetFileType (hFile=0x190) returned 0x1 [0134.989] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.989] WriteFile (in: hFile=0x190, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x16ea6, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x16ea6, lpOverlapped=0x12429aac) returned 1 [0134.990] GetFileType (hFile=0x190) returned 0x1 [0134.990] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x16ea6, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.990] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.990] CloseHandle (hObject=0x190) returned 1 [0134.990] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/q1dK.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\q1dk.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.990] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.990] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.990] CloseHandle (hObject=0x190) returned 1 [0134.990] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fc000*, nNumberOfCharsToWrite=0x54, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fc000*, lpNumberOfCharsWritten=0x12429774*=0x54) returned 1 [0134.991] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/rWeh1ehLy1Y.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\rweh1ehly1y.mp4"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92228420, ftCreationTime.dwHighDateTime=0x1d4c8ad, ftLastAccessTime.dwLowDateTime=0xbc8ddf30, ftLastAccessTime.dwHighDateTime=0x1d4c820, ftLastWriteTime.dwLowDateTime=0xbc8ddf30, ftLastWriteTime.dwHighDateTime=0x1d4c820, nFileSizeHigh=0x0, nFileSizeLow=0x72e5)) returned 1 [0134.991] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/rWeh1ehLy1Y.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\rweh1ehly1y.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.991] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.991] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.992] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a302 | out: pbBuffer=0x1244a302) returned 1 [0134.992] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a3a4 | out: pbBuffer=0x1244a3a4) returned 1 [0134.993] SetEvent (hEvent=0xa8) returned 1 [0134.993] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x72e5, lpOverlapped=0x0) returned 1 [0134.993] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.994] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.994] SetEvent (hEvent=0x7c) returned 1 [0134.994] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.994] GetFileType (hFile=0x190) returned 0x1 [0134.994] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.994] WriteFile (in: hFile=0x190, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x72e5, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429aa0*=0x72e5, lpOverlapped=0x12429aac) returned 1 [0134.995] GetFileType (hFile=0x190) returned 0x1 [0134.995] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x72e5, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0134.995] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0134.995] CloseHandle (hObject=0x190) returned 1 [0134.995] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/rWeh1ehLy1Y.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\rweh1ehly1y.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.995] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.996] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0134.996] CloseHandle (hObject=0x190) returned 1 [0134.996] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c000*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfCharsWritten=0x12429774*=0x5b) returned 1 [0134.996] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/vQZpYW4e22Mm.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vqzpyw4e22mm.ods"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf00ca300, ftCreationTime.dwHighDateTime=0x1d4cea6, ftLastAccessTime.dwLowDateTime=0x1d303f0, ftLastAccessTime.dwHighDateTime=0x1d4c7a3, ftLastWriteTime.dwLowDateTime=0x1d303f0, ftLastWriteTime.dwHighDateTime=0x1d4c7a3, nFileSizeHigh=0x0, nFileSizeLow=0x1258e)) returned 1 [0134.996] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/vQZpYW4e22Mm.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vqzpyw4e22mm.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0134.996] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0134.996] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0134.997] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a402 | out: pbBuffer=0x1244a402) returned 1 [0134.998] SetEvent (hEvent=0x7c) returned 1 [0134.998] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x1258e, lpOverlapped=0x0) returned 1 [0134.999] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.999] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0134.999] SetEvent (hEvent=0xa8) returned 1 [0134.999] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.000] GetFileType (hFile=0x190) returned 0x1 [0135.000] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0135.000] WriteFile (in: hFile=0x190, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x1258e, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429aa0*=0x1258e, lpOverlapped=0x12429aac) returned 1 [0135.000] GetFileType (hFile=0x190) returned 0x1 [0135.000] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x1258e, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0135.001] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0135.001] CloseHandle (hObject=0x190) returned 1 [0135.001] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/vQZpYW4e22Mm.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\vqzpyw4e22mm.ods"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.001] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0135.001] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0135.001] CloseHandle (hObject=0x190) returned 1 [0135.001] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c000*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfCharsWritten=0x12429774*=0x5c) returned 1 [0135.002] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/wun4NyNH-z.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wun4nynh-z.rtf"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd09a000, ftCreationTime.dwHighDateTime=0x1d4d051, ftLastAccessTime.dwLowDateTime=0xc70004c0, ftLastAccessTime.dwHighDateTime=0x1d4d5ae, ftLastWriteTime.dwLowDateTime=0xc70004c0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0xf8c)) returned 1 [0135.002] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/wun4NyNH-z.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wun4nynh-z.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.002] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0135.002] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0135.003] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a302 | out: pbBuffer=0x1244a302) returned 1 [0135.003] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a325 | out: pbBuffer=0x1244a325) returned 1 [0135.003] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a3d3 | out: pbBuffer=0x1244a3d3) returned 1 [0135.004] SetEvent (hEvent=0xa8) returned 1 [0135.004] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xf8c, lpOverlapped=0x0) returned 1 [0135.004] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.004] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.005] SetEvent (hEvent=0x7c) returned 1 [0135.005] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.005] GetFileType (hFile=0x190) returned 0x1 [0135.005] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0135.005] WriteFile (in: hFile=0x190, lpBuffer=0x1244c000*, nNumberOfBytesToWrite=0xf8c, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1244c000*, lpNumberOfBytesWritten=0x12429aa0*=0xf8c, lpOverlapped=0x12429aac) returned 1 [0135.005] GetFileType (hFile=0x190) returned 0x1 [0135.005] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xf8c, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0135.005] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0135.005] CloseHandle (hObject=0x190) returned 1 [0135.005] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/wun4NyNH-z.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wun4nynh-z.rtf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.005] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0135.006] WriteFile (in: hFile=0x190, lpBuffer=0x1247c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x1247c240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0135.006] CloseHandle (hObject=0x190) returned 1 [0135.006] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c000*, nNumberOfCharsToWrite=0x5a, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1248c000*, lpNumberOfCharsWritten=0x12429774*=0x5a) returned 1 [0135.006] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/yiJUOPMQsD N.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yijuopmqsd n.ots"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa4af250, ftCreationTime.dwHighDateTime=0x1d4d3a5, ftLastAccessTime.dwLowDateTime=0x301048a0, ftLastAccessTime.dwHighDateTime=0x1d4c905, ftLastWriteTime.dwLowDateTime=0x301048a0, ftLastWriteTime.dwHighDateTime=0x1d4c905, nFileSizeHigh=0x0, nFileSizeLow=0x143e1)) returned 1 [0135.006] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/yiJUOPMQsD N.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yijuopmqsd n.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.007] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0135.007] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0135.007] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a402 | out: pbBuffer=0x1244a402) returned 1 [0135.007] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a494 | out: pbBuffer=0x1244a494) returned 1 [0135.008] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a4a9 | out: pbBuffer=0x1244a4a9) returned 1 [0135.009] SetEvent (hEvent=0x7c) returned 1 [0135.009] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x143e1, lpOverlapped=0x0) returned 1 [0135.009] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.010] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.010] SetEvent (hEvent=0xa8) returned 1 [0135.010] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.011] GetFileType (hFile=0x190) returned 0x1 [0135.011] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0135.011] WriteFile (in: hFile=0x190, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x143e1, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x143e1, lpOverlapped=0x12429aac) returned 1 [0135.011] GetFileType (hFile=0x190) returned 0x1 [0135.011] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x143e1, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0135.011] ReadFile (in: hFile=0x190, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0135.011] CloseHandle (hObject=0x190) returned 1 [0135.011] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/yiJUOPMQsD N.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yijuopmqsd n.ots"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.011] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0135.012] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0135.012] CloseHandle (hObject=0x190) returned 1 [0135.012] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c000*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1247c000*, lpNumberOfCharsWritten=0x12429774*=0x5c) returned 1 [0135.012] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/ytwg.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ytwg.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe23c82c0, ftCreationTime.dwHighDateTime=0x1d4cb47, ftLastAccessTime.dwLowDateTime=0x2378e610, ftLastAccessTime.dwHighDateTime=0x1d4d305, ftLastWriteTime.dwLowDateTime=0x2378e610, ftLastWriteTime.dwHighDateTime=0x1d4d305, nFileSizeHigh=0x0, nFileSizeLow=0x6d73)) returned 1 [0135.012] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/ytwg.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ytwg.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.012] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0135.012] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0135.013] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446124 | out: pbBuffer=0x12446124) returned 1 [0135.013] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a102 | out: pbBuffer=0x1244a102) returned 1 [0135.013] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1244a137 | out: pbBuffer=0x1244a137) returned 1 [0135.014] SetEvent (hEvent=0xa8) returned 1 [0135.014] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x6d73, lpOverlapped=0x0) returned 1 [0135.015] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.015] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.015] SetEvent (hEvent=0x7c) returned 1 [0135.015] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0135.015] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.016] GetFileType (hFile=0x190) returned 0x1 [0135.016] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0135.016] WriteFile (in: hFile=0x190, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x6d73, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429aa0*=0x6d73, lpOverlapped=0x12429aac) returned 1 [0135.016] GetFileType (hFile=0x190) returned 0x1 [0135.016] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x6d73, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0135.016] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0135.016] CloseHandle (hObject=0x190) returned 1 [0135.016] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/ytwg.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ytwg.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.016] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0135.017] WriteFile (in: hFile=0x190, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0135.017] CloseHandle (hObject=0x190) returned 1 [0135.017] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fc000*, nNumberOfCharsToWrite=0x54, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fc000*, lpNumberOfCharsWritten=0x12429774*=0x54) returned 1 [0135.017] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.017] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.017] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.017] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.017] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.017] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.018] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0135.018] CloseHandle (hObject=0x190) returned 1 [0135.018] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.018] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.018] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.019] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0135.019] WriteFile (in: hFile=0x190, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0135.020] CloseHandle (hObject=0x190) returned 1 [0135.020] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.021] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.021] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.021] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1f2bee0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f2bee0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.021] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1f2bee0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f2bee0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.021] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1f2bee0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1f2bee0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f30d00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.021] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0135.021] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0135.021] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0135.021] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0135.021] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0135.021] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.021] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.021] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.021] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.021] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.022] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.022] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.022] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.022] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.023] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.023] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.023] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.023] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.023] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.023] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.023] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.024] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.024] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.024] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.024] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.024] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.024] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.024] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.024] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.024] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.024] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0135.024] CloseHandle (hObject=0x190) returned 1 [0135.025] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.025] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.025] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.025] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.025] WriteFile (in: hFile=0x190, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.026] CloseHandle (hObject=0x190) returned 1 [0135.026] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.026] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.027] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.027] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1f3a940, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f3a940, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1f3a940, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f3a940, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0135.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1f3a940, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1f3a940, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f3f760, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.027] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.027] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.027] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.027] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.027] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.027] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.027] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.028] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.028] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.031] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.032] WriteFile (in: hFile=0x190, lpBuffer=0x124d1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d1300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.032] CloseHandle (hObject=0x190) returned 1 [0135.033] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.033] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.033] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.033] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1f493a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f493a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.033] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1f493a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f493a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.033] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1f41e70, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1f41e70, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f4e1c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.033] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0135.033] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0135.033] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaScripts", cAlternateFileName="JAVASC~1")) returned 1 [0135.033] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0135.033] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.033] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.033] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.033] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.034] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.034] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.034] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.034] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.034] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.034] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.034] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.034] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.034] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.035] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.035] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.035] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.036] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.036] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.036] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.036] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.036] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.036] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.036] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.036] CloseHandle (hObject=0x190) returned 1 [0135.037] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.037] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.037] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.037] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.037] WriteFile (in: hFile=0x190, lpBuffer=0x124d3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124d3900*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.038] CloseHandle (hObject=0x190) returned 1 [0135.038] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.038] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.039] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.039] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1f57e00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f57e00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.039] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1f57e00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f57e00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.039] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1f57e00, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1f57e00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f5cc20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.039] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.039] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.039] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.039] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.039] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.039] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.039] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.039] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.039] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.040] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Collab/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.040] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.040] CloseHandle (hObject=0x190) returned 1 [0135.040] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.040] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.040] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.040] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.041] WriteFile (in: hFile=0x190, lpBuffer=0x12490000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12490000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.042] CloseHandle (hObject=0x190) returned 1 [0135.042] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.042] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.042] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.042] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1f5f330, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f5f330, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.042] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1f5f330, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f5f330, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.042] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1f5f330, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1f5f330, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f64150, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.042] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.042] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.042] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.042] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.042] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.043] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.043] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.043] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.043] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.043] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Forms/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.043] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.043] CloseHandle (hObject=0x190) returned 1 [0135.043] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.043] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.043] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.045] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.045] WriteFile (in: hFile=0x190, lpBuffer=0x12492600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12492600*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.046] CloseHandle (hObject=0x190) returned 1 [0135.046] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.046] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.047] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.047] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x1f6b680, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f6b680, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.047] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0x1f6b680, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f6b680, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.047] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1f68f70, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1f68f70, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f704a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.047] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.js", cAlternateFileName="")) returned 1 [0135.047] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 1 [0135.047] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.047] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.047] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.047] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.047] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0135.048] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.048] ReadFile (in: hFile=0x190, lpBuffer=0x1244aa00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x1244aa00*, lpNumberOfBytesRead=0x12429938*=0x0, lpOverlapped=0x0) returned 1 [0135.048] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0135.048] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.048] ReadFile (in: hFile=0xfc, lpBuffer=0x1244ab00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x1244ab00*, lpNumberOfBytesRead=0x12429938*=0xa, lpOverlapped=0x0) returned 1 [0135.049] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa)) returned 1 [0135.049] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.049] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.049] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.049] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.050] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.050] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0135.050] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.050] CloseHandle (hObject=0x104) returned 1 [0135.050] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/glob.js\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.050] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/glob.js\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.050] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/glob.js\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.050] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/glob.js\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.050] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/glob.js\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.050] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/JavaScripts/glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0135.050] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.050] CloseHandle (hObject=0x104) returned 1 [0135.051] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.051] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.051] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0135.051] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.051] WriteFile (in: hFile=0x104, lpBuffer=0x12774000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12774000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.052] CloseHandle (hObject=0x104) returned 1 [0135.052] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.052] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.053] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.053] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1f7a0e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f7a0e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.053] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1f7a0e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f7a0e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.053] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1f7a0e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1f7a0e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f7c7f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.053] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda8cdc00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8f3d60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1517, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0135.053] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0135.053] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.053] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.053] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.053] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.053] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.053] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.054] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.054] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/addressbook.acrodata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0135.054] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0135.055] ReadFile (in: hFile=0x104, lpBuffer=0x1244ac00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x1244ac00*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0135.057] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/addressbook.acrodata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda8cdc00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8f3d60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1517)) returned 1 [0135.057] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.057] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.057] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.057] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.057] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.058] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0135.058] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.058] CloseHandle (hObject=0xf0) returned 1 [0135.058] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.058] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.058] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0135.060] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0135.060] WriteFile (in: hFile=0xf0, lpBuffer=0x12776600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12776600*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0135.061] CloseHandle (hObject=0xf0) returned 1 [0135.061] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.061] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.061] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.062] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1f90070, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f90070, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.062] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1f90070, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f90070, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.062] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5adf20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefc97c0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x3a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", cAlternateFileName="48B764~1.CRL")) returned 1 [0135.062] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1f8b250, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1f8b250, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1f92780, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.062] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 1 [0135.062] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.062] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.062] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache/48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\48b76449f3d5fefa1133aa805e420f0fca643651.crl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0135.062] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0135.062] ReadFile (in: hFile=0xf0, lpBuffer=0x1244ae00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1244ae00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0135.064] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.064] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.064] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache/A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\a9b8213768adc68af64fcc6409e8be414726687f.crl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0135.065] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0135.065] ReadFile (in: hFile=0xe4, lpBuffer=0x1244b000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1244b000*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0135.066] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache/48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\48b76449f3d5fefa1133aa805e420f0fca643651.crl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5adf20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefc97c0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x3a5)) returned 1 [0135.066] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache/A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\a9b8213768adc68af64fcc6409e8be414726687f.crl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347)) returned 1 [0135.067] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.067] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.067] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.067] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.067] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.067] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/10.0/Security/CRLCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.068] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0135.068] CloseHandle (hObject=0x138) returned 1 [0135.068] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.068] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.068] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.068] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.068] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.068] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Acrobat/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.068] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.068] CloseHandle (hObject=0x138) returned 1 [0135.068] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.069] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.069] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.069] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.069] WriteFile (in: hFile=0x138, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.070] CloseHandle (hObject=0x138) returned 1 [0135.070] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.070] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.071] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.071] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1fa6000, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fa6000, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.071] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1fa6000, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fa6000, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.071] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1fa6000, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1fa6000, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fa6000, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.071] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0135.071] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.071] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.071] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.071] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.071] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.071] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.071] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.072] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.072] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.072] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.072] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.072] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.072] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.072] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.072] CloseHandle (hObject=0x138) returned 1 [0135.072] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.072] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.072] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.073] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.073] WriteFile (in: hFile=0x138, lpBuffer=0x12656600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12656600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.074] CloseHandle (hObject=0x138) returned 1 [0135.074] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.074] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.074] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.074] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1faae20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1faae20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.074] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1faae20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1faae20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.074] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1faae20, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1faae20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fad530, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.074] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5NTRC6R", cAlternateFileName="")) returned 1 [0135.075] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.075] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.075] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.075] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.075] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.075] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.076] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.076] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.076] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.076] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.076] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.076] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.076] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.076] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.076] CloseHandle (hObject=0x138) returned 1 [0135.076] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.076] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.077] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.077] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.077] WriteFile (in: hFile=0x138, lpBuffer=0x12658c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12658c00*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.078] CloseHandle (hObject=0x138) returned 1 [0135.078] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.078] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.078] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.078] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1fb4a60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fb4a60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.079] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1fb4a60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fb4a60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.079] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1fb4a60, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1fb4a60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fb7170, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.079] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.079] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.079] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.079] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.079] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.079] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.079] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.079] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.079] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.079] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Flash Player/AssetCache/D5NTRC6R/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.079] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.080] CloseHandle (hObject=0x138) returned 1 [0135.080] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.080] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.080] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.080] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.080] WriteFile (in: hFile=0x138, lpBuffer=0x127b5300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x127b5300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.081] CloseHandle (hObject=0x138) returned 1 [0135.081] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.082] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.082] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.082] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1fbbf90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fbbf90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.082] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1fbbf90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fbbf90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.082] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1fbbf90, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1fbbf90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fc0db0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.082] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.082] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.082] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.082] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.082] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.082] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.082] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.082] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.083] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.083] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Headlights/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.083] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.083] CloseHandle (hObject=0x138) returned 1 [0135.083] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.083] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.083] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.083] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.084] WriteFile (in: hFile=0x138, lpBuffer=0x127b7900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x127b7900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.085] CloseHandle (hObject=0x138) returned 1 [0135.085] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.085] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.085] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.085] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1fc34c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fc34c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.085] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1fc34c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fc34c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.085] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1fc34c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1fc34c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fc82e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.085] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0135.085] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.085] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.086] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.086] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.086] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.086] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.086] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.086] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.086] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.086] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.086] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.086] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.086] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.086] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.087] CloseHandle (hObject=0x138) returned 1 [0135.087] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.087] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.087] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.087] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.087] WriteFile (in: hFile=0x138, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.088] CloseHandle (hObject=0x138) returned 1 [0135.088] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.089] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.089] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.089] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1fcd100, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fcd100, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.089] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1fcd100, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fcd100, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.089] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1fcd100, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1fcd100, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fd1f20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.089] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.089] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.089] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.089] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.089] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.089] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.090] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.090] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.090] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.090] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/Linguistics/Dictionaries/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.090] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.090] CloseHandle (hObject=0x138) returned 1 [0135.090] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.090] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.090] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.091] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.091] WriteFile (in: hFile=0x138, lpBuffer=0x127d0600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x127d0600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.092] CloseHandle (hObject=0x138) returned 1 [0135.092] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.092] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.097] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.097] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1fd6d40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fd6d40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.098] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1fd6d40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fd6d40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.098] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1fd6d40, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1fd6d40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fd9450, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.098] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.098] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.098] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.098] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.098] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.098] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.098] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.098] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.098] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.098] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Adobe/LogTransport2/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.098] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.099] CloseHandle (hObject=0x138) returned 1 [0135.099] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.099] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.099] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.099] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0135.099] WriteFile (in: hFile=0x138, lpBuffer=0x127d2c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x127d2c00*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0135.101] CloseHandle (hObject=0x138) returned 1 [0135.101] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.101] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.101] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.101] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1fea5c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fea5c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.101] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1fea5c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fea5c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.101] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1fea5c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1fea5c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1fef3e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.101] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0135.101] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.101] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.101] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.101] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.102] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.102] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.102] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.102] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.102] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.102] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.102] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.102] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.102] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.103] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0135.103] CloseHandle (hObject=0x138) returned 1 [0135.103] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.103] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.103] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.103] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.104] WriteFile (in: hFile=0x138, lpBuffer=0x124a3300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124a3300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.105] CloseHandle (hObject=0x138) returned 1 [0135.105] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.105] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.105] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.105] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1ff4200, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1ff4200, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.105] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1ff4200, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1ff4200, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.105] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1ff4200, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1ff4200, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1ff9020, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.105] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.105] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.105] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.105] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.105] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.106] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.106] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.106] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.106] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.106] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.106] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.106] CloseHandle (hObject=0x138) returned 1 [0135.106] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.106] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.106] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.107] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0135.107] WriteFile (in: hFile=0x138, lpBuffer=0x124a5900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124a5900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0135.108] CloseHandle (hObject=0x138) returned 1 [0135.108] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.108] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.108] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.108] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1ffde40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1ffde40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.108] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1ffde40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x1ffde40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.109] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x1ffde40, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x1ffde40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2000550, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.109] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0135.109] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.109] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.109] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.109] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.109] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.109] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.109] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.109] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.109] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.109] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.110] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.110] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.110] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.110] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0135.110] CloseHandle (hObject=0x138) returned 1 [0135.110] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.110] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.110] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.112] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.112] WriteFile (in: hFile=0x138, lpBuffer=0x124ae000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124ae000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.113] CloseHandle (hObject=0x138) returned 1 [0135.113] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.113] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.113] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.113] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x200a190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x200a190, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.113] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x200a190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x200a190, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.114] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0135.114] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2005370, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2005370, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x200c8a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.114] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0135.114] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.114] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.114] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.114] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.115] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.115] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.115] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.115] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.115] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.115] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.115] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.115] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.115] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.116] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.116] WriteFile (in: hFile=0x138, lpBuffer=0x124af300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124af300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.117] CloseHandle (hObject=0x138) returned 1 [0135.117] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.117] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.117] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.117] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x2013dd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2013dd0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.117] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x2013dd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2013dd0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.118] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2013dd0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2013dd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x20164e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.118] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 1 [0135.118] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.118] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.118] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.118] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.118] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.118] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.119] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.119] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.119] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.119] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.119] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.119] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.119] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.119] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.119] CloseHandle (hObject=0x138) returned 1 [0135.120] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.120] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.120] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.120] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.120] WriteFile (in: hFile=0x138, lpBuffer=0x124b1900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124b1900*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.121] CloseHandle (hObject=0x138) returned 1 [0135.121] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.121] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.122] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.122] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x201da10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x201da10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.122] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x201da10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x201da10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.122] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x201da10, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x201da10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2020120, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.122] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.122] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.122] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.122] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.122] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.122] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.122] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.123] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.123] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.123] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/#SharedObjects/P7Y3F7QB/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.123] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.123] CloseHandle (hObject=0x138) returned 1 [0135.123] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.123] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.123] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.123] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.123] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.123] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.124] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0135.124] CloseHandle (hObject=0x138) returned 1 [0135.124] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.124] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.124] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.124] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0135.125] WriteFile (in: hFile=0x138, lpBuffer=0x127ed300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x127ed300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0135.126] CloseHandle (hObject=0x138) returned 1 [0135.126] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.126] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.126] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.126] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x2027650, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2027650, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x2027650, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2027650, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2027650, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2027650, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x202c470, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0135.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.126] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.126] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.126] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.126] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.127] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.127] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.127] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.127] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.127] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.127] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.127] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.127] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.127] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0135.127] CloseHandle (hObject=0x138) returned 1 [0135.128] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.128] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.128] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.128] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0135.128] WriteFile (in: hFile=0x138, lpBuffer=0x127ef900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x127ef900*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0135.130] CloseHandle (hObject=0x138) returned 1 [0135.130] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.130] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.130] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.130] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x2031290, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2031290, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.130] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x2031290, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2031290, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.130] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2031290, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2031290, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x20360b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.130] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0135.130] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.130] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.130] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.130] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.130] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.130] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.131] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.131] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.131] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.131] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.132] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.132] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.132] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.132] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0135.132] CloseHandle (hObject=0x138) returned 1 [0135.132] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.132] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.132] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.132] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0135.133] WriteFile (in: hFile=0x138, lpBuffer=0x12596000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12596000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0135.134] CloseHandle (hObject=0x138) returned 1 [0135.134] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.134] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.134] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.134] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x203aed0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x203aed0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.134] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x203aed0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x203aed0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.134] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x203aed0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x203aed0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x203fcf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.134] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1 [0135.134] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.134] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.134] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.134] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.135] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.135] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.135] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.135] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.135] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.135] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.135] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.135] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.135] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.136] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0135.136] CloseHandle (hObject=0x138) returned 1 [0135.136] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.136] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.136] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.136] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429878 | out: lpMode=0x12429878) returned 0 [0135.136] WriteFile (in: hFile=0x138, lpBuffer=0x12598600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x1242987c, lpOverlapped=0x0 | out: lpBuffer=0x12598600*, lpNumberOfBytesWritten=0x1242987c*=0x1033, lpOverlapped=0x0) returned 1 [0135.137] CloseHandle (hObject=0x138) returned 1 [0135.138] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.138] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.138] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.138] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys\\*", lpFindFileData=0x124294ec | out: lpFindFileData=0x124294ec*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x203fcf0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x203fcf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.138] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x203fcf0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x203fcf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.138] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x203fcf0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x203fcf0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2044b10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.138] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0135.138] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429568 | out: lpFindFileData=0x12429568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.138] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.138] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.138] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.138] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/settings.sol" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0135.139] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124297d8 | out: lpMode=0x124297d8) returned 0 [0135.139] ReadFile (in: hFile=0x138, lpBuffer=0x125a6100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124297e8, lpOverlapped=0x0 | out: lpBuffer=0x125a6100*, lpNumberOfBytesRead=0x124297e8*=0x100, lpOverlapped=0x0) returned 1 [0135.140] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/settings.sol" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), fInfoLevelId=0x0, lpFileInformation=0x124295c0 | out: lpFileInformation=0x124295c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6)) returned 1 [0135.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.141] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429510 | out: lpFindFileData=0x12429510*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.141] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429508 | out: lpFindFileData=0x12429508*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.141] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Macromedia/Flash Player/macromedia.com/support/flashplayer/sys/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0135.141] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x1242970c | out: lpMode=0x1242970c) returned 0 [0135.141] CloseHandle (hObject=0x108) returned 1 [0135.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.141] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.141] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0135.142] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0135.142] WriteFile (in: hFile=0x108, lpBuffer=0x1259ac00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x1259ac00*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0135.143] CloseHandle (hObject=0x108) returned 1 [0135.143] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.143] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.143] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.143] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x204e750, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x204e750, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x204e750, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x204e750, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x204e750, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x204e750, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2050e60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0135.144] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0135.145] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1 [0135.145] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0135.145] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1 [0135.145] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.145] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.145] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.145] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.145] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.145] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.146] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.146] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Credentials" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\credentials"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.146] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Credentials\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.146] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.146] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Crypto" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.147] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Crypto\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.147] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.147] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.147] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.148] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.148] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.148] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Excel\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.148] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.148] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.148] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IME12\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.149] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.149] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.149] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP12\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.149] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.149] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.149] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP8_1\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.150] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.150] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/IMJP9_0\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.150] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.150] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Internet Explorer\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.150] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.150] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.151] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MMC\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.151] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.151] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.151] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/MS Project\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.152] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.152] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.152] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Network\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.153] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.153] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.153] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Office\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.154] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.154] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.155] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Outlook\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.156] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.156] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.156] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/PowerPoint\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.157] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.157] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.157] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Proof\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.158] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.158] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.158] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Protect\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.158] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.158] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.158] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.159] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.159] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.159] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Publisher Building Blocks\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.161] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.161] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.161] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Speech\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.162] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.162] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.162] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/SystemCertificates\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.162] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.162] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.162] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Templates\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.163] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.163] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.163] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/UProof\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.164] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.165] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Windows" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.165] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Windows\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.165] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.165] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.165] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Word\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.166] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.166] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.166] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.166] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.166] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.166] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.166] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0135.166] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0135.167] CloseHandle (hObject=0x108) returned 1 [0135.167] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.167] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.167] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0135.167] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0135.167] WriteFile (in: hFile=0x108, lpBuffer=0x1256b300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1256b300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0135.168] CloseHandle (hObject=0x108) returned 1 [0135.168] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\@_read_to_recover_files_@.txt")) returned 0x2020 [0135.169] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.169] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.169] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x208b7e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x208b7e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0135.169] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x208b7e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x208b7e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.169] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x208b7e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x208b7e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2090600, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.169] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.169] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.169] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.169] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.169] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.169] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.169] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0135.169] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0135.170] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/AddIns/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0135.173] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Credentials\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.173] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2095420, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x2095420, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.173] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x2095420, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x2095420, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x209a240, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.173] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.173] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.175] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Crypto\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.176] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x209c950, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x209c950, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.176] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x209c950, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x209c950, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x20a1770, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.176] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0135.176] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.176] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.178] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Crypto/RSA\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.178] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x20a3e80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x20a3e80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.178] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x20a3e80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x20a3e80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x20a6590, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.178] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0135.178] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.178] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.182] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Crypto/RSA/S-1-5-21-3388679973-3930757225-3770151564-1000\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.182] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x20adac0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x20adac0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.183] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa1e34990, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="83AA4C~1")) returned 1 [0135.183] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="932A2D~1")) returned 1 [0135.183] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x20adac0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x20adac0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x20b01d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.183] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="FDA992~1")) returned 1 [0135.183] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.183] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.189] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.189] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x20bec30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x20bec30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.189] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0135.189] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x20bec30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x20bec30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x20c1340, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.190] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.190] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.191] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.191] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x20c3a50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x20c3a50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0135.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x20c3a50, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x20c3a50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x20c6160, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.192] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.192] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.193] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Document Building Blocks/1033/14\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0135.193] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x20c8870, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x20c8870, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.193] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x20c8870, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x20c8870, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x20caf80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0135.194] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4e2b7e00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0135.194] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.194] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0135.198] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240e8a0 | out: pbBuffer=0x1240e8a0) returned 1 [0135.198] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12447814 | out: pbBuffer=0x12447814) returned 1 [0135.198] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1257d002 | out: pbBuffer=0x1257d002) returned 1 [0135.198] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1257d01d | out: pbBuffer=0x1257d01d) returned 1 [0135.200] SetEvent (hEvent=0x7c) returned 1 [0135.200] ReadFile (in: hFile=0x120, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x3fe4ab, lpOverlapped=0x0) returned 1 [0135.282] CloseHandle (hObject=0xe4) returned 1 [0135.282] CloseHandle (hObject=0xf0) returned 1 [0135.282] CloseHandle (hObject=0x104) returned 1 [0135.282] CloseHandle (hObject=0xfc) returned 1 [0135.282] CloseHandle (hObject=0x190) returned 1 [0135.282] CloseHandle (hObject=0x138) returned 1 [0135.282] CloseHandle (hObject=0x124) returned 1 [0135.282] CloseHandle (hObject=0xdc) returned 1 [0135.282] CloseHandle (hObject=0x108) returned 1 [0135.282] SwitchToThread () returned 1 [0135.283] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.350] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.351] SetEvent (hEvent=0xa8) returned 1 [0135.351] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.353] SetEvent (hEvent=0xa8) returned 1 [0135.353] SetEvent (hEvent=0xa0) returned 1 [0135.353] SwitchToThread () returned 1 [0135.354] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.455] SetEvent (hEvent=0xa0) returned 1 [0135.455] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0135.456] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.456] SetEvent (hEvent=0xa0) returned 1 [0135.456] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0135.457] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.457] CloseHandle (hObject=0x18c) returned 1 [0135.457] CloseHandle (hObject=0x178) returned 1 [0135.457] CloseHandle (hObject=0x154) returned 1 [0135.457] CloseHandle (hObject=0xe4) returned 1 [0135.457] CloseHandle (hObject=0xf0) returned 1 [0135.457] CloseHandle (hObject=0x104) returned 1 [0135.457] CloseHandle (hObject=0xfc) returned 1 [0135.457] CloseHandle (hObject=0x190) returned 1 [0135.457] CloseHandle (hObject=0x138) returned 1 [0135.457] CloseHandle (hObject=0x124) returned 1 [0135.457] CloseHandle (hObject=0xdc) returned 1 [0135.457] CloseHandle (hObject=0x108) returned 1 [0135.457] CloseHandle (hObject=0x27c) returned 1 [0135.457] CloseHandle (hObject=0x120) returned 1 [0135.457] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.553] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.638] SetEvent (hEvent=0xa8) returned 1 [0135.638] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.639] SetEvent (hEvent=0xa8) returned 1 [0135.639] SetEvent (hEvent=0xa0) returned 1 [0135.639] CloseHandle (hObject=0x18c) returned 1 [0135.640] SwitchToThread () returned 1 [0135.643] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.778] SetEvent (hEvent=0xa0) returned 1 [0135.778] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0135.778] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.778] SetEvent (hEvent=0xa0) returned 1 [0135.779] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0135.781] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.781] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.806] SetEvent (hEvent=0x7c) returned 1 [0135.806] SetEvent (hEvent=0xa8) returned 1 [0135.806] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.813] SetEvent (hEvent=0xa8) returned 1 [0135.813] SetEvent (hEvent=0xa0) returned 1 [0135.813] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.820] SetEvent (hEvent=0x7c) returned 1 [0135.820] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.828] SetEvent (hEvent=0x7c) returned 1 [0135.828] SetEvent (hEvent=0xa0) returned 1 [0135.828] SwitchToThread () returned 1 [0135.829] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.832] SetEvent (hEvent=0xa0) returned 1 [0135.832] SetEvent (hEvent=0x7c) returned 1 [0135.832] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.833] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.834] SetEvent (hEvent=0xa8) returned 1 [0135.835] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.836] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.836] SetEvent (hEvent=0xa8) returned 1 [0135.836] ReadFile (in: hFile=0x16c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x39, lpOverlapped=0x0) returned 1 [0135.836] GetFileType (hFile=0x16c) returned 0x1 [0135.836] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.836] WriteFile (in: hFile=0x16c, lpBuffer=0x1243a140*, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1243a140*, lpNumberOfBytesWritten=0x12429800*=0x39, lpOverlapped=0x1242980c) returned 1 [0135.836] GetFileType (hFile=0x16c) returned 0x1 [0135.836] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x39, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0135.837] ReadFile (in: hFile=0x16c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0135.837] CloseHandle (hObject=0x16c) returned 1 [0135.837] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.837] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.837] WriteFile (in: hFile=0x16c, lpBuffer=0x12580b40*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x12580b40*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0135.837] CloseHandle (hObject=0x16c) returned 1 [0135.837] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1257c5a0*, nNumberOfCharsToWrite=0x84, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x1257c5a0*, lpNumberOfCharsWritten=0x124294d4*=0x84) returned 1 [0135.838] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/mimeTypes.rdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\mimetypes.rdf"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb50b6e70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5175550, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb5175550, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xef3)) returned 1 [0135.838] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb43eb830, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb43eb830, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3b3f6e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0135.838] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0135.838] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0135.838] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0135.839] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0135.839] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1257e202 | out: pbBuffer=0x1257e202) returned 1 [0135.839] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.840] SetEvent (hEvent=0xa8) returned 1 [0135.840] SetEvent (hEvent=0xa0) returned 1 [0135.840] SwitchToThread () returned 1 [0135.841] SetEvent (hEvent=0xa8) returned 1 [0135.841] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.843] SetEvent (hEvent=0xa0) returned 1 [0135.843] SetEvent (hEvent=0x7c) returned 1 [0135.843] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0135.844] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.844] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.846] SetEvent (hEvent=0xa8) returned 1 [0135.846] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0135.847] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0135.847] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0135.847] SetEvent (hEvent=0xac) returned 1 [0135.847] SetEvent (hEvent=0xa8) returned 1 [0135.847] ReadFile (in: hFile=0x16c, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x1242981c*=0x800000, lpOverlapped=0x0) returned 1 [0136.130] SwitchToThread () returned 1 [0136.137] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0136.356] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.239] SetEvent (hEvent=0x7c) returned 1 [0137.239] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0137.248] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.248] SetEvent (hEvent=0x7c) returned 1 [0137.248] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0137.263] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.263] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.289] SetEvent (hEvent=0x7c) returned 1 [0137.289] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.299] SetEvent (hEvent=0x7c) returned 1 [0137.299] SwitchToThread () returned 1 [0137.307] SetEvent (hEvent=0x7c) returned 1 [0137.307] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.321] SetEvent (hEvent=0xa8) returned 1 [0137.321] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.328] SetEvent (hEvent=0xa8) returned 1 [0137.328] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0137.338] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.338] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.341] SetEvent (hEvent=0xac) returned 1 [0137.341] SetEvent (hEvent=0xa8) returned 1 [0137.341] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x4000, lpOverlapped=0x0) returned 1 [0137.345] GetFileType (hFile=0x16c) returned 0x1 [0137.345] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.345] WriteFile (in: hFile=0x16c, lpBuffer=0x124b6000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x124b6000*, lpNumberOfBytesWritten=0x12429800*=0x4000, lpOverlapped=0x1242980c) returned 1 [0137.346] GetFileType (hFile=0x16c) returned 0x1 [0137.346] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.346] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0137.346] CloseHandle (hObject=0x16c) returned 1 [0137.346] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.346] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.354] WriteFile (in: hFile=0x16c, lpBuffer=0x124d06c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x124d06c0*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0137.358] CloseHandle (hObject=0x16c) returned 1 [0137.359] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12578100*, nNumberOfCharsToWrite=0x7f, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x12578100*, lpNumberOfCharsWritten=0x124294d4*=0x7f) returned 1 [0137.363] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc3787480, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3787480, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d6)) returned 1 [0137.363] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.363] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.363] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0137.364] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2094 | out: pbBuffer=0x124e2094) returned 1 [0137.364] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12578002 | out: pbBuffer=0x12578002) returned 1 [0137.364] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12578036 | out: pbBuffer=0x12578036) returned 1 [0137.365] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.366] SetEvent (hEvent=0xac) returned 1 [0137.366] SetEvent (hEvent=0x7c) returned 1 [0137.366] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x3d6, lpOverlapped=0x0) returned 1 [0137.367] GetFileType (hFile=0x16c) returned 0x1 [0137.367] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.367] WriteFile (in: hFile=0x16c, lpBuffer=0x1277c400*, nNumberOfBytesToWrite=0x3d6, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1277c400*, lpNumberOfBytesWritten=0x12429800*=0x3d6, lpOverlapped=0x1242980c) returned 1 [0137.367] GetFileType (hFile=0x16c) returned 0x1 [0137.367] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x3d6, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0137.367] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0137.367] CloseHandle (hObject=0x16c) returned 1 [0137.367] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.367] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.368] WriteFile (in: hFile=0x16c, lpBuffer=0x124d0fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x124d0fc0*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0137.368] CloseHandle (hObject=0x16c) returned 1 [0137.368] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c05a0*, nNumberOfCharsToWrite=0x86, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x124c05a0*, lpNumberOfCharsWritten=0x124294d4*=0x86) returned 1 [0137.368] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x84e029d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x84e029d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbc5)) returned 1 [0137.368] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Mozilla/Firefox/Profiles/silmbjec.default/sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0137.368] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0137.369] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0137.369] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0137.371] SwitchToThread () returned 1 [0137.371] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.373] SetEvent (hEvent=0xa8) returned 1 [0137.373] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.376] SetEvent (hEvent=0xa8) returned 1 [0137.376] SwitchToThread () returned 1 [0137.376] SetEvent (hEvent=0xa8) returned 1 [0137.376] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.378] SetEvent (hEvent=0x7c) returned 1 [0137.378] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.378] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.385] SetEvent (hEvent=0xa0) returned 1 [0137.385] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.386] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.452] SetEvent (hEvent=0xa0) returned 1 [0137.452] SetEvent (hEvent=0xa8) returned 1 [0137.452] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.459] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.524] SetEvent (hEvent=0xa8) returned 1 [0137.524] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.524] SetEvent (hEvent=0xa8) returned 1 [0137.524] SetEvent (hEvent=0xa0) returned 1 [0137.524] CloseHandle (hObject=0x128) returned 1 [0137.524] CloseHandle (hObject=0x110) returned 1 [0137.525] CloseHandle (hObject=0x19c) returned 1 [0137.525] CloseHandle (hObject=0x180) returned 1 [0137.525] CloseHandle (hObject=0xc0) returned 1 [0137.525] CloseHandle (hObject=0x10c) returned 1 [0137.525] CloseHandle (hObject=0x18c) returned 1 [0137.525] CloseHandle (hObject=0x154) returned 1 [0137.525] CloseHandle (hObject=0xe4) returned 1 [0137.525] CloseHandle (hObject=0xf0) returned 1 [0137.525] CloseHandle (hObject=0x104) returned 1 [0137.525] CloseHandle (hObject=0xfc) returned 1 [0137.525] CloseHandle (hObject=0x190) returned 1 [0137.525] CloseHandle (hObject=0x15c) returned 1 [0137.525] CloseHandle (hObject=0x27c) returned 1 [0137.525] CloseHandle (hObject=0x120) returned 1 [0137.525] CloseHandle (hObject=0x118) returned 1 [0137.525] CloseHandle (hObject=0xc8) returned 1 [0137.525] CloseHandle (hObject=0xd0) returned 1 [0137.525] CloseHandle (hObject=0x168) returned 1 [0137.525] CloseHandle (hObject=0x198) returned 1 [0137.525] CloseHandle (hObject=0x12c) returned 1 [0137.525] SwitchToThread () returned 1 [0137.581] SwitchToThread () returned 1 [0137.598] SetEvent (hEvent=0xa8) returned 1 [0137.598] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.678] SetEvent (hEvent=0xa0) returned 1 [0137.678] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.680] SetEvent (hEvent=0xa0) returned 1 [0137.680] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.682] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.683] SetEvent (hEvent=0xa0) returned 1 [0137.683] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x10995, lpOverlapped=0x0) returned 1 [0137.684] GetFileType (hFile=0x17c) returned 0x1 [0137.684] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.684] WriteFile (in: hFile=0x17c, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x10995, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429b48*=0x10995, lpOverlapped=0x12429b54) returned 1 [0137.684] GetFileType (hFile=0x17c) returned 0x1 [0137.684] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x10995, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.684] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.684] CloseHandle (hObject=0x17c) returned 1 [0137.685] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/DpnSvt_yYQN1ip.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dpnsvt_yyqn1ip.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.685] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.685] WriteFile (in: hFile=0x17c, lpBuffer=0x1249a6c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1249a6c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.685] CloseHandle (hObject=0x17c) returned 1 [0137.686] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x56, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x56) returned 1 [0137.686] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/H56i l8jwNvN dqAYS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h56i l8jwnvn dqays.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c21b40, ftCreationTime.dwHighDateTime=0x1d4cd57, ftLastAccessTime.dwLowDateTime=0xec4519c0, ftLastAccessTime.dwHighDateTime=0x1d4d4f3, ftLastWriteTime.dwLowDateTime=0xec4519c0, ftLastWriteTime.dwHighDateTime=0x1d4d4f3, nFileSizeHigh=0x0, nFileSizeLow=0x13f7b)) returned 1 [0137.686] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/H56i l8jwNvN dqAYS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h56i l8jwnvn dqays.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.686] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.686] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0137.687] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0137.687] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0137.688] SwitchToThread () returned 1 [0137.689] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.692] SetEvent (hEvent=0xa8) returned 1 [0137.692] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.695] SetEvent (hEvent=0xa8) returned 1 [0137.695] SwitchToThread () returned 1 [0137.695] SetEvent (hEvent=0xa8) returned 1 [0137.695] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.697] SetEvent (hEvent=0xa0) returned 1 [0137.697] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.699] SetEvent (hEvent=0xa0) returned 1 [0137.699] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.701] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.701] SetEvent (hEvent=0xa0) returned 1 [0137.701] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x18a32, lpOverlapped=0x0) returned 1 [0137.702] GetFileType (hFile=0x17c) returned 0x1 [0137.702] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.702] WriteFile (in: hFile=0x17c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x18a32, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429b48*=0x18a32, lpOverlapped=0x12429b54) returned 1 [0137.703] GetFileType (hFile=0x17c) returned 0x1 [0137.703] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x18a32, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.703] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.703] CloseHandle (hObject=0x17c) returned 1 [0137.703] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PevCaQbO5-.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pevcaqbo5-.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.703] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.704] WriteFile (in: hFile=0x17c, lpBuffer=0x1249a240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x1249a240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.704] CloseHandle (hObject=0x17c) returned 1 [0137.704] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c0b0*, nNumberOfCharsToWrite=0x52, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c0b0*, lpNumberOfCharsWritten=0x1242981c*=0x52) returned 1 [0137.704] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/QchgIfBo5xq4.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qchgifbo5xq4.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90764160, ftCreationTime.dwHighDateTime=0x1d4c705, ftLastAccessTime.dwLowDateTime=0xb5bf0810, ftLastAccessTime.dwHighDateTime=0x1d4d4bd, ftLastWriteTime.dwLowDateTime=0xb5bf0810, ftLastWriteTime.dwHighDateTime=0x1d4d4bd, nFileSizeHigh=0x0, nFileSizeLow=0x17056)) returned 1 [0137.705] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/UQloQd.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uqloqd.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd03860, ftCreationTime.dwHighDateTime=0x1d4d282, ftLastAccessTime.dwLowDateTime=0xa03d07b0, ftLastAccessTime.dwHighDateTime=0x1d4d40b, ftLastWriteTime.dwLowDateTime=0xa03d07b0, ftLastWriteTime.dwHighDateTime=0x1d4d40b, nFileSizeHigh=0x0, nFileSizeLow=0x3657)) returned 1 [0137.705] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/WLWIo6rts IESz.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wlwio6rts iesz.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e035440, ftCreationTime.dwHighDateTime=0x1d4d3aa, ftLastAccessTime.dwLowDateTime=0xfadc2620, ftLastAccessTime.dwHighDateTime=0x1d4c9f1, ftLastWriteTime.dwLowDateTime=0xfadc2620, ftLastWriteTime.dwHighDateTime=0x1d4c9f1, nFileSizeHigh=0x0, nFileSizeLow=0x4fbf)) returned 1 [0137.705] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/WLWIo6rts IESz.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wlwio6rts iesz.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.705] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.705] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0137.706] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0137.706] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0137.706] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b6011 | out: pbBuffer=0x124b6011) returned 1 [0137.706] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b607b | out: pbBuffer=0x124b607b) returned 1 [0137.706] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b607c | out: pbBuffer=0x124b607c) returned 1 [0137.706] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b607d | out: pbBuffer=0x124b607d) returned 1 [0137.706] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b60a7 | out: pbBuffer=0x124b60a7) returned 1 [0137.706] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b60da | out: pbBuffer=0x124b60da) returned 1 [0137.707] SwitchToThread () returned 1 [0137.707] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.722] SetEvent (hEvent=0xa8) returned 1 [0137.722] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.722] SetEvent (hEvent=0xa8) returned 1 [0137.722] SwitchToThread () returned 1 [0137.725] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.728] SetEvent (hEvent=0xa0) returned 1 [0137.728] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.730] SetEvent (hEvent=0xa0) returned 1 [0137.730] SwitchToThread () returned 1 [0137.731] SetEvent (hEvent=0xa0) returned 1 [0137.731] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.733] SetEvent (hEvent=0xa8) returned 1 [0137.733] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.734] SetEvent (hEvent=0xa8) returned 1 [0137.734] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.736] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.736] SetEvent (hEvent=0xa8) returned 1 [0137.736] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x9508, lpOverlapped=0x0) returned 1 [0137.737] GetFileType (hFile=0x17c) returned 0x1 [0137.737] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.737] WriteFile (in: hFile=0x17c, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x9508, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x12429b48*=0x9508, lpOverlapped=0x12429b54) returned 1 [0137.737] GetFileType (hFile=0x17c) returned 0x1 [0137.737] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x9508, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.737] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.737] CloseHandle (hObject=0x17c) returned 1 [0137.738] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/fUwity1af-QlSxxi.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fuwity1af-qlsxxi.pdf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.738] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.738] WriteFile (in: hFile=0x17c, lpBuffer=0x12584240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12584240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.738] CloseHandle (hObject=0x17c) returned 1 [0137.739] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c0b0*, nNumberOfCharsToWrite=0x58, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c0b0*, lpNumberOfCharsWritten=0x1242981c*=0x58) returned 1 [0137.739] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/ijOH8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ijoh8.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68baa760, ftCreationTime.dwHighDateTime=0x1d4d3a3, ftLastAccessTime.dwLowDateTime=0x5307bf70, ftLastAccessTime.dwHighDateTime=0x1d4c98f, ftLastWriteTime.dwLowDateTime=0x5307bf70, ftLastWriteTime.dwHighDateTime=0x1d4c98f, nFileSizeHigh=0x0, nFileSizeLow=0x14e8a)) returned 1 [0137.739] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/ijOH8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ijoh8.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.739] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.739] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0137.740] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0137.740] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b6040 | out: pbBuffer=0x124b6040) returned 1 [0137.741] SwitchToThread () returned 1 [0137.741] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.745] SetEvent (hEvent=0xa0) returned 1 [0137.745] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.747] SetEvent (hEvent=0xa0) returned 1 [0137.747] SwitchToThread () returned 1 [0137.747] SetEvent (hEvent=0xa0) returned 1 [0137.747] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.749] SetEvent (hEvent=0xa8) returned 1 [0137.749] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.751] SetEvent (hEvent=0xa8) returned 1 [0137.751] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.753] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.753] SetEvent (hEvent=0xa8) returned 1 [0137.753] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0xfd1d, lpOverlapped=0x0) returned 1 [0137.754] GetFileType (hFile=0x17c) returned 0x1 [0137.754] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.754] WriteFile (in: hFile=0x17c, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0xfd1d, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x12429b48*=0xfd1d, lpOverlapped=0x12429b54) returned 1 [0137.754] GetFileType (hFile=0x17c) returned 0x1 [0137.754] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0xfd1d, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.754] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.754] CloseHandle (hObject=0x17c) returned 1 [0137.755] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/qLrgvIWjmmlyK.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qlrgviwjmmlyk.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.755] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.755] WriteFile (in: hFile=0x17c, lpBuffer=0x125846c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x125846c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.755] CloseHandle (hObject=0x17c) returned 1 [0137.756] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c0b0*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c0b0*, lpNumberOfCharsWritten=0x1242981c*=0x55) returned 1 [0137.756] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/rkFo7BF3eVJrKao.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rkfo7bf3evjrkao.csv"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77674c90, ftCreationTime.dwHighDateTime=0x1d4c549, ftLastAccessTime.dwLowDateTime=0x278edcc0, ftLastAccessTime.dwHighDateTime=0x1d4d042, ftLastWriteTime.dwLowDateTime=0x278edcc0, ftLastWriteTime.dwHighDateTime=0x1d4d042, nFileSizeHigh=0x0, nFileSizeLow=0x13c4c)) returned 1 [0137.756] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/rkFo7BF3eVJrKao.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rkfo7bf3evjrkao.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.756] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.756] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0137.757] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0137.757] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0137.757] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b6043 | out: pbBuffer=0x124b6043) returned 1 [0137.757] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b6048 | out: pbBuffer=0x124b6048) returned 1 [0137.757] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b60a4 | out: pbBuffer=0x124b60a4) returned 1 [0137.766] SwitchToThread () returned 1 [0137.766] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.777] SetEvent (hEvent=0xa0) returned 1 [0137.777] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.779] SetEvent (hEvent=0xa0) returned 1 [0137.779] SwitchToThread () returned 1 [0137.779] SetEvent (hEvent=0xa0) returned 1 [0137.779] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.781] SetEvent (hEvent=0xa8) returned 1 [0137.781] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.782] SetEvent (hEvent=0xa8) returned 1 [0137.783] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0137.784] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.784] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.800] SetEvent (hEvent=0xa8) returned 1 [0137.800] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.803] SetEvent (hEvent=0xa8) returned 1 [0137.803] SwitchToThread () returned 1 [0137.804] SetEvent (hEvent=0xa8) returned 1 [0137.804] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.806] SetEvent (hEvent=0xa0) returned 1 [0137.806] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.807] SetEvent (hEvent=0xa0) returned 1 [0137.807] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.809] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.810] SetEvent (hEvent=0xa0) returned 1 [0137.810] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x6811, lpOverlapped=0x0) returned 1 [0137.810] GetFileType (hFile=0xdc) returned 0x1 [0137.810] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0137.810] WriteFile (in: hFile=0xdc, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x6811, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429aa0*=0x6811, lpOverlapped=0x12429aac) returned 1 [0137.810] GetFileType (hFile=0xdc) returned 0x1 [0137.810] SetFilePointerEx (in: hFile=0xdc, liDistanceToMove=0x6811, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0137.810] ReadFile (in: hFile=0xdc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0137.811] CloseHandle (hObject=0xdc) returned 1 [0137.811] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/vWfQ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\vwfq.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0137.811] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0137.811] WriteFile (in: hFile=0xdc, lpBuffer=0x124c86c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c86c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0137.811] CloseHandle (hObject=0xdc) returned 1 [0137.811] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fc000*, nNumberOfCharsToWrite=0x58, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fc000*, lpNumberOfCharsWritten=0x12429774*=0x58) returned 1 [0137.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.812] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.812] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.812] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0137.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0137.812] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0137.812] CloseHandle (hObject=0xdc) returned 1 [0137.812] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.813] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.813] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0137.815] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0137.815] WriteFile (in: hFile=0xdc, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0137.816] CloseHandle (hObject=0xdc) returned 1 [0137.816] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\@_read_to_recover_files_@.txt")) returned 0x20 [0137.816] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0137.816] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.816] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75395750, ftCreationTime.dwHighDateTime=0x1d4c5bd, ftLastAccessTime.dwLowDateTime=0x391c110, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x391c110, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0137.816] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75395750, ftCreationTime.dwHighDateTime=0x1d4c5bd, ftLastAccessTime.dwLowDateTime=0x391c110, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x391c110, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.816] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x391c110, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x391c110, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x391c110, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0137.816] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7488ed20, ftCreationTime.dwHighDateTime=0x1d4ca1d, ftLastAccessTime.dwLowDateTime=0x88565a90, ftLastAccessTime.dwHighDateTime=0x1d4ca1d, ftLastWriteTime.dwLowDateTime=0x88565a90, ftLastWriteTime.dwHighDateTime=0x1d4ca1d, nFileSizeHigh=0x0, nFileSizeLow=0x12edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="WiI-ZDkw0l-J42wZ2.avi", cAlternateFileName="WII-ZD~1.AVI")) returned 1 [0137.816] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe66e2060, ftCreationTime.dwHighDateTime=0x1d4ccb9, ftLastAccessTime.dwLowDateTime=0x81a2e330, ftLastAccessTime.dwHighDateTime=0x1d4d1a2, ftLastWriteTime.dwLowDateTime=0x81a2e330, ftLastWriteTime.dwHighDateTime=0x1d4d1a2, nFileSizeHigh=0x0, nFileSizeLow=0xa0b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZLawDb0.mp4", cAlternateFileName="")) returned 1 [0137.816] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.816] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0137.816] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.816] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0137.817] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/WiI-ZDkw0l-J42wZ2.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\wii-zdkw0l-j42wz2.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0137.817] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0137.817] ReadFile (in: hFile=0xdc, lpBuffer=0x124d8000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124d8000*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0137.818] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/ZLawDb0.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\zlawdb0.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0137.818] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0137.818] ReadFile (in: hFile=0x17c, lpBuffer=0x124d8100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124d8100*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0137.819] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/WiI-ZDkw0l-J42wZ2.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\wii-zdkw0l-j42wz2.avi"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7488ed20, ftCreationTime.dwHighDateTime=0x1d4ca1d, ftLastAccessTime.dwLowDateTime=0x88565a90, ftLastAccessTime.dwHighDateTime=0x1d4ca1d, ftLastWriteTime.dwLowDateTime=0x88565a90, ftLastWriteTime.dwHighDateTime=0x1d4ca1d, nFileSizeHigh=0x0, nFileSizeLow=0x12edb)) returned 1 [0137.819] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/WiI-ZDkw0l-J42wZ2.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\wii-zdkw0l-j42wz2.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.819] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0137.819] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442240 | out: pbBuffer=0x12442240) returned 1 [0137.820] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d8202 | out: pbBuffer=0x124d8202) returned 1 [0137.820] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d82a6 | out: pbBuffer=0x124d82a6) returned 1 [0137.821] SetEvent (hEvent=0xa8) returned 1 [0137.821] ReadFile (in: hFile=0x108, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x12edb, lpOverlapped=0x0) returned 1 [0137.823] GetFileType (hFile=0x108) returned 0x1 [0137.823] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0137.823] WriteFile (in: hFile=0x108, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x12edb, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x124299f8*=0x12edb, lpOverlapped=0x12429a04) returned 1 [0137.823] GetFileType (hFile=0x108) returned 0x1 [0137.823] SetFilePointerEx (in: hFile=0x108, liDistanceToMove=0x12edb, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0137.823] ReadFile (in: hFile=0x108, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0137.823] CloseHandle (hObject=0x108) returned 1 [0137.823] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/WiI-ZDkw0l-J42wZ2.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\wii-zdkw0l-j42wz2.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.823] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0137.824] WriteFile (in: hFile=0x108, lpBuffer=0x124c8fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x124c8fc0*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0137.824] CloseHandle (hObject=0x108) returned 1 [0137.824] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x78, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x124296cc*=0x78) returned 1 [0137.824] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/ZLawDb0.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\zlawdb0.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe66e2060, ftCreationTime.dwHighDateTime=0x1d4ccb9, ftLastAccessTime.dwLowDateTime=0x81a2e330, ftLastAccessTime.dwHighDateTime=0x1d4d1a2, ftLastWriteTime.dwLowDateTime=0x81a2e330, ftLastWriteTime.dwHighDateTime=0x1d4d1a2, nFileSizeHigh=0x0, nFileSizeLow=0xa0b9)) returned 1 [0137.824] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/ZqkX8xhI R1-VjyaXh/ZLawDb0.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\zqkx8xhi r1-vjyaxh\\zlawdb0.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0137.824] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0137.825] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0137.825] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0137.825] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c08f | out: pbBuffer=0x1248c08f) returned 1 [0137.826] CloseHandle (hObject=0x17c) returned 1 [0137.827] CloseHandle (hObject=0xdc) returned 1 [0137.827] SwitchToThread () returned 1 [0137.827] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.829] SetEvent (hEvent=0xa0) returned 1 [0137.829] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.831] SetEvent (hEvent=0xa0) returned 1 [0137.831] SwitchToThread () returned 1 [0137.833] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.843] SetEvent (hEvent=0xa0) returned 1 [0137.843] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.844] SetEvent (hEvent=0xa0) returned 1 [0137.844] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0137.847] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.847] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0137.847] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.848] SetEvent (hEvent=0xac) returned 1 [0137.848] SetEvent (hEvent=0xa0) returned 1 [0137.848] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x17cad, lpOverlapped=0x0) returned 1 [0137.849] GetFileType (hFile=0x144) returned 0x1 [0137.849] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0137.849] WriteFile (in: hFile=0x144, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x17cad, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x124299f8*=0x17cad, lpOverlapped=0x12429a04) returned 1 [0137.850] GetFileType (hFile=0x144) returned 0x1 [0137.850] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x17cad, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0137.850] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0137.850] CloseHandle (hObject=0x144) returned 1 [0137.850] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/aRXLAJKWj Ly1 RHW7G9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\arxlajkwj ly1 rhw7g9.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0137.850] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0137.850] WriteFile (in: hFile=0x144, lpBuffer=0x127fa240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x127fa240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0137.851] CloseHandle (hObject=0x144) returned 1 [0137.851] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0x75, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x124296cc*=0x75) returned 1 [0137.851] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/lry5A.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\lry5a.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b85370, ftCreationTime.dwHighDateTime=0x1d4c77a, ftLastAccessTime.dwLowDateTime=0x830daa20, ftLastAccessTime.dwHighDateTime=0x1d4cc39, ftLastWriteTime.dwLowDateTime=0x830daa20, ftLastWriteTime.dwHighDateTime=0x1d4cc39, nFileSizeHigh=0x0, nFileSizeLow=0x6d76)) returned 1 [0137.851] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/PNj50l2L2qW/qbF4nhuyOKYL/lry5A.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pnj50l2l2qw\\qbf4nhuyokyl\\lry5a.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0137.851] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0137.852] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0137.852] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0137.852] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0137.853] SwitchToThread () returned 1 [0137.854] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.856] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.857] SetEvent (hEvent=0xa8) returned 1 [0137.857] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.860] SetEvent (hEvent=0xa8) returned 1 [0137.860] SetEvent (hEvent=0x7c) returned 1 [0137.860] SwitchToThread () returned 1 [0137.864] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.905] SetEvent (hEvent=0x7c) returned 1 [0137.905] SetEvent (hEvent=0xa8) returned 1 [0137.905] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0137.906] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.906] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0137.907] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.907] SetEvent (hEvent=0x7c) returned 1 [0137.907] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0137.911] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.911] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.912] SetEvent (hEvent=0xac) returned 1 [0137.912] SetEvent (hEvent=0x7c) returned 1 [0137.912] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x5e7c, lpOverlapped=0x0) returned 1 [0137.912] GetFileType (hFile=0x154) returned 0x1 [0137.912] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.912] WriteFile (in: hFile=0x154, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x5e7c, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429b48*=0x5e7c, lpOverlapped=0x12429b54) returned 1 [0137.913] GetFileType (hFile=0x154) returned 0x1 [0137.913] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x5e7c, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.913] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.913] CloseHandle (hObject=0x154) returned 1 [0137.913] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/50VGB-UvN.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\50vgb-uvn.pps"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.913] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.913] WriteFile (in: hFile=0x154, lpBuffer=0x12778240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12778240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.914] CloseHandle (hObject=0x154) returned 1 [0137.914] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c0b0*, nNumberOfCharsToWrite=0x53, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c0b0*, lpNumberOfCharsWritten=0x1242981c*=0x53) returned 1 [0137.914] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/6g7-O Oj0fEf1rCpHFm.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6g7-o oj0fef1rcphfm.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb931b2d0, ftCreationTime.dwHighDateTime=0x1d51014, ftLastAccessTime.dwLowDateTime=0x1a5b26b0, ftLastAccessTime.dwHighDateTime=0x1d50d25, ftLastWriteTime.dwLowDateTime=0x1a5b26b0, ftLastWriteTime.dwHighDateTime=0x1d50d25, nFileSizeHigh=0x0, nFileSizeLow=0x164fe)) returned 1 [0137.914] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/6g7-O Oj0fEf1rCpHFm.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\6g7-o oj0fef1rcphfm.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.914] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.915] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e120 | out: pbBuffer=0x1249e120) returned 1 [0137.915] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446190 | out: pbBuffer=0x12446190) returned 1 [0137.915] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc202 | out: pbBuffer=0x124bc202) returned 1 [0137.915] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc228 | out: pbBuffer=0x124bc228) returned 1 [0137.916] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.916] SetEvent (hEvent=0x7c) returned 1 [0137.916] SetEvent (hEvent=0xa0) returned 1 [0137.917] SwitchToThread () returned 1 [0137.917] SetEvent (hEvent=0x7c) returned 1 [0137.917] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.919] SetEvent (hEvent=0xa0) returned 1 [0137.920] SetEvent (hEvent=0xa8) returned 1 [0137.920] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.921] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.922] SetEvent (hEvent=0x7c) returned 1 [0137.922] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.923] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.923] SetEvent (hEvent=0x7c) returned 1 [0137.923] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x7f79, lpOverlapped=0x0) returned 1 [0137.924] GetFileType (hFile=0x154) returned 0x1 [0137.924] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.924] WriteFile (in: hFile=0x154, lpBuffer=0x1257c000*, nNumberOfBytesToWrite=0x7f79, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1257c000*, lpNumberOfBytesWritten=0x12429b48*=0x7f79, lpOverlapped=0x12429b54) returned 1 [0137.924] GetFileType (hFile=0x154) returned 0x1 [0137.924] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x7f79, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.924] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.925] CloseHandle (hObject=0x154) returned 1 [0137.925] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/8xs0xeB.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8xs0xeb.ods"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.925] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.925] WriteFile (in: hFile=0x154, lpBuffer=0x12778240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12778240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.925] CloseHandle (hObject=0x154) returned 1 [0137.925] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x51, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x51) returned 1 [0137.926] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/BK8inQ6dT2M9Bs.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bk8inq6dt2m9bs.docx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe81ef8f0, ftCreationTime.dwHighDateTime=0x1d51abe, ftLastAccessTime.dwLowDateTime=0xb6562dc0, ftLastAccessTime.dwHighDateTime=0x1d4f5d4, ftLastWriteTime.dwLowDateTime=0xb6562dc0, ftLastWriteTime.dwHighDateTime=0x1d4f5d4, nFileSizeHigh=0x0, nFileSizeLow=0xc167)) returned 1 [0137.926] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/BK8inQ6dT2M9Bs.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bk8inq6dt2m9bs.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.926] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.926] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e100 | out: pbBuffer=0x1249e100) returned 1 [0137.927] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446184 | out: pbBuffer=0x12446184) returned 1 [0137.927] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc202 | out: pbBuffer=0x124bc202) returned 1 [0137.927] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc23b | out: pbBuffer=0x124bc23b) returned 1 [0137.927] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc259 | out: pbBuffer=0x124bc259) returned 1 [0137.927] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc285 | out: pbBuffer=0x124bc285) returned 1 [0137.928] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.928] SetEvent (hEvent=0x7c) returned 1 [0137.928] SetEvent (hEvent=0xa0) returned 1 [0137.929] SwitchToThread () returned 1 [0137.929] SetEvent (hEvent=0x7c) returned 1 [0137.929] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.931] SetEvent (hEvent=0xa0) returned 1 [0137.931] SetEvent (hEvent=0xa8) returned 1 [0137.931] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.933] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.934] SetEvent (hEvent=0x7c) returned 1 [0137.934] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.935] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0137.935] SetEvent (hEvent=0x7c) returned 1 [0137.935] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x11294, lpOverlapped=0x0) returned 1 [0137.936] GetFileType (hFile=0x154) returned 0x1 [0137.936] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.936] WriteFile (in: hFile=0x154, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x11294, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x12429b48*=0x11294, lpOverlapped=0x12429b54) returned 1 [0137.937] GetFileType (hFile=0x154) returned 0x1 [0137.937] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x11294, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0137.937] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0137.937] CloseHandle (hObject=0x154) returned 1 [0137.937] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/CItUAKoRDSSYq6S.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cituakordssyq6s.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.937] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.937] WriteFile (in: hFile=0x154, lpBuffer=0x12778240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12778240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0137.947] CloseHandle (hObject=0x154) returned 1 [0137.947] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b80c0*, nNumberOfCharsToWrite=0x5a, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124b80c0*, lpNumberOfCharsWritten=0x1242981c*=0x5a) returned 1 [0137.947] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DpEDB_T.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dpedb_t.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4f03550, ftCreationTime.dwHighDateTime=0x1d51d57, ftLastAccessTime.dwLowDateTime=0xca2f0cd0, ftLastAccessTime.dwHighDateTime=0x1d50c91, ftLastWriteTime.dwLowDateTime=0xca2f0cd0, ftLastWriteTime.dwHighDateTime=0x1d50c91, nFileSizeHigh=0x0, nFileSizeLow=0x2c5b)) returned 1 [0137.948] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DpEDB_T.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dpedb_t.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0137.948] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0137.948] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442020 | out: pbBuffer=0x12442020) returned 1 [0137.949] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2084 | out: pbBuffer=0x124e2084) returned 1 [0137.949] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c0002 | out: pbBuffer=0x124c0002) returned 1 [0137.949] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c0004 | out: pbBuffer=0x124c0004) returned 1 [0137.949] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c0066 | out: pbBuffer=0x124c0066) returned 1 [0137.949] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c0080 | out: pbBuffer=0x124c0080) returned 1 [0137.950] SwitchToThread () returned 1 [0137.951] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.953] SetEvent (hEvent=0xa0) returned 1 [0137.953] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0137.988] SetEvent (hEvent=0xa0) returned 1 [0137.988] SwitchToThread () returned 1 [0137.998] SetEvent (hEvent=0xa0) returned 1 [0137.998] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.014] SetEvent (hEvent=0x7c) returned 1 [0138.014] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0138.028] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.028] SetEvent (hEvent=0x7c) returned 1 [0138.028] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0138.036] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.036] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0138.044] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.044] SetEvent (hEvent=0xac) returned 1 [0138.044] SetEvent (hEvent=0x7c) returned 1 [0138.044] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x12851, lpOverlapped=0x0) returned 1 [0138.046] GetFileType (hFile=0x154) returned 0x1 [0138.046] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.046] WriteFile (in: hFile=0x154, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x12851, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429b48*=0x12851, lpOverlapped=0x12429b54) returned 1 [0138.046] GetFileType (hFile=0x154) returned 0x1 [0138.047] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x12851, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.047] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.047] CloseHandle (hObject=0x154) returned 1 [0138.047] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/GyVi0.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gyvi0.ods"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.047] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.053] WriteFile (in: hFile=0x154, lpBuffer=0x127786c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127786c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.053] CloseHandle (hObject=0x154) returned 1 [0138.053] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12660140*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x12660140*, lpNumberOfCharsWritten=0x1242981c*=0x4f) returned 1 [0138.061] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Iq_AWBfS.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iq_awbfs.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea603100, ftCreationTime.dwHighDateTime=0x1d51aab, ftLastAccessTime.dwLowDateTime=0x97fbcb70, ftLastAccessTime.dwHighDateTime=0x1d512a6, ftLastWriteTime.dwLowDateTime=0x97fbcb70, ftLastWriteTime.dwHighDateTime=0x1d512a6, nFileSizeHigh=0x0, nFileSizeLow=0x10ea3)) returned 1 [0138.061] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Iq_AWBfS.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iq_awbfs.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.061] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.069] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0138.070] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124100a4 | out: pbBuffer=0x124100a4) returned 1 [0138.070] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.071] SwitchToThread () returned 1 [0138.079] SetEvent (hEvent=0x7c) returned 1 [0138.079] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.101] SetEvent (hEvent=0xa0) returned 1 [0138.101] SetEvent (hEvent=0xa8) returned 1 [0138.101] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.115] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.125] SetEvent (hEvent=0x7c) returned 1 [0138.125] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.133] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.141] SetEvent (hEvent=0xac) returned 1 [0138.141] SetEvent (hEvent=0x7c) returned 1 [0138.141] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0xbe51, lpOverlapped=0x0) returned 1 [0138.142] GetFileType (hFile=0x154) returned 0x1 [0138.142] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.142] WriteFile (in: hFile=0x154, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0xbe51, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x12429b48*=0xbe51, lpOverlapped=0x12429b54) returned 1 [0138.143] GetFileType (hFile=0x154) returned 0x1 [0138.143] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0xbe51, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.143] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.143] CloseHandle (hObject=0x154) returned 1 [0138.143] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/OW4mQauZ.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ow4mqauz.ppt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.143] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.149] WriteFile (in: hFile=0x154, lpBuffer=0x124c06c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x124c06c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.149] CloseHandle (hObject=0x154) returned 1 [0138.149] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c0b0*, nNumberOfCharsToWrite=0x52, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c0b0*, lpNumberOfCharsWritten=0x1242981c*=0x52) returned 1 [0138.157] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Qn_mCSWqKPk-lT7MH.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qn_mcswqkpk-lt7mh.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a9340, ftCreationTime.dwHighDateTime=0x1d5144b, ftLastAccessTime.dwLowDateTime=0x5324ee20, ftLastAccessTime.dwHighDateTime=0x1d52dd9, ftLastWriteTime.dwLowDateTime=0x5324ee20, ftLastWriteTime.dwHighDateTime=0x1d52dd9, nFileSizeHigh=0x0, nFileSizeLow=0x4e04)) returned 1 [0138.157] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/Qn_mCSWqKPk-lT7MH.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qn_mcswqkpk-lt7mh.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.157] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.164] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.164] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1245e002 | out: pbBuffer=0x1245e002) returned 1 [0138.164] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1245e010 | out: pbBuffer=0x1245e010) returned 1 [0138.164] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1245e0d8 | out: pbBuffer=0x1245e0d8) returned 1 [0138.165] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.188] SetEvent (hEvent=0x7c) returned 1 [0138.188] SetEvent (hEvent=0xa0) returned 1 [0138.189] SwitchToThread () returned 1 [0138.194] SetEvent (hEvent=0x7c) returned 1 [0138.194] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.204] SetEvent (hEvent=0xa0) returned 1 [0138.204] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0138.209] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.209] SetEvent (hEvent=0xa0) returned 1 [0138.209] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.212] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.212] SetEvent (hEvent=0xa0) returned 1 [0138.212] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x83b, lpOverlapped=0x0) returned 1 [0138.213] GetFileType (hFile=0x154) returned 0x1 [0138.213] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.213] WriteFile (in: hFile=0x154, lpBuffer=0x127fe000*, nNumberOfBytesToWrite=0x83b, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127fe000*, lpNumberOfBytesWritten=0x12429b48*=0x83b, lpOverlapped=0x12429b54) returned 1 [0138.213] GetFileType (hFile=0x154) returned 0x1 [0138.213] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x83b, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.213] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.213] CloseHandle (hObject=0x154) returned 1 [0138.213] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/RSTx5xrRFDVy Iqzz.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rstx5xrrfdvy iqzz.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.213] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.214] WriteFile (in: hFile=0x154, lpBuffer=0x124c06c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x124c06c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.214] CloseHandle (hObject=0x154) returned 1 [0138.214] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1247c0c0*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1247c0c0*, lpNumberOfCharsWritten=0x1242981c*=0x5c) returned 1 [0138.214] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/V3EUk Z465y_4wn7CML.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v3euk z465y_4wn7cml.odp"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8ecb750, ftCreationTime.dwHighDateTime=0x1d4c5c1, ftLastAccessTime.dwLowDateTime=0x424dad20, ftLastAccessTime.dwHighDateTime=0x1d4c6c9, ftLastWriteTime.dwLowDateTime=0x424dad20, ftLastWriteTime.dwHighDateTime=0x1d4c6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4ba6)) returned 1 [0138.214] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/V3EUk Z465y_4wn7CML.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v3euk z465y_4wn7cml.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.214] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.215] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.216] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0138.217] SwitchToThread () returned 1 [0138.217] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.220] SetEvent (hEvent=0x7c) returned 1 [0138.220] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.222] SetEvent (hEvent=0x7c) returned 1 [0138.222] SwitchToThread () returned 1 [0138.223] SetEvent (hEvent=0x7c) returned 1 [0138.223] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.226] SetEvent (hEvent=0xa0) returned 1 [0138.226] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.227] SetEvent (hEvent=0xa0) returned 1 [0138.227] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.229] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.230] SetEvent (hEvent=0xa0) returned 1 [0138.230] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x11514, lpOverlapped=0x0) returned 1 [0138.231] GetFileType (hFile=0x154) returned 0x1 [0138.231] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.231] WriteFile (in: hFile=0x154, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x11514, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x12429b48*=0x11514, lpOverlapped=0x12429b54) returned 1 [0138.232] GetFileType (hFile=0x154) returned 0x1 [0138.232] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x11514, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.232] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.232] CloseHandle (hObject=0x154) returned 1 [0138.232] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/X5b66F.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x5b66f.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.232] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.232] WriteFile (in: hFile=0x154, lpBuffer=0x124c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x124c0240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.233] CloseHandle (hObject=0x154) returned 1 [0138.233] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x51, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x51) returned 1 [0138.233] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YgY3xw15wxPPmpcwx.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ygy3xw15wxppmpcwx.docx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d0f00, ftCreationTime.dwHighDateTime=0x1d54e9d, ftLastAccessTime.dwLowDateTime=0x726b7050, ftLastAccessTime.dwHighDateTime=0x1d4f0a9, ftLastWriteTime.dwLowDateTime=0x726b7050, ftLastWriteTime.dwHighDateTime=0x1d4f0a9, nFileSizeHigh=0x0, nFileSizeLow=0x28d6)) returned 1 [0138.233] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YgY3xw15wxPPmpcwx.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ygy3xw15wxppmpcwx.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.233] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.234] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.234] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0138.234] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0138.234] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b6055 | out: pbBuffer=0x124b6055) returned 1 [0138.234] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b60dd | out: pbBuffer=0x124b60dd) returned 1 [0138.235] SwitchToThread () returned 1 [0138.236] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.240] SetEvent (hEvent=0x7c) returned 1 [0138.240] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.240] SetEvent (hEvent=0x7c) returned 1 [0138.241] SwitchToThread () returned 1 [0138.243] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.246] SetEvent (hEvent=0xa0) returned 1 [0138.246] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.249] SetEvent (hEvent=0xa0) returned 1 [0138.249] SwitchToThread () returned 1 [0138.249] SetEvent (hEvent=0xa0) returned 1 [0138.249] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.252] SetEvent (hEvent=0x7c) returned 1 [0138.252] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.253] SetEvent (hEvent=0x7c) returned 1 [0138.253] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.255] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.256] SetEvent (hEvent=0xac) returned 1 [0138.256] SetEvent (hEvent=0x7c) returned 1 [0138.256] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x189ce, lpOverlapped=0x0) returned 1 [0138.258] GetFileType (hFile=0x154) returned 0x1 [0138.258] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.258] WriteFile (in: hFile=0x154, lpBuffer=0x12596000*, nNumberOfBytesToWrite=0x189ce, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x12596000*, lpNumberOfBytesWritten=0x12429b48*=0x189ce, lpOverlapped=0x12429b54) returned 1 [0138.258] GetFileType (hFile=0x154) returned 0x1 [0138.258] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x189ce, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.258] ReadFile (in: hFile=0x154, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.258] CloseHandle (hObject=0x154) returned 1 [0138.258] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/pM kY7wS-njVneDyiXxk.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pm ky7ws-njvnedyixxk.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.258] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.259] WriteFile (in: hFile=0x154, lpBuffer=0x12650240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12650240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.259] CloseHandle (hObject=0x154) returned 1 [0138.259] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x1242981c*=0x5f) returned 1 [0138.260] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/r-XdwL-42Vvwoybm7.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\r-xdwl-42vvwoybm7.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf4de4f0, ftCreationTime.dwHighDateTime=0x1d54090, ftLastAccessTime.dwLowDateTime=0x48042ab0, ftLastAccessTime.dwHighDateTime=0x1d53423, ftLastWriteTime.dwLowDateTime=0x48042ab0, ftLastWriteTime.dwHighDateTime=0x1d53423, nFileSizeHigh=0x0, nFileSizeLow=0x34b8)) returned 1 [0138.260] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/r-XdwL-42Vvwoybm7.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\r-xdwl-42vvwoybm7.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.260] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.260] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.261] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.261] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c800d | out: pbBuffer=0x124c800d) returned 1 [0138.262] SwitchToThread () returned 1 [0138.262] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.265] SetEvent (hEvent=0xa0) returned 1 [0138.265] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.267] SetEvent (hEvent=0xa0) returned 1 [0138.267] SwitchToThread () returned 1 [0138.267] SetEvent (hEvent=0xa0) returned 1 [0138.267] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.269] SetEvent (hEvent=0x7c) returned 1 [0138.269] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.271] SetEvent (hEvent=0x7c) returned 1 [0138.271] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.274] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.283] SetEvent (hEvent=0x7c) returned 1 [0138.283] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.285] SetEvent (hEvent=0x7c) returned 1 [0138.285] SwitchToThread () returned 1 [0138.286] SetEvent (hEvent=0x7c) returned 1 [0138.286] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.287] SetEvent (hEvent=0xa0) returned 1 [0138.287] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.288] SetEvent (hEvent=0xa0) returned 1 [0138.288] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0138.290] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.290] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.291] SetEvent (hEvent=0xac) returned 1 [0138.291] SetEvent (hEvent=0xa0) returned 1 [0138.291] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xbf9f, lpOverlapped=0x0) returned 1 [0138.292] GetFileType (hFile=0x190) returned 0x1 [0138.292] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.292] WriteFile (in: hFile=0x190, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xbf9f, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429aa0*=0xbf9f, lpOverlapped=0x12429aac) returned 1 [0138.292] GetFileType (hFile=0x190) returned 0x1 [0138.292] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xbf9f, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.292] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.292] CloseHandle (hObject=0x190) returned 1 [0138.292] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/PGT3yJWly.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\pgt3yjwly.ods"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.293] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.293] WriteFile (in: hFile=0x190, lpBuffer=0x127c86c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c86c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.293] CloseHandle (hObject=0x190) returned 1 [0138.293] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1245e000*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1245e000*, lpNumberOfCharsWritten=0x12429774*=0x5c) returned 1 [0138.294] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/ck Fg7_Zs7glJ.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\ck fg7_zs7glj.pdf"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c0c2010, ftCreationTime.dwHighDateTime=0x1d4cc00, ftLastAccessTime.dwLowDateTime=0xff620ce0, ftLastAccessTime.dwHighDateTime=0x1d4cf56, ftLastWriteTime.dwLowDateTime=0xff620ce0, ftLastWriteTime.dwHighDateTime=0x1d4cf56, nFileSizeHigh=0x0, nFileSizeLow=0x176c8)) returned 1 [0138.294] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/DCetzcFw/ck Fg7_Zs7glJ.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcetzcfw\\ck fg7_zs7glj.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.294] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.294] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.295] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2074 | out: pbBuffer=0x124e2074) returned 1 [0138.295] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d8002 | out: pbBuffer=0x124d8002) returned 1 [0138.296] SwitchToThread () returned 1 [0138.296] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.300] SetEvent (hEvent=0x7c) returned 1 [0138.300] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.302] SetEvent (hEvent=0x7c) returned 1 [0138.302] SwitchToThread () returned 1 [0138.305] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.319] SetEvent (hEvent=0x7c) returned 1 [0138.319] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.320] SetEvent (hEvent=0x7c) returned 1 [0138.320] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.323] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.323] SetEvent (hEvent=0x7c) returned 1 [0138.323] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x1369c, lpOverlapped=0x0) returned 1 [0138.324] GetFileType (hFile=0x144) returned 0x1 [0138.324] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.325] WriteFile (in: hFile=0x144, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x1369c, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429aa0*=0x1369c, lpOverlapped=0x12429aac) returned 1 [0138.325] GetFileType (hFile=0x144) returned 0x1 [0138.325] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x1369c, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.325] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.325] CloseHandle (hObject=0x144) returned 1 [0138.325] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/Gnyq.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\gnyq.csv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.325] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.326] WriteFile (in: hFile=0x144, lpBuffer=0x124c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c0240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.326] CloseHandle (hObject=0x144) returned 1 [0138.326] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x57, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x12429774*=0x57) returned 1 [0138.326] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/Red6Mz4FPbX NpVD.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\red6mz4fpbx npvd.csv"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb033600, ftCreationTime.dwHighDateTime=0x1d4cd9c, ftLastAccessTime.dwLowDateTime=0x7bbdc10, ftLastAccessTime.dwHighDateTime=0x1d4cf37, ftLastWriteTime.dwLowDateTime=0x7bbdc10, ftLastWriteTime.dwHighDateTime=0x1d4cf37, nFileSizeHigh=0x0, nFileSizeLow=0x18500)) returned 1 [0138.326] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/Red6Mz4FPbX NpVD.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\red6mz4fpbx npvd.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.326] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.327] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.327] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12578002 | out: pbBuffer=0x12578002) returned 1 [0138.327] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12578086 | out: pbBuffer=0x12578086) returned 1 [0138.328] SwitchToThread () returned 1 [0138.329] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.332] SetEvent (hEvent=0xa0) returned 1 [0138.332] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.335] SetEvent (hEvent=0xa0) returned 1 [0138.335] SwitchToThread () returned 1 [0138.335] SetEvent (hEvent=0xa0) returned 1 [0138.335] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.338] SetEvent (hEvent=0x7c) returned 1 [0138.338] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.339] SetEvent (hEvent=0x7c) returned 1 [0138.339] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.341] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.341] SetEvent (hEvent=0x7c) returned 1 [0138.341] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x13fea, lpOverlapped=0x0) returned 1 [0138.343] GetFileType (hFile=0x144) returned 0x1 [0138.343] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.343] WriteFile (in: hFile=0x144, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x13fea, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429aa0*=0x13fea, lpOverlapped=0x12429aac) returned 1 [0138.343] GetFileType (hFile=0x144) returned 0x1 [0138.343] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x13fea, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.343] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.343] CloseHandle (hObject=0x144) returned 1 [0138.343] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/nS JzGm_7m.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\ns jzgm_7m.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.343] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.344] WriteFile (in: hFile=0x144, lpBuffer=0x124c06c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c06c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.344] CloseHandle (hObject=0x144) returned 1 [0138.344] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x125b00c0*, nNumberOfCharsToWrite=0x5e, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x125b00c0*, lpNumberOfCharsWritten=0x12429774*=0x5e) returned 1 [0138.345] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/o-MKyp06h8MMK3Nef_sT.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\o-mkyp06h8mmk3nef_st.odp"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1212f3d0, ftCreationTime.dwHighDateTime=0x1d4d2e6, ftLastAccessTime.dwLowDateTime=0xee39300, ftLastAccessTime.dwHighDateTime=0x1d4d27c, ftLastWriteTime.dwLowDateTime=0xee39300, ftLastWriteTime.dwHighDateTime=0x1d4d27c, nFileSizeHigh=0x0, nFileSizeLow=0xe9be)) returned 1 [0138.345] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/o-MKyp06h8MMK3Nef_sT.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\o-mkyp06h8mmk3nef_st.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.345] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.345] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.346] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2074 | out: pbBuffer=0x124e2074) returned 1 [0138.346] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.347] SwitchToThread () returned 1 [0138.347] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.350] SetEvent (hEvent=0xa0) returned 1 [0138.350] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.353] SetEvent (hEvent=0xa0) returned 1 [0138.353] SwitchToThread () returned 1 [0138.353] SetEvent (hEvent=0xa0) returned 1 [0138.353] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.354] SetEvent (hEvent=0x7c) returned 1 [0138.354] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.356] SetEvent (hEvent=0x7c) returned 1 [0138.356] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.358] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.358] SetEvent (hEvent=0x7c) returned 1 [0138.358] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x175dc, lpOverlapped=0x0) returned 1 [0138.359] GetFileType (hFile=0x144) returned 0x1 [0138.359] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.359] WriteFile (in: hFile=0x144, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x175dc, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x175dc, lpOverlapped=0x12429aac) returned 1 [0138.360] GetFileType (hFile=0x144) returned 0x1 [0138.360] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x175dc, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.360] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.360] CloseHandle (hObject=0x144) returned 1 [0138.360] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/uv yhbvocPo.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\uv yhbvocpo.ppt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.360] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.360] WriteFile (in: hFile=0x144, lpBuffer=0x124c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c0240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.360] CloseHandle (hObject=0x144) returned 1 [0138.360] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12578000*, nNumberOfCharsToWrite=0x5e, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x12578000*, lpNumberOfCharsWritten=0x12429774*=0x5e) returned 1 [0138.361] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/wDFQJE7tGXQQFyWMNQ.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\wdfqje7tgxqqfywmnq.odt"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d39070, ftCreationTime.dwHighDateTime=0x1d4d504, ftLastAccessTime.dwLowDateTime=0x36acaf00, ftLastAccessTime.dwHighDateTime=0x1d4d4db, ftLastWriteTime.dwLowDateTime=0x36acaf00, ftLastWriteTime.dwHighDateTime=0x1d4d4db, nFileSizeHigh=0x0, nFileSizeLow=0xad60)) returned 1 [0138.361] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/wDFQJE7tGXQQFyWMNQ.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\wdfqje7tgxqqfywmnq.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.361] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.361] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.362] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.362] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c80cd | out: pbBuffer=0x124c80cd) returned 1 [0138.363] SwitchToThread () returned 1 [0138.363] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.366] SetEvent (hEvent=0xa0) returned 1 [0138.366] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.368] SetEvent (hEvent=0xa0) returned 1 [0138.368] SwitchToThread () returned 1 [0138.371] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.379] SetEvent (hEvent=0xa0) returned 1 [0138.379] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.380] SetEvent (hEvent=0xa0) returned 1 [0138.380] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0138.382] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.382] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0138.383] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.383] SetEvent (hEvent=0xac) returned 1 [0138.383] SetEvent (hEvent=0xa0) returned 1 [0138.383] ReadFile (in: hFile=0x27c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0xe398, lpOverlapped=0x0) returned 1 [0138.384] GetFileType (hFile=0x27c) returned 0x1 [0138.384] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.384] WriteFile (in: hFile=0x27c, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0xe398, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x124299f8*=0xe398, lpOverlapped=0x12429a04) returned 1 [0138.384] GetFileType (hFile=0x27c) returned 0x1 [0138.384] SetFilePointerEx (in: hFile=0x27c, liDistanceToMove=0xe398, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.384] ReadFile (in: hFile=0x27c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0138.385] CloseHandle (hObject=0x27c) returned 1 [0138.385] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/xBuzTUKGNsHUWC08M-.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\xbuztukgnshuwc08m-.doc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.385] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.385] WriteFile (in: hFile=0x27c, lpBuffer=0x127c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x127c0240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0138.385] CloseHandle (hObject=0x27c) returned 1 [0138.385] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x75, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x124296cc*=0x75) returned 1 [0138.386] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/zVqSpAPcuQk0xpgn.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\zvqspapcuqk0xpgn.csv"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa2d3f0, ftCreationTime.dwHighDateTime=0x1d4c9ad, ftLastAccessTime.dwLowDateTime=0xbf7c7a20, ftLastAccessTime.dwHighDateTime=0x1d4cb82, ftLastWriteTime.dwLowDateTime=0xbf7c7a20, ftLastWriteTime.dwHighDateTime=0x1d4cb82, nFileSizeHigh=0x0, nFileSizeLow=0x1039)) returned 1 [0138.386] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/F2hFH5 o/EUIYKD5UBgBPtrI/zVqSpAPcuQk0xpgn.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f2hfh5 o\\euiykd5ubgbptri\\zvqspapcuqk0xpgn.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.386] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.386] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.387] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.388] SwitchToThread () returned 1 [0138.388] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.390] SetEvent (hEvent=0x7c) returned 1 [0138.390] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.392] SetEvent (hEvent=0x7c) returned 1 [0138.393] SwitchToThread () returned 1 [0138.393] SetEvent (hEvent=0x7c) returned 1 [0138.393] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.395] SetEvent (hEvent=0xa0) returned 1 [0138.395] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.396] SetEvent (hEvent=0xa0) returned 1 [0138.396] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.400] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.445] SetEvent (hEvent=0xa0) returned 1 [0138.445] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.446] SetEvent (hEvent=0xa0) returned 1 [0138.446] SetEvent (hEvent=0xa8) returned 1 [0138.446] CloseHandle (hObject=0x154) returned 1 [0138.446] CloseHandle (hObject=0x190) returned 1 [0138.446] CloseHandle (hObject=0x144) returned 1 [0138.446] CloseHandle (hObject=0x27c) returned 1 [0138.446] SwitchToThread () returned 1 [0138.447] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.462] SetEvent (hEvent=0xa8) returned 1 [0138.462] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0138.462] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.462] SetEvent (hEvent=0xa8) returned 1 [0138.462] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0138.534] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.534] SwitchToThread () returned 1 [0138.534] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.535] SetEvent (hEvent=0xa8) returned 1 [0138.535] ReadFile (in: hFile=0xfc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x9f24, lpOverlapped=0x0) returned 1 [0138.535] GetFileType (hFile=0xfc) returned 0x1 [0138.536] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.536] WriteFile (in: hFile=0xfc, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x9f24, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x12429aa0*=0x9f24, lpOverlapped=0x12429aac) returned 1 [0138.536] GetFileType (hFile=0xfc) returned 0x1 [0138.536] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x9f24, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.536] ReadFile (in: hFile=0xfc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.536] CloseHandle (hObject=0xfc) returned 1 [0138.536] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/EAg4hC7CcWe.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\eag4hc7ccwe.rtf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.536] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.537] WriteFile (in: hFile=0xfc, lpBuffer=0x1245c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x1245c240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.537] CloseHandle (hObject=0xfc) returned 1 [0138.537] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c2000*, nNumberOfCharsToWrite=0x64, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c2000*, lpNumberOfCharsWritten=0x12429774*=0x64) returned 1 [0138.538] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/I7-P-H QcPQ.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\i7-p-h qcpq.odp"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5ea1b0, ftCreationTime.dwHighDateTime=0x1d4c63c, ftLastAccessTime.dwLowDateTime=0xfbba2d90, ftLastAccessTime.dwHighDateTime=0x1d4c621, ftLastWriteTime.dwLowDateTime=0xfbba2d90, ftLastWriteTime.dwHighDateTime=0x1d4c621, nFileSizeHigh=0x0, nFileSizeLow=0xdb89)) returned 1 [0138.538] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/I7-P-H QcPQ.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\i7-p-h qcpq.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.538] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.538] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0138.539] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.540] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.541] SetEvent (hEvent=0xac) returned 1 [0138.541] SetEvent (hEvent=0xa0) returned 1 [0138.541] ReadFile (in: hFile=0xfc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xdb89, lpOverlapped=0x0) returned 1 [0138.542] GetFileType (hFile=0xfc) returned 0x1 [0138.542] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.542] WriteFile (in: hFile=0xfc, lpBuffer=0x12566000*, nNumberOfBytesToWrite=0xdb89, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12566000*, lpNumberOfBytesWritten=0x12429aa0*=0xdb89, lpOverlapped=0x12429aac) returned 1 [0138.542] GetFileType (hFile=0xfc) returned 0x1 [0138.542] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0xdb89, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.542] ReadFile (in: hFile=0xfc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.542] CloseHandle (hObject=0xfc) returned 1 [0138.542] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/I7-P-H QcPQ.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\i7-p-h qcpq.odp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.543] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.543] WriteFile (in: hFile=0xfc, lpBuffer=0x1245cfc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x1245cfc0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.543] CloseHandle (hObject=0xfc) returned 1 [0138.543] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c20d0*, nNumberOfCharsToWrite=0x64, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c20d0*, lpNumberOfCharsWritten=0x12429774*=0x64) returned 1 [0138.544] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/W3GREwiMqRPSTDNz-94.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\w3grewimqrpstdnz-94.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea8bf8d0, ftCreationTime.dwHighDateTime=0x1d4ce34, ftLastAccessTime.dwLowDateTime=0x52267890, ftLastAccessTime.dwHighDateTime=0x1d4cf60, ftLastWriteTime.dwLowDateTime=0x52267890, ftLastWriteTime.dwHighDateTime=0x1d4cf60, nFileSizeHigh=0x0, nFileSizeLow=0x17773)) returned 1 [0138.544] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/W3GREwiMqRPSTDNz-94.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\w3grewimqrpstdnz-94.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.544] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.544] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.545] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0138.545] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0138.546] SwitchToThread () returned 1 [0138.546] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.549] SetEvent (hEvent=0xa8) returned 1 [0138.549] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.552] SetEvent (hEvent=0xa8) returned 1 [0138.552] SwitchToThread () returned 1 [0138.552] SetEvent (hEvent=0xa8) returned 1 [0138.552] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.554] SetEvent (hEvent=0xa0) returned 1 [0138.554] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.555] SetEvent (hEvent=0xa0) returned 1 [0138.555] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.558] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.558] SetEvent (hEvent=0xa0) returned 1 [0138.558] ReadFile (in: hFile=0xfc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x189ae, lpOverlapped=0x0) returned 1 [0138.559] GetFileType (hFile=0xfc) returned 0x1 [0138.559] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.559] WriteFile (in: hFile=0xfc, lpBuffer=0x12596000*, nNumberOfBytesToWrite=0x189ae, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12596000*, lpNumberOfBytesWritten=0x12429aa0*=0x189ae, lpOverlapped=0x12429aac) returned 1 [0138.560] GetFileType (hFile=0xfc) returned 0x1 [0138.560] SetFilePointerEx (in: hFile=0xfc, liDistanceToMove=0x189ae, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.560] ReadFile (in: hFile=0xfc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.560] CloseHandle (hObject=0xfc) returned 1 [0138.560] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/xk82.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\xk82.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.560] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.560] WriteFile (in: hFile=0xfc, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.561] CloseHandle (hObject=0xfc) returned 1 [0138.561] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x125b0000*, nNumberOfCharsToWrite=0x5e, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x125b0000*, lpNumberOfCharsWritten=0x12429774*=0x5e) returned 1 [0138.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.561] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.561] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.561] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.561] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.562] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0138.562] CloseHandle (hObject=0xfc) returned 1 [0138.562] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.562] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.562] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.563] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0138.563] WriteFile (in: hFile=0xfc, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0138.564] CloseHandle (hObject=0xfc) returned 1 [0138.564] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.564] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.565] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.565] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcd6db0, ftCreationTime.dwHighDateTime=0x1d4d217, ftLastAccessTime.dwLowDateTime=0x402baf0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x402baf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.565] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcd6db0, ftCreationTime.dwHighDateTime=0x1d4d217, ftLastAccessTime.dwLowDateTime=0x402baf0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x402baf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.565] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x402baf0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x402baf0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x402baf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.565] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37359b20, ftCreationTime.dwHighDateTime=0x1d4d117, ftLastAccessTime.dwLowDateTime=0x9d2d0e10, ftLastAccessTime.dwHighDateTime=0x1d4d296, ftLastWriteTime.dwLowDateTime=0x9d2d0e10, ftLastWriteTime.dwHighDateTime=0x1d4d296, nFileSizeHigh=0x0, nFileSizeLow=0x7be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="j_avE.ots", cAlternateFileName="")) returned 1 [0138.565] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f25a40, ftCreationTime.dwHighDateTime=0x1d4d4c1, ftLastAccessTime.dwLowDateTime=0x84888ed0, ftLastAccessTime.dwHighDateTime=0x1d4cacf, ftLastWriteTime.dwLowDateTime=0x84888ed0, ftLastWriteTime.dwHighDateTime=0x1d4cacf, nFileSizeHigh=0x0, nFileSizeLow=0xa273, dwReserved0=0x0, dwReserved1=0x0, cFileName="KJF-OTC.pptx", cAlternateFileName="KJF-OT~1.PPT")) returned 1 [0138.565] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36b58ab0, ftCreationTime.dwHighDateTime=0x1d4ccae, ftLastAccessTime.dwLowDateTime=0x774ceb90, ftLastAccessTime.dwHighDateTime=0x1d4d393, ftLastWriteTime.dwLowDateTime=0x774ceb90, ftLastWriteTime.dwHighDateTime=0x1d4d393, nFileSizeHigh=0x0, nFileSizeLow=0x14b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="REvvSS_RAc2D.pdf", cAlternateFileName="REVVSS~1.PDF")) returned 1 [0138.565] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.565] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.565] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.565] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.565] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/KJF-OTC.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\kjf-otc.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.566] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.566] ReadFile (in: hFile=0xfc, lpBuffer=0x1244a000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1244a000*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.567] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/REvvSS_RAc2D.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\revvss_rac2d.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0138.567] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.567] ReadFile (in: hFile=0x120, lpBuffer=0x1244a100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1244a100*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.568] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/j_avE.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\j_ave.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.568] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.568] ReadFile (in: hFile=0x27c, lpBuffer=0x1244a200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1244a200*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.569] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/KJF-OTC.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\kjf-otc.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f25a40, ftCreationTime.dwHighDateTime=0x1d4d4c1, ftLastAccessTime.dwLowDateTime=0x84888ed0, ftLastAccessTime.dwHighDateTime=0x1d4cacf, ftLastWriteTime.dwLowDateTime=0x84888ed0, ftLastWriteTime.dwHighDateTime=0x1d4cacf, nFileSizeHigh=0x0, nFileSizeLow=0xa273)) returned 1 [0138.569] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/KJF-OTC.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\kjf-otc.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.569] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.569] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e120 | out: pbBuffer=0x1249e120) returned 1 [0138.570] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446184 | out: pbBuffer=0x12446184) returned 1 [0138.570] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1244a302 | out: pbBuffer=0x1244a302) returned 1 [0138.571] SetEvent (hEvent=0xa8) returned 1 [0138.571] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0xa273, lpOverlapped=0x0) returned 1 [0138.572] GetFileType (hFile=0x144) returned 0x1 [0138.572] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.572] WriteFile (in: hFile=0x144, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xa273, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x124299f8*=0xa273, lpOverlapped=0x12429a04) returned 1 [0138.572] GetFileType (hFile=0x144) returned 0x1 [0138.572] SetFilePointerEx (in: hFile=0x144, liDistanceToMove=0xa273, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.572] ReadFile (in: hFile=0x144, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0138.572] CloseHandle (hObject=0x144) returned 1 [0138.572] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/KJF-OTC.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\kjf-otc.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.572] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.573] WriteFile (in: hFile=0x144, lpBuffer=0x127c8fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x127c8fc0*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0138.573] CloseHandle (hObject=0x144) returned 1 [0138.573] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fe4b0*, nNumberOfCharsToWrite=0x76, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x127fe4b0*, lpNumberOfCharsWritten=0x124296cc*=0x76) returned 1 [0138.606] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/REvvSS_RAc2D.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\revvss_rac2d.pdf"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36b58ab0, ftCreationTime.dwHighDateTime=0x1d4ccae, ftLastAccessTime.dwLowDateTime=0x774ceb90, ftLastAccessTime.dwHighDateTime=0x1d4d393, ftLastWriteTime.dwLowDateTime=0x774ceb90, ftLastWriteTime.dwHighDateTime=0x1d4d393, nFileSizeHigh=0x0, nFileSizeLow=0x14b00)) returned 1 [0138.606] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/YpYW5ZcWNBJ m2/SMNf7IIiE77nKVQ7GmcL/REvvSS_RAc2D.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ypyw5zcwnbj m2\\smnf7iiie77nkvq7gmcl\\revvss_rac2d.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.606] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.606] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.607] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1249a002 | out: pbBuffer=0x1249a002) returned 1 [0138.607] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1249a01f | out: pbBuffer=0x1249a01f) returned 1 [0138.608] CloseHandle (hObject=0x27c) returned 1 [0138.609] CloseHandle (hObject=0x120) returned 1 [0138.609] CloseHandle (hObject=0xfc) returned 1 [0138.609] SwitchToThread () returned 1 [0138.609] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.613] SetEvent (hEvent=0xa0) returned 1 [0138.613] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.615] SetEvent (hEvent=0xa0) returned 1 [0138.615] SwitchToThread () returned 1 [0138.615] SetEvent (hEvent=0xa0) returned 1 [0138.615] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.617] SetEvent (hEvent=0xa8) returned 1 [0138.617] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.618] SetEvent (hEvent=0xa8) returned 1 [0138.618] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.622] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.634] SetEvent (hEvent=0xa8) returned 1 [0138.634] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.637] SetEvent (hEvent=0xa8) returned 1 [0138.637] SwitchToThread () returned 1 [0138.637] SetEvent (hEvent=0xa8) returned 1 [0138.637] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.638] SetEvent (hEvent=0xa0) returned 1 [0138.638] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.639] SetEvent (hEvent=0xa0) returned 1 [0138.639] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.641] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.642] SetEvent (hEvent=0xa0) returned 1 [0138.642] ReadFile (in: hFile=0x15c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xb433, lpOverlapped=0x0) returned 1 [0138.642] GetFileType (hFile=0x15c) returned 0x1 [0138.642] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.643] WriteFile (in: hFile=0x15c, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xb433, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429aa0*=0xb433, lpOverlapped=0x12429aac) returned 1 [0138.643] GetFileType (hFile=0x15c) returned 0x1 [0138.643] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0xb433, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.643] ReadFile (in: hFile=0x15c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.643] CloseHandle (hObject=0x15c) returned 1 [0138.643] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/1zDEJQ7IF9i.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\1zdejq7if9i.xls"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.643] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.644] WriteFile (in: hFile=0x15c, lpBuffer=0x125766c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x125766c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.644] CloseHandle (hObject=0x15c) returned 1 [0138.644] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c00c0*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c00c0*, lpNumberOfCharsWritten=0x12429774*=0x5c) returned 1 [0138.644] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/Fb_AJFIS_ruXp.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\fb_ajfis_ruxp.odp"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c69a830, ftCreationTime.dwHighDateTime=0x1d4d0ef, ftLastAccessTime.dwLowDateTime=0xf1f61440, ftLastAccessTime.dwHighDateTime=0x1d4cfea, ftLastWriteTime.dwLowDateTime=0xf1f61440, ftLastWriteTime.dwHighDateTime=0x1d4cfea, nFileSizeHigh=0x0, nFileSizeLow=0xa63a)) returned 1 [0138.644] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/Fb_AJFIS_ruXp.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\fb_ajfis_ruxp.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.644] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.645] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.646] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0138.646] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.647] SwitchToThread () returned 1 [0138.647] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.650] SetEvent (hEvent=0xa8) returned 1 [0138.650] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.652] SetEvent (hEvent=0xa8) returned 1 [0138.652] SwitchToThread () returned 1 [0138.652] SetEvent (hEvent=0xa8) returned 1 [0138.652] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.653] SetEvent (hEvent=0xa0) returned 1 [0138.654] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.654] SetEvent (hEvent=0xa0) returned 1 [0138.654] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.656] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.657] SetEvent (hEvent=0xa0) returned 1 [0138.657] ReadFile (in: hFile=0x15c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x18e38, lpOverlapped=0x0) returned 1 [0138.658] GetFileType (hFile=0x15c) returned 0x1 [0138.658] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.658] WriteFile (in: hFile=0x15c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x18e38, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x18e38, lpOverlapped=0x12429aac) returned 1 [0138.658] GetFileType (hFile=0x15c) returned 0x1 [0138.658] SetFilePointerEx (in: hFile=0x15c, liDistanceToMove=0x18e38, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.659] ReadFile (in: hFile=0x15c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.659] CloseHandle (hObject=0x15c) returned 1 [0138.659] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/n0n _myNdMvr9i.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\n0n _myndmvr9i.rtf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.659] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.659] WriteFile (in: hFile=0x15c, lpBuffer=0x12576240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12576240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.659] CloseHandle (hObject=0x15c) returned 1 [0138.659] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x12429774*=0x5f) returned 1 [0138.660] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.660] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.660] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.660] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.660] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.660] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Documents/cmO b7/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cmo b7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.660] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0138.660] CloseHandle (hObject=0x15c) returned 1 [0138.660] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.661] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.661] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.661] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0138.661] WriteFile (in: hFile=0x15c, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0138.662] CloseHandle (hObject=0x15c) returned 1 [0138.663] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.663] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.663] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.663] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x41095d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x41095d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.663] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x41095d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x41095d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.663] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x41095d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x41095d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x41095d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.663] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0138.663] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.663] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.663] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.663] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.663] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0138.664] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.664] ReadFile (in: hFile=0x15c, lpBuffer=0x124c8000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.665] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0138.665] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.665] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.665] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.665] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.665] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.665] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Downloads/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.665] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0138.666] CloseHandle (hObject=0x144) returned 1 [0138.666] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.666] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.666] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.666] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0138.666] WriteFile (in: hFile=0x144, lpBuffer=0x12774600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12774600*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0138.667] CloseHandle (hObject=0x144) returned 1 [0138.667] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.668] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.668] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.668] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x412f730, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x412f730, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.668] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x412f730, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x412f730, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.668] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x412f730, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x412f730, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x412f730, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.668] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0138.668] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0138.668] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0138.668] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0138.668] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0138.668] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.668] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.668] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.668] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.668] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.668] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.669] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.669] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.669] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.670] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.671] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.671] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.672] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.673] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.673] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.674] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.675] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x144 [0138.675] GetConsoleMode (in: hConsoleHandle=0x144, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.675] ReadFile (in: hFile=0x144, lpBuffer=0x124c8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.676] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0138.676] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.676] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.676] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.676] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.676] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.677] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0138.677] CloseHandle (hObject=0xfc) returned 1 [0138.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.677] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.677] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.679] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.679] WriteFile (in: hFile=0xfc, lpBuffer=0x12776c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12776c00*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.680] CloseHandle (hObject=0xfc) returned 1 [0138.680] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.680] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.681] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.681] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x412f730, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x412f730, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.681] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x412f730, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x412f730, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.681] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x412f730, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x412f730, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4155890, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.681] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0138.681] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0138.681] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0138.681] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.681] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.681] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.681] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.681] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links/Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xfc [0138.681] GetConsoleMode (in: hConsoleHandle=0xfc, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.682] ReadFile (in: hFile=0xfc, lpBuffer=0x124c8300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8300*, lpNumberOfBytesRead=0x12429bd8*=0xec, lpOverlapped=0x0) returned 1 [0138.683] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links/Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120 [0138.683] GetConsoleMode (in: hConsoleHandle=0x120, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.683] ReadFile (in: hFile=0x120, lpBuffer=0x124c8400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8400*, lpNumberOfBytesRead=0x12429bd8*=0xe2, lpOverlapped=0x0) returned 1 [0138.684] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x27c [0138.684] GetConsoleMode (in: hConsoleHandle=0x27c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.685] ReadFile (in: hFile=0x27c, lpBuffer=0x124c8500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8500*, lpNumberOfBytesRead=0x12429bd8*=0x50, lpOverlapped=0x0) returned 1 [0138.685] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links/Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1 [0138.686] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links/Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0138.686] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0138.686] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.686] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.686] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.686] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.686] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.686] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Links/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.686] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0138.686] CloseHandle (hObject=0x190) returned 1 [0138.686] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.687] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.687] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.688] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.688] WriteFile (in: hFile=0x190, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.689] CloseHandle (hObject=0x190) returned 1 [0138.689] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.689] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.689] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.689] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4166a00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4166a00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.689] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4166a00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4166a00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.689] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x4166a00, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x4166a00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4166a00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.689] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0138.689] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0138.689] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0138.689] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0138.689] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0138.689] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0138.689] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.690] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.690] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.690] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.690] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0138.691] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.691] ReadFile (in: hFile=0x190, lpBuffer=0x124c8600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8600*, lpNumberOfBytesRead=0x12429bd8*=0x85, lpOverlapped=0x0) returned 1 [0138.692] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0138.693] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.693] ReadFile (in: hFile=0x154, lpBuffer=0x124c8700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8700*, lpNumberOfBytesRead=0x12429bd8*=0x85, lpOverlapped=0x0) returned 1 [0138.694] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0138.695] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.695] ReadFile (in: hFile=0x104, lpBuffer=0x124c8800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8800*, lpNumberOfBytesRead=0x12429bd8*=0x85, lpOverlapped=0x0) returned 1 [0138.696] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0138.697] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.697] ReadFile (in: hFile=0xf0, lpBuffer=0x124c8900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8900*, lpNumberOfBytesRead=0x12429bd8*=0x85, lpOverlapped=0x0) returned 1 [0138.698] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0138.698] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.698] ReadFile (in: hFile=0xe4, lpBuffer=0x124c8b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8b00*, lpNumberOfBytesRead=0x12429bd8*=0x85, lpOverlapped=0x0) returned 1 [0138.699] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0138.700] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.700] ReadFile (in: hFile=0x108, lpBuffer=0x124c8c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8c00*, lpNumberOfBytesRead=0x12429bd8*=0x85, lpOverlapped=0x0) returned 1 [0138.701] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0138.701] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0138.701] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0138.701] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0138.701] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0138.702] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0138.702] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.702] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.702] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.702] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.702] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.702] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/MSN Websites/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0138.702] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0138.702] CloseHandle (hObject=0xdc) returned 1 [0138.704] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.704] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.704] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0138.705] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.705] WriteFile (in: hFile=0xdc, lpBuffer=0x12491300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12491300*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.706] CloseHandle (hObject=0xdc) returned 1 [0138.706] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.706] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.706] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.706] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x418b3f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x418b3f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.707] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x418b3f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x418b3f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.707] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x4188ce0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x4188ce0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x418db00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.707] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0138.707] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0138.707] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0138.707] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0138.707] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0138.707] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.707] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.707] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.707] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.707] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0138.707] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.708] ReadFile (in: hFile=0xdc, lpBuffer=0x124c8f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c8f00*, lpNumberOfBytesRead=0x12429bd8*=0x85, lpOverlapped=0x0) returned 1 [0138.709] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0138.709] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.709] ReadFile (in: hFile=0x17c, lpBuffer=0x124c9000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c9000*, lpNumberOfBytesRead=0x12429bd8*=0x85, lpOverlapped=0x0) returned 1 [0138.710] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0138.710] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.710] ReadFile (in: hFile=0x138, lpBuffer=0x124c9100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c9100*, lpNumberOfBytesRead=0x12429bd8*=0x85, lpOverlapped=0x0) returned 1 [0138.712] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0138.712] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.712] ReadFile (in: hFile=0x16c, lpBuffer=0x124c9200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c9200*, lpNumberOfBytesRead=0x12429bd8*=0x85, lpOverlapped=0x0) returned 1 [0138.713] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x148 [0138.713] GetConsoleMode (in: hConsoleHandle=0x148, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.713] ReadFile (in: hFile=0x148, lpBuffer=0x124c9300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c9300*, lpNumberOfBytesRead=0x12429bd8*=0x86, lpOverlapped=0x0) returned 1 [0138.714] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0138.714] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0138.714] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0138.715] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0138.715] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86)) returned 1 [0138.715] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.715] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.715] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.715] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.715] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.715] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Microsoft Websites/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0138.715] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0138.715] CloseHandle (hObject=0x124) returned 1 [0138.715] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.716] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.716] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0138.717] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0138.717] WriteFile (in: hFile=0x124, lpBuffer=0x12493900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12493900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0138.718] CloseHandle (hObject=0x124) returned 1 [0138.718] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.718] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.718] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.718] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x41a61a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x41a61a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.718] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x41a61a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x41a61a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.718] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x41a61a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x41a61a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x41aafc0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.718] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0138.718] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0138.718] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0138.719] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0138.719] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.719] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.719] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.719] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.719] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124 [0138.720] GetConsoleMode (in: hConsoleHandle=0x124, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.720] ReadFile (in: hFile=0x124, lpBuffer=0x124c9600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c9600*, lpNumberOfBytesRead=0x12429bd8*=0x85, lpOverlapped=0x0) returned 1 [0138.721] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0138.722] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.722] ReadFile (in: hFile=0x178, lpBuffer=0x124c9700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c9700*, lpNumberOfBytesRead=0x12429bd8*=0x85, lpOverlapped=0x0) returned 1 [0138.723] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c [0138.723] GetConsoleMode (in: hConsoleHandle=0x12c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.723] ReadFile (in: hFile=0x12c, lpBuffer=0x124c9800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c9800*, lpNumberOfBytesRead=0x12429bd8*=0x85, lpOverlapped=0x0) returned 1 [0138.724] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x198 [0138.725] GetConsoleMode (in: hConsoleHandle=0x198, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0138.725] ReadFile (in: hFile=0x198, lpBuffer=0x124c9900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124c9900*, lpNumberOfBytesRead=0x12429bd8*=0x85, lpOverlapped=0x0) returned 1 [0138.726] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0138.726] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0138.726] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0138.727] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1 [0138.727] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.727] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.727] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.727] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.727] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.727] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Favorites/Windows Live/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0138.727] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0138.727] CloseHandle (hObject=0x168) returned 1 [0138.727] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.727] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.728] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0138.728] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0138.728] WriteFile (in: hFile=0x168, lpBuffer=0x1257c000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x1257c000*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0138.729] CloseHandle (hObject=0x168) returned 1 [0138.729] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.729] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.730] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.730] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x41c3660, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x41c3660, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.730] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x41c3660, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x41c3660, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.730] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x41c3660, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x41c3660, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x41c5d70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.730] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0138.730] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0138.730] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0138.730] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0138.730] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.730] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.730] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.730] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.730] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0138.731] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.731] ReadFile (in: hFile=0x168, lpBuffer=0x124c9a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c9a00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.732] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0138.733] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.733] ReadFile (in: hFile=0xd0, lpBuffer=0x124c9b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c9b00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.734] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0138.735] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.735] ReadFile (in: hFile=0xc8, lpBuffer=0x124c9c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c9c00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.736] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0138.736] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.737] ReadFile (in: hFile=0x118, lpBuffer=0x124c9d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c9d00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.737] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6)) returned 1 [0138.737] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1)) returned 1 [0138.738] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b)) returned 1 [0138.738] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1 [0138.738] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.738] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.738] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.738] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.738] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.738] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Links/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.738] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0138.738] CloseHandle (hObject=0x18c) returned 1 [0138.738] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Local Settings\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.739] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Local Settings\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.739] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Local Settings\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.739] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Local Settings\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.739] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Local Settings\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings\\@_read_to_recover_files_@.txt")) returned 0x2021 [0138.739] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Local Settings\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0138.740] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Local Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.740] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Local Settings\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.740] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.740] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.740] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.740] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.740] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\@_read_to_recover_files_@.txt")) returned 0x21 [0138.740] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.741] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.741] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3e99570, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3e99570, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.741] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3e99570, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3e99570, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.741] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x3e99570, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x3e99570, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3e99570, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.741] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06846f0, ftCreationTime.dwHighDateTime=0x1d4cf36, ftLastAccessTime.dwLowDateTime=0x97264b40, ftLastAccessTime.dwHighDateTime=0x1d4d556, ftLastWriteTime.dwLowDateTime=0x97264b40, ftLastWriteTime.dwHighDateTime=0x1d4d556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D-xHWVzy2sOY-", cAlternateFileName="D-XHWV~1")) returned 1 [0138.741] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0138.741] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3de4600, ftCreationTime.dwHighDateTime=0x1d4ce6e, ftLastAccessTime.dwLowDateTime=0xcf6dc9e0, ftLastAccessTime.dwHighDateTime=0x1d4d409, ftLastWriteTime.dwLowDateTime=0xcf6dc9e0, ftLastWriteTime.dwHighDateTime=0x1d4d409, nFileSizeHigh=0x0, nFileSizeLow=0xefbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="fGbidE4f47JFi472Yui.wav", cAlternateFileName="FGBIDE~1.WAV")) returned 1 [0138.741] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30f53060, ftCreationTime.dwHighDateTime=0x1d4cda5, ftLastAccessTime.dwLowDateTime=0x1dce0e80, ftLastAccessTime.dwHighDateTime=0x1d4c896, ftLastWriteTime.dwLowDateTime=0x1dce0e80, ftLastWriteTime.dwHighDateTime=0x1d4c896, nFileSizeHigh=0x0, nFileSizeLow=0x6e9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQsN-Hdz75I6iEyHALDs.m4a", cAlternateFileName="KQSN-H~1.M4A")) returned 1 [0138.741] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa880f9a0, ftCreationTime.dwHighDateTime=0x1d4d0e5, ftLastAccessTime.dwLowDateTime=0x5369e990, ftLastAccessTime.dwHighDateTime=0x1d4cea6, ftLastWriteTime.dwLowDateTime=0x5369e990, ftLastWriteTime.dwHighDateTime=0x1d4cea6, nFileSizeHigh=0x0, nFileSizeLow=0xa21d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LIfTOXVoAjylXK.m4a", cAlternateFileName="LIFTOX~1.M4A")) returned 1 [0138.741] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11daf440, ftCreationTime.dwHighDateTime=0x1d4d5a1, ftLastAccessTime.dwLowDateTime=0xd1117af0, ftLastAccessTime.dwHighDateTime=0x1d4c999, ftLastWriteTime.dwLowDateTime=0xd1117af0, ftLastWriteTime.dwHighDateTime=0x1d4c999, nFileSizeHigh=0x0, nFileSizeLow=0xfa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pTjvXozCEvI m.wav", cAlternateFileName="PTJVXO~1.WAV")) returned 1 [0138.741] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3afdd0, ftCreationTime.dwHighDateTime=0x1d4d2c7, ftLastAccessTime.dwLowDateTime=0x31accdc0, ftLastAccessTime.dwHighDateTime=0x1d4c5e8, ftLastWriteTime.dwLowDateTime=0x31accdc0, ftLastWriteTime.dwHighDateTime=0x1d4c5e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="W-7FSJ3TlndMmgKBJc", cAlternateFileName="W-7FSJ~1")) returned 1 [0138.741] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.741] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.741] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.741] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.741] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.741] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06846f0, ftCreationTime.dwHighDateTime=0x1d4cf36, ftLastAccessTime.dwLowDateTime=0x97264b40, ftLastAccessTime.dwHighDateTime=0x1d4d556, ftLastWriteTime.dwLowDateTime=0x97264b40, ftLastWriteTime.dwHighDateTime=0x1d4d556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.742] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.742] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/KQsN-Hdz75I6iEyHALDs.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kqsn-hdz75i6ieyhalds.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.742] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.742] ReadFile (in: hFile=0x18c, lpBuffer=0x124c9f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c9f00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.743] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/LIfTOXVoAjylXK.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\liftoxvoajylxk.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.743] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.743] ReadFile (in: hFile=0x10c, lpBuffer=0x12582000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12582000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.744] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.744] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3afdd0, ftCreationTime.dwHighDateTime=0x1d4d2c7, ftLastAccessTime.dwLowDateTime=0x31accdc0, ftLastAccessTime.dwHighDateTime=0x1d4c5e8, ftLastWriteTime.dwLowDateTime=0x31accdc0, ftLastWriteTime.dwHighDateTime=0x1d4c5e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.744] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.744] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.745] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.745] ReadFile (in: hFile=0xc0, lpBuffer=0x12582100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12582100*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.746] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/fGbidE4f47JFi472Yui.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fgbide4f47jfi472yui.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0138.746] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.746] ReadFile (in: hFile=0x180, lpBuffer=0x12582200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12582200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.747] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/pTjvXozCEvI m.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ptjvxozcevi m.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.747] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0138.747] ReadFile (in: hFile=0x19c, lpBuffer=0x12582300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12582300*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0138.748] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/KQsN-Hdz75I6iEyHALDs.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kqsn-hdz75i6ieyhalds.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30f53060, ftCreationTime.dwHighDateTime=0x1d4cda5, ftLastAccessTime.dwLowDateTime=0x1dce0e80, ftLastAccessTime.dwHighDateTime=0x1d4c896, ftLastWriteTime.dwLowDateTime=0x1dce0e80, ftLastWriteTime.dwHighDateTime=0x1d4c896, nFileSizeHigh=0x0, nFileSizeLow=0x6e9e)) returned 1 [0138.748] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/LIfTOXVoAjylXK.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\liftoxvoajylxk.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa880f9a0, ftCreationTime.dwHighDateTime=0x1d4d0e5, ftLastAccessTime.dwLowDateTime=0x5369e990, ftLastAccessTime.dwHighDateTime=0x1d4cea6, ftLastWriteTime.dwLowDateTime=0x5369e990, ftLastWriteTime.dwHighDateTime=0x1d4cea6, nFileSizeHigh=0x0, nFileSizeLow=0xa21d)) returned 1 [0138.748] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0138.748] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/fGbidE4f47JFi472Yui.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fgbide4f47jfi472yui.wav"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3de4600, ftCreationTime.dwHighDateTime=0x1d4ce6e, ftLastAccessTime.dwLowDateTime=0xcf6dc9e0, ftLastAccessTime.dwHighDateTime=0x1d4d409, ftLastWriteTime.dwLowDateTime=0xcf6dc9e0, ftLastWriteTime.dwHighDateTime=0x1d4d409, nFileSizeHigh=0x0, nFileSizeLow=0xefbe)) returned 1 [0138.748] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/fGbidE4f47JFi472Yui.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fgbide4f47jfi472yui.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0138.748] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.748] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249ec60 | out: pbBuffer=0x1249ec60) returned 1 [0138.749] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124468b4 | out: pbBuffer=0x124468b4) returned 1 [0138.749] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12582502 | out: pbBuffer=0x12582502) returned 1 [0138.751] SetEvent (hEvent=0xa8) returned 1 [0138.751] ReadFile (in: hFile=0x110, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0xefbe, lpOverlapped=0x0) returned 1 [0138.752] GetFileType (hFile=0x110) returned 0x1 [0138.752] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.752] WriteFile (in: hFile=0x110, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0xefbe, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x12429b48*=0xefbe, lpOverlapped=0x12429b54) returned 1 [0138.752] GetFileType (hFile=0x110) returned 0x1 [0138.752] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xefbe, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0138.752] ReadFile (in: hFile=0x110, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0138.752] CloseHandle (hObject=0x110) returned 1 [0138.752] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/fGbidE4f47JFi472Yui.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fgbide4f47jfi472yui.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0138.752] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.753] WriteFile (in: hFile=0x110, lpBuffer=0x12576fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12576fc0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0138.753] CloseHandle (hObject=0x110) returned 1 [0138.753] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c12c0*, nNumberOfCharsToWrite=0x59, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124c12c0*, lpNumberOfCharsWritten=0x1242981c*=0x59) returned 1 [0138.753] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/pTjvXozCEvI m.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ptjvxozcevi m.wav"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11daf440, ftCreationTime.dwHighDateTime=0x1d4d5a1, ftLastAccessTime.dwLowDateTime=0xd1117af0, ftLastAccessTime.dwHighDateTime=0x1d4c999, ftLastWriteTime.dwLowDateTime=0xd1117af0, ftLastWriteTime.dwHighDateTime=0x1d4c999, nFileSizeHigh=0x0, nFileSizeLow=0xfa4)) returned 1 [0138.754] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/pTjvXozCEvI m.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ptjvxozcevi m.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0138.754] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0138.754] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.755] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.755] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc042 | out: pbBuffer=0x124bc042) returned 1 [0138.756] CloseHandle (hObject=0x27c) returned 1 [0138.756] CloseHandle (hObject=0x120) returned 1 [0138.756] CloseHandle (hObject=0xfc) returned 1 [0138.756] CloseHandle (hObject=0x144) returned 1 [0138.756] CloseHandle (hObject=0x15c) returned 1 [0138.756] CloseHandle (hObject=0x198) returned 1 [0138.756] CloseHandle (hObject=0x12c) returned 1 [0138.756] CloseHandle (hObject=0x178) returned 1 [0138.756] CloseHandle (hObject=0x124) returned 1 [0138.756] CloseHandle (hObject=0x148) returned 1 [0138.756] CloseHandle (hObject=0x16c) returned 1 [0138.757] CloseHandle (hObject=0x138) returned 1 [0138.757] CloseHandle (hObject=0x17c) returned 1 [0138.757] CloseHandle (hObject=0xdc) returned 1 [0138.757] CloseHandle (hObject=0x108) returned 1 [0138.757] CloseHandle (hObject=0xe4) returned 1 [0138.757] CloseHandle (hObject=0xf0) returned 1 [0138.757] CloseHandle (hObject=0x104) returned 1 [0138.757] CloseHandle (hObject=0x154) returned 1 [0138.757] CloseHandle (hObject=0x190) returned 1 [0138.757] CloseHandle (hObject=0x19c) returned 1 [0138.757] CloseHandle (hObject=0x180) returned 1 [0138.757] CloseHandle (hObject=0xc0) returned 1 [0138.757] CloseHandle (hObject=0x10c) returned 1 [0138.757] CloseHandle (hObject=0x18c) returned 1 [0138.757] CloseHandle (hObject=0x118) returned 1 [0138.757] CloseHandle (hObject=0xc8) returned 1 [0138.757] CloseHandle (hObject=0xd0) returned 1 [0138.757] CloseHandle (hObject=0x168) returned 1 [0138.757] SwitchToThread () returned 1 [0138.758] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.760] SetEvent (hEvent=0xa0) returned 1 [0138.760] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.762] SetEvent (hEvent=0xa0) returned 1 [0138.762] SwitchToThread () returned 1 [0138.765] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.777] SetEvent (hEvent=0xa0) returned 1 [0138.777] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.778] SetEvent (hEvent=0xa0) returned 1 [0138.778] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0138.781] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.781] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.782] SetEvent (hEvent=0xac) returned 1 [0138.782] SetEvent (hEvent=0xa0) returned 1 [0138.782] ReadFile (in: hFile=0xc0, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xdb63, lpOverlapped=0x0) returned 1 [0138.783] GetFileType (hFile=0xc0) returned 0x1 [0138.783] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.783] WriteFile (in: hFile=0xc0, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xdb63, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429aa0*=0xdb63, lpOverlapped=0x12429aac) returned 1 [0138.783] GetFileType (hFile=0xc0) returned 0x1 [0138.783] SetFilePointerEx (in: hFile=0xc0, liDistanceToMove=0xdb63, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.783] ReadFile (in: hFile=0xc0, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.783] CloseHandle (hObject=0xc0) returned 1 [0138.783] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/nqMcZdJ-.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\nqmczdj-.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.783] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.784] WriteFile (in: hFile=0xc0, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.784] CloseHandle (hObject=0xc0) returned 1 [0138.784] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x12429774*=0x5c) returned 1 [0138.784] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/oPB20v.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\opb20v.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x228a5040, ftCreationTime.dwHighDateTime=0x1d4d58a, ftLastAccessTime.dwLowDateTime=0xd8ddd880, ftLastAccessTime.dwHighDateTime=0x1d4c59a, ftLastWriteTime.dwLowDateTime=0xd8ddd880, ftLastWriteTime.dwHighDateTime=0x1d4c59a, nFileSizeHigh=0x0, nFileSizeLow=0xf6fa)) returned 1 [0138.784] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/D-xHWVzy2sOY-/oPB20v.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\d-xhwvzy2soy-\\opb20v.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.784] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.785] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.785] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0138.786] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc0b5 | out: pbBuffer=0x124bc0b5) returned 1 [0138.787] SwitchToThread () returned 1 [0138.787] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.789] SetEvent (hEvent=0xa8) returned 1 [0138.789] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.792] SetEvent (hEvent=0xa8) returned 1 [0138.792] SwitchToThread () returned 1 [0138.792] SetEvent (hEvent=0xa8) returned 1 [0138.792] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.794] SetEvent (hEvent=0xa0) returned 1 [0138.794] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.796] SetEvent (hEvent=0xa0) returned 1 [0138.796] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.799] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.812] SetEvent (hEvent=0xa0) returned 1 [0138.812] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.815] SetEvent (hEvent=0xa0) returned 1 [0138.815] SwitchToThread () returned 1 [0138.815] SetEvent (hEvent=0xa0) returned 1 [0138.815] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.818] SetEvent (hEvent=0xa8) returned 1 [0138.818] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.819] SetEvent (hEvent=0xa8) returned 1 [0138.819] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.822] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.822] SetEvent (hEvent=0xa8) returned 1 [0138.822] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x178c9, lpOverlapped=0x0) returned 1 [0138.823] GetFileType (hFile=0x10c) returned 0x1 [0138.823] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.823] WriteFile (in: hFile=0x10c, lpBuffer=0x1274e000*, nNumberOfBytesToWrite=0x178c9, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1274e000*, lpNumberOfBytesWritten=0x12429aa0*=0x178c9, lpOverlapped=0x12429aac) returned 1 [0138.823] GetFileType (hFile=0x10c) returned 0x1 [0138.823] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x178c9, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.824] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.824] CloseHandle (hObject=0x10c) returned 1 [0138.824] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/XiJn_Boi12aW.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\xijn_boi12aw.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.824] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.824] WriteFile (in: hFile=0x10c, lpBuffer=0x127fa6c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127fa6c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.824] CloseHandle (hObject=0x10c) returned 1 [0138.824] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127fe000*, nNumberOfCharsToWrite=0x65, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x127fe000*, lpNumberOfCharsWritten=0x12429774*=0x65) returned 1 [0138.825] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/mTC69BhN.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\mtc69bhn.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb0ca790, ftCreationTime.dwHighDateTime=0x1d4cf52, ftLastAccessTime.dwLowDateTime=0x6717edf0, ftLastAccessTime.dwHighDateTime=0x1d4d321, ftLastWriteTime.dwLowDateTime=0x6717edf0, ftLastWriteTime.dwHighDateTime=0x1d4d321, nFileSizeHigh=0x0, nFileSizeLow=0xfecc)) returned 1 [0138.825] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/mTC69BhN.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\mtc69bhn.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.825] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.825] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.826] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0138.826] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c805f | out: pbBuffer=0x124c805f) returned 1 [0138.826] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c80db | out: pbBuffer=0x124c80db) returned 1 [0138.827] SwitchToThread () returned 1 [0138.827] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.830] SetEvent (hEvent=0xa0) returned 1 [0138.830] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.832] SetEvent (hEvent=0xa0) returned 1 [0138.833] SwitchToThread () returned 1 [0138.833] SetEvent (hEvent=0xa0) returned 1 [0138.833] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.834] SetEvent (hEvent=0xa8) returned 1 [0138.835] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.836] SetEvent (hEvent=0xa8) returned 1 [0138.836] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.838] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.838] SetEvent (hEvent=0xa8) returned 1 [0138.838] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x2cb6, lpOverlapped=0x0) returned 1 [0138.838] GetFileType (hFile=0x10c) returned 0x1 [0138.838] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.838] WriteFile (in: hFile=0x10c, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x2cb6, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429aa0*=0x2cb6, lpOverlapped=0x12429aac) returned 1 [0138.838] GetFileType (hFile=0x10c) returned 0x1 [0138.838] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x2cb6, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0138.839] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0138.839] CloseHandle (hObject=0x10c) returned 1 [0138.839] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/v8dQ7Bpi2st2HLcyuzL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\v8dq7bpi2st2hlcyuzl.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.839] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0138.839] WriteFile (in: hFile=0x10c, lpBuffer=0x127fa240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127fa240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0138.839] CloseHandle (hObject=0x10c) returned 1 [0138.839] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x128000e0*, nNumberOfCharsToWrite=0x6c, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x128000e0*, lpNumberOfCharsWritten=0x12429774*=0x6c) returned 1 [0138.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.840] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.840] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.840] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.840] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.840] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0138.840] CloseHandle (hObject=0x10c) returned 1 [0138.841] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.841] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.841] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.841] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0138.842] WriteFile (in: hFile=0x10c, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0138.842] CloseHandle (hObject=0x10c) returned 1 [0138.843] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.843] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.843] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.843] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d5650c0, ftCreationTime.dwHighDateTime=0x1d4cf50, ftLastAccessTime.dwLowDateTime=0x42bd660, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x42bd660, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d5650c0, ftCreationTime.dwHighDateTime=0x1d4cf50, ftLastAccessTime.dwLowDateTime=0x42bd660, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x42bd660, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x42bd660, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x42bd660, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x42bd660, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x797f4f10, ftCreationTime.dwHighDateTime=0x1d4d29a, ftLastAccessTime.dwLowDateTime=0x255bf1e0, ftLastAccessTime.dwHighDateTime=0x1d4cf6b, ftLastWriteTime.dwLowDateTime=0x255bf1e0, ftLastWriteTime.dwHighDateTime=0x1d4cf6b, nFileSizeHigh=0x0, nFileSizeLow=0x18e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="d1HG5E.mp3", cAlternateFileName="")) returned 1 [0138.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae6a4580, ftCreationTime.dwHighDateTime=0x1d4ca58, ftLastAccessTime.dwLowDateTime=0xe0882740, ftLastAccessTime.dwHighDateTime=0x1d4cf11, ftLastWriteTime.dwLowDateTime=0xe0882740, ftLastWriteTime.dwHighDateTime=0x1d4cf11, nFileSizeHigh=0x0, nFileSizeLow=0xca71, dwReserved0=0x0, dwReserved1=0x0, cFileName="fip4u3zziKqY.m4a", cAlternateFileName="FIP4U3~1.M4A")) returned 1 [0138.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6134ab0, ftCreationTime.dwHighDateTime=0x1d4c71d, ftLastAccessTime.dwLowDateTime=0x120da7b0, ftLastAccessTime.dwHighDateTime=0x1d4ccc7, ftLastWriteTime.dwLowDateTime=0x120da7b0, ftLastWriteTime.dwHighDateTime=0x1d4ccc7, nFileSizeHigh=0x0, nFileSizeLow=0x2bfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HbFGE81vwOme1.mp3", cAlternateFileName="HBFGE8~1.MP3")) returned 1 [0138.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e07d10, ftCreationTime.dwHighDateTime=0x1d4ce9f, ftLastAccessTime.dwLowDateTime=0x99532530, ftLastAccessTime.dwHighDateTime=0x1d4cee6, ftLastWriteTime.dwLowDateTime=0x99532530, ftLastWriteTime.dwHighDateTime=0x1d4cee6, nFileSizeHigh=0x0, nFileSizeLow=0x4127, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLVfPW8MOS4.m4a", cAlternateFileName="NLVFPW~1.M4A")) returned 1 [0138.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3ff690, ftCreationTime.dwHighDateTime=0x1d4d15f, ftLastAccessTime.dwLowDateTime=0x2a0fafd0, ftLastAccessTime.dwHighDateTime=0x1d4d135, ftLastWriteTime.dwLowDateTime=0x2a0fafd0, ftLastWriteTime.dwHighDateTime=0x1d4d135, nFileSizeHigh=0x0, nFileSizeLow=0xc39a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PZ8XEYGkQGC2ae.mp3", cAlternateFileName="PZ8XEY~1.MP3")) returned 1 [0138.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd4310, ftCreationTime.dwHighDateTime=0x1d4c78b, ftLastAccessTime.dwLowDateTime=0xed76b330, ftLastAccessTime.dwHighDateTime=0x1d4d246, ftLastWriteTime.dwLowDateTime=0xed76b330, ftLastWriteTime.dwHighDateTime=0x1d4d246, nFileSizeHigh=0x0, nFileSizeLow=0x9a5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="qMBnWQW.m4a", cAlternateFileName="")) returned 1 [0138.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ac31120, ftCreationTime.dwHighDateTime=0x1d4d431, ftLastAccessTime.dwLowDateTime=0x6cd5f20, ftLastAccessTime.dwHighDateTime=0x1d4d4a2, ftLastWriteTime.dwLowDateTime=0x6cd5f20, ftLastWriteTime.dwHighDateTime=0x1d4d4a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vxvQ", cAlternateFileName="")) returned 1 [0138.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ad6dd20, ftCreationTime.dwHighDateTime=0x1d4ca19, ftLastAccessTime.dwLowDateTime=0x94194710, ftLastAccessTime.dwHighDateTime=0x1d4cb4a, ftLastWriteTime.dwLowDateTime=0x94194710, ftLastWriteTime.dwHighDateTime=0x1d4cb4a, nFileSizeHigh=0x0, nFileSizeLow=0x10fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ar9g.wav", cAlternateFileName="")) returned 1 [0138.843] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.843] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.843] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.843] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.844] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/HbFGE81vwOme1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\hbfge81vwome1.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.844] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.844] ReadFile (in: hFile=0x10c, lpBuffer=0x124c8100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124c8100*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.845] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/NLVfPW8MOS4.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\nlvfpw8mos4.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.845] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.845] ReadFile (in: hFile=0xc0, lpBuffer=0x124c8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124c8200*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.846] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/PZ8XEYGkQGC2ae.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\pz8xeygkqgc2ae.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0138.846] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.846] ReadFile (in: hFile=0x110, lpBuffer=0x124c8300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124c8300*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.847] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/_ar9g.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\_ar9g.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0138.847] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.847] ReadFile (in: hFile=0x168, lpBuffer=0x124c8400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124c8400*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.848] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/d1HG5E.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\d1hg5e.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0138.848] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.849] ReadFile (in: hFile=0xd0, lpBuffer=0x124c8500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124c8500*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.849] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/fip4u3zziKqY.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\fip4u3zzikqy.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0138.850] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.850] ReadFile (in: hFile=0xc8, lpBuffer=0x124c8600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124c8600*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.850] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/qMBnWQW.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\qmbnwqw.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0138.851] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0138.851] ReadFile (in: hFile=0x118, lpBuffer=0x124c8700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124c8700*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0138.851] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.852] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ac31120, ftCreationTime.dwHighDateTime=0x1d4d431, ftLastAccessTime.dwLowDateTime=0x6cd5f20, ftLastAccessTime.dwHighDateTime=0x1d4d4a2, ftLastWriteTime.dwLowDateTime=0x6cd5f20, ftLastWriteTime.dwHighDateTime=0x1d4d4a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.856] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.856] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/HbFGE81vwOme1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\hbfge81vwome1.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6134ab0, ftCreationTime.dwHighDateTime=0x1d4c71d, ftLastAccessTime.dwLowDateTime=0x120da7b0, ftLastAccessTime.dwHighDateTime=0x1d4ccc7, ftLastWriteTime.dwLowDateTime=0x120da7b0, ftLastWriteTime.dwHighDateTime=0x1d4ccc7, nFileSizeHigh=0x0, nFileSizeLow=0x2bfe)) returned 1 [0138.856] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/HbFGE81vwOme1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\hbfge81vwome1.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.857] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.857] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e1a0 | out: pbBuffer=0x1249e1a0) returned 1 [0138.858] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8802 | out: pbBuffer=0x124c8802) returned 1 [0138.858] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c88a5 | out: pbBuffer=0x124c88a5) returned 1 [0138.858] SetEvent (hEvent=0xa0) returned 1 [0138.858] ReadFile (in: hFile=0x18c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x2bfe, lpOverlapped=0x0) returned 1 [0138.859] GetFileType (hFile=0x18c) returned 0x1 [0138.859] SetFilePointerEx (in: hFile=0x18c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.859] WriteFile (in: hFile=0x18c, lpBuffer=0x1257c000*, nNumberOfBytesToWrite=0x2bfe, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x1257c000*, lpNumberOfBytesWritten=0x124299f8*=0x2bfe, lpOverlapped=0x12429a04) returned 1 [0138.859] GetFileType (hFile=0x18c) returned 0x1 [0138.859] SetFilePointerEx (in: hFile=0x18c, liDistanceToMove=0x2bfe, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.859] ReadFile (in: hFile=0x18c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0138.859] CloseHandle (hObject=0x18c) returned 1 [0138.861] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/HbFGE81vwOme1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\hbfge81vwome1.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.861] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.861] WriteFile (in: hFile=0x18c, lpBuffer=0x127fafc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x127fafc0*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0138.861] CloseHandle (hObject=0x18c) returned 1 [0138.861] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12800000*, nNumberOfCharsToWrite=0x6b, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x12800000*, lpNumberOfCharsWritten=0x124296cc*=0x6b) returned 1 [0138.862] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/NLVfPW8MOS4.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\nlvfpw8mos4.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e07d10, ftCreationTime.dwHighDateTime=0x1d4ce9f, ftLastAccessTime.dwLowDateTime=0x99532530, ftLastAccessTime.dwHighDateTime=0x1d4cee6, ftLastWriteTime.dwLowDateTime=0x99532530, ftLastWriteTime.dwHighDateTime=0x1d4cee6, nFileSizeHigh=0x0, nFileSizeLow=0x4127)) returned 1 [0138.862] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/PZ8XEYGkQGC2ae.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\pz8xeygkqgc2ae.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3ff690, ftCreationTime.dwHighDateTime=0x1d4d15f, ftLastAccessTime.dwLowDateTime=0x2a0fafd0, ftLastAccessTime.dwHighDateTime=0x1d4d135, ftLastWriteTime.dwLowDateTime=0x2a0fafd0, ftLastWriteTime.dwHighDateTime=0x1d4d135, nFileSizeHigh=0x0, nFileSizeLow=0xc39a)) returned 1 [0138.862] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/PZ8XEYGkQGC2ae.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\pz8xeygkqgc2ae.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.862] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.862] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0138.863] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0138.863] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b60a6 | out: pbBuffer=0x124b60a6) returned 1 [0138.864] CloseHandle (hObject=0x118) returned 1 [0138.864] CloseHandle (hObject=0xc8) returned 1 [0138.864] CloseHandle (hObject=0xd0) returned 1 [0138.864] CloseHandle (hObject=0x168) returned 1 [0138.864] CloseHandle (hObject=0x110) returned 1 [0138.864] CloseHandle (hObject=0xc0) returned 1 [0138.864] CloseHandle (hObject=0x10c) returned 1 [0138.865] SwitchToThread () returned 1 [0138.865] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.868] SetEvent (hEvent=0xa8) returned 1 [0138.868] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.870] SetEvent (hEvent=0xa8) returned 1 [0138.870] SwitchToThread () returned 1 [0138.870] SetEvent (hEvent=0xa8) returned 1 [0138.870] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.872] SetEvent (hEvent=0xa0) returned 1 [0138.872] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.873] SetEvent (hEvent=0xa0) returned 1 [0138.874] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.875] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.876] SetEvent (hEvent=0xa0) returned 1 [0138.876] ReadFile (in: hFile=0x18c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x18e60, lpOverlapped=0x0) returned 1 [0138.877] GetFileType (hFile=0x18c) returned 0x1 [0138.877] SetFilePointerEx (in: hFile=0x18c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.877] WriteFile (in: hFile=0x18c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x18e60, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x124299f8*=0x18e60, lpOverlapped=0x12429a04) returned 1 [0138.877] GetFileType (hFile=0x18c) returned 0x1 [0138.877] SetFilePointerEx (in: hFile=0x18c, liDistanceToMove=0x18e60, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0138.878] ReadFile (in: hFile=0x18c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0138.878] CloseHandle (hObject=0x18c) returned 1 [0138.878] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/d1HG5E.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\d1hg5e.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.878] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0138.878] WriteFile (in: hFile=0x18c, lpBuffer=0x127fe240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x127fe240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0138.878] CloseHandle (hObject=0x18c) returned 1 [0138.878] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x125760d0*, nNumberOfCharsToWrite=0x64, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x125760d0*, lpNumberOfCharsWritten=0x124296cc*=0x64) returned 1 [0138.879] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/fip4u3zziKqY.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\fip4u3zzikqy.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae6a4580, ftCreationTime.dwHighDateTime=0x1d4ca58, ftLastAccessTime.dwLowDateTime=0xe0882740, ftLastAccessTime.dwHighDateTime=0x1d4cf11, ftLastWriteTime.dwLowDateTime=0xe0882740, ftLastWriteTime.dwHighDateTime=0x1d4cf11, nFileSizeHigh=0x0, nFileSizeLow=0xca71)) returned 1 [0138.879] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/qMBnWQW.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\qmbnwqw.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd4310, ftCreationTime.dwHighDateTime=0x1d4c78b, ftLastAccessTime.dwLowDateTime=0xed76b330, ftLastAccessTime.dwHighDateTime=0x1d4d246, ftLastWriteTime.dwLowDateTime=0xed76b330, ftLastWriteTime.dwHighDateTime=0x1d4d246, nFileSizeHigh=0x0, nFileSizeLow=0x9a5f)) returned 1 [0138.879] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.879] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.879] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.879] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.879] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0138.879] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.879] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0138.880] CloseHandle (hObject=0x18c) returned 1 [0138.880] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.880] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.880] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.880] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0138.881] WriteFile (in: hFile=0x18c, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0138.882] CloseHandle (hObject=0x18c) returned 1 [0138.882] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\@_read_to_recover_files_@.txt")) returned 0x20 [0138.882] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0138.882] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.882] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ac31120, ftCreationTime.dwHighDateTime=0x1d4d431, ftLastAccessTime.dwLowDateTime=0x4311df0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4311df0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0138.882] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ac31120, ftCreationTime.dwHighDateTime=0x1d4d431, ftLastAccessTime.dwLowDateTime=0x4311df0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4311df0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.882] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e233510, ftCreationTime.dwHighDateTime=0x1d4d1f9, ftLastAccessTime.dwLowDateTime=0x99070c80, ftLastAccessTime.dwHighDateTime=0x1d4d211, ftLastWriteTime.dwLowDateTime=0x99070c80, ftLastWriteTime.dwHighDateTime=0x1d4d211, nFileSizeHigh=0x0, nFileSizeLow=0x140dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="5 eeTJ4PUqtPbs6HDY.m4a", cAlternateFileName="5EETJ4~1.M4A")) returned 1 [0138.882] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac4f80, ftCreationTime.dwHighDateTime=0x1d4c8a2, ftLastAccessTime.dwLowDateTime=0x3dde87e0, ftLastAccessTime.dwHighDateTime=0x1d4cb16, ftLastWriteTime.dwLowDateTime=0x3dde87e0, ftLastWriteTime.dwHighDateTime=0x1d4cb16, nFileSizeHigh=0x0, nFileSizeLow=0x4e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="7Os7kh1CbJIQ.wav", cAlternateFileName="7OS7KH~1.WAV")) returned 1 [0138.882] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba84b90, ftCreationTime.dwHighDateTime=0x1d4d432, ftLastAccessTime.dwLowDateTime=0xded8f930, ftLastAccessTime.dwHighDateTime=0x1d4d199, ftLastWriteTime.dwLowDateTime=0xded8f930, ftLastWriteTime.dwHighDateTime=0x1d4d199, nFileSizeHigh=0x0, nFileSizeLow=0x1b97, dwReserved0=0x0, dwReserved1=0x0, cFileName="7XlCpsx.mp3", cAlternateFileName="")) returned 1 [0138.882] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x4311df0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x4311df0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4311df0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0138.882] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cb9a140, ftCreationTime.dwHighDateTime=0x1d4d4b7, ftLastAccessTime.dwLowDateTime=0x4c69f500, ftLastAccessTime.dwHighDateTime=0x1d4c676, ftLastWriteTime.dwLowDateTime=0x4c69f500, ftLastWriteTime.dwHighDateTime=0x1d4c676, nFileSizeHigh=0x0, nFileSizeLow=0x1770, dwReserved0=0x0, dwReserved1=0x0, cFileName="ae5Z0r-mfCz KH.mp3", cAlternateFileName="AE5Z0R~1.MP3")) returned 1 [0138.883] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e4b3be0, ftCreationTime.dwHighDateTime=0x1d4d568, ftLastAccessTime.dwLowDateTime=0xd00b980, ftLastAccessTime.dwHighDateTime=0x1d4d28d, ftLastWriteTime.dwLowDateTime=0xd00b980, ftLastWriteTime.dwHighDateTime=0x1d4d28d, nFileSizeHigh=0x0, nFileSizeLow=0xacf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="KTctO3sRuhGMM Orm.m4a", cAlternateFileName="KTCTO3~1.M4A")) returned 1 [0138.883] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa8a450, ftCreationTime.dwHighDateTime=0x1d4c95a, ftLastAccessTime.dwLowDateTime=0x716ffeb0, ftLastAccessTime.dwHighDateTime=0x1d4cc1d, ftLastWriteTime.dwLowDateTime=0x716ffeb0, ftLastWriteTime.dwHighDateTime=0x1d4cc1d, nFileSizeHigh=0x0, nFileSizeLow=0x12b92, dwReserved0=0x0, dwReserved1=0x0, cFileName="nLM3T.wav", cAlternateFileName="")) returned 1 [0138.883] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0ee9d0, ftCreationTime.dwHighDateTime=0x1d4d06f, ftLastAccessTime.dwLowDateTime=0x6ebafdc0, ftLastAccessTime.dwHighDateTime=0x1d4d134, ftLastWriteTime.dwLowDateTime=0x6ebafdc0, ftLastWriteTime.dwHighDateTime=0x1d4d134, nFileSizeHigh=0x0, nFileSizeLow=0x16df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="s0xsAdksC.mp3", cAlternateFileName="S0XSAD~1.MP3")) returned 1 [0138.883] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15357be0, ftCreationTime.dwHighDateTime=0x1d4d4db, ftLastAccessTime.dwLowDateTime=0xc79a66f0, ftLastAccessTime.dwHighDateTime=0x1d4cf82, ftLastWriteTime.dwLowDateTime=0xc79a66f0, ftLastWriteTime.dwHighDateTime=0x1d4cf82, nFileSizeHigh=0x0, nFileSizeLow=0xfde3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wp zn.wav", cAlternateFileName="WPZN~1.WAV")) returned 1 [0138.883] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87e5f70, ftCreationTime.dwHighDateTime=0x1d4cbcc, ftLastAccessTime.dwLowDateTime=0x1f8da3a0, ftLastAccessTime.dwHighDateTime=0x1d4d42d, ftLastWriteTime.dwLowDateTime=0x1f8da3a0, ftLastWriteTime.dwHighDateTime=0x1d4d42d, nFileSizeHigh=0x0, nFileSizeLow=0xc736, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xo1_aI-9.m4a", cAlternateFileName="")) returned 1 [0138.883] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.883] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0138.883] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/5 eeTJ4PUqtPbs6HDY.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\5 eetj4puqtpbs6hdy.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0138.883] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0138.883] ReadFile (in: hFile=0x18c, lpBuffer=0x125b2200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x125b2200*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0138.884] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/7Os7kh1CbJIQ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\7os7kh1cbjiq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0138.884] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0138.885] ReadFile (in: hFile=0x10c, lpBuffer=0x125b2300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x125b2300*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0138.885] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/7XlCpsx.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\7xlcpsx.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0138.886] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0138.886] ReadFile (in: hFile=0xc0, lpBuffer=0x125b2400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x125b2400*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0138.886] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0138.886] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0138.887] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/KTctO3sRuhGMM Orm.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\ktcto3sruhgmm orm.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0138.887] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0138.887] ReadFile (in: hFile=0x110, lpBuffer=0x125b2500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x125b2500*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0138.888] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/Xo1_aI-9.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\xo1_ai-9.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0138.888] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0138.888] ReadFile (in: hFile=0x168, lpBuffer=0x125b2600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x125b2600*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0138.889] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/ae5Z0r-mfCz KH.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\ae5z0r-mfcz kh.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0138.889] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0138.889] ReadFile (in: hFile=0xd0, lpBuffer=0x125b2700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x125b2700*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0138.890] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/nLM3T.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\nlm3t.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0138.890] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0138.890] ReadFile (in: hFile=0xc8, lpBuffer=0x125b2800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x125b2800*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0138.891] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/s0xsAdksC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\s0xsadksc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0138.891] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0138.891] ReadFile (in: hFile=0x118, lpBuffer=0x125b2900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x125b2900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0138.892] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/wp zn.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\wp zn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0138.892] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0138.892] ReadFile (in: hFile=0x180, lpBuffer=0x125b2a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x125b2a00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0138.893] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/5 eeTJ4PUqtPbs6HDY.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\5 eetj4puqtpbs6hdy.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e233510, ftCreationTime.dwHighDateTime=0x1d4d1f9, ftLastAccessTime.dwLowDateTime=0x99070c80, ftLastAccessTime.dwHighDateTime=0x1d4d211, ftLastWriteTime.dwLowDateTime=0x99070c80, ftLastWriteTime.dwHighDateTime=0x1d4d211, nFileSizeHigh=0x0, nFileSizeLow=0x140dc)) returned 1 [0138.893] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/7Os7kh1CbJIQ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\7os7kh1cbjiq.wav"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac4f80, ftCreationTime.dwHighDateTime=0x1d4c8a2, ftLastAccessTime.dwLowDateTime=0x3dde87e0, ftLastAccessTime.dwHighDateTime=0x1d4cb16, ftLastWriteTime.dwLowDateTime=0x3dde87e0, ftLastWriteTime.dwHighDateTime=0x1d4cb16, nFileSizeHigh=0x0, nFileSizeLow=0x4e1)) returned 1 [0138.893] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/7Os7kh1CbJIQ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\7os7kh1cbjiq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.893] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0138.893] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124422c0 | out: pbBuffer=0x124422c0) returned 1 [0138.894] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x125b2b02 | out: pbBuffer=0x125b2b02) returned 1 [0138.894] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x125b2b9d | out: pbBuffer=0x125b2b9d) returned 1 [0138.895] SetEvent (hEvent=0xa8) returned 1 [0138.895] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x4e1, lpOverlapped=0x0) returned 1 [0138.895] GetFileType (hFile=0x19c) returned 0x1 [0138.895] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0138.895] WriteFile (in: hFile=0x19c, lpBuffer=0x127c8000*, nNumberOfBytesToWrite=0x4e1, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x127c8000*, lpNumberOfBytesWritten=0x12429950*=0x4e1, lpOverlapped=0x1242995c) returned 1 [0138.896] GetFileType (hFile=0x19c) returned 0x1 [0138.896] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x4e1, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0138.896] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0138.896] CloseHandle (hObject=0x19c) returned 1 [0138.896] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/7Os7kh1CbJIQ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\7os7kh1cbjiq.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.896] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0138.896] WriteFile (in: hFile=0x19c, lpBuffer=0x127fefc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x127fefc0*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0138.896] CloseHandle (hObject=0x19c) returned 1 [0138.896] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b60e0*, nNumberOfCharsToWrite=0x6f, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124b60e0*, lpNumberOfCharsWritten=0x12429624*=0x6f) returned 1 [0138.897] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/7XlCpsx.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\7xlcpsx.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba84b90, ftCreationTime.dwHighDateTime=0x1d4d432, ftLastAccessTime.dwLowDateTime=0xded8f930, ftLastAccessTime.dwHighDateTime=0x1d4d199, ftLastWriteTime.dwLowDateTime=0xded8f930, ftLastWriteTime.dwHighDateTime=0x1d4d199, nFileSizeHigh=0x0, nFileSizeLow=0x1b97)) returned 1 [0138.897] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/7XlCpsx.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\7xlcpsx.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.897] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0138.897] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.898] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b8002 | out: pbBuffer=0x124b8002) returned 1 [0138.899] CloseHandle (hObject=0x180) returned 1 [0138.899] CloseHandle (hObject=0x118) returned 1 [0138.899] CloseHandle (hObject=0xc8) returned 1 [0138.899] CloseHandle (hObject=0xd0) returned 1 [0138.899] CloseHandle (hObject=0x168) returned 1 [0138.899] CloseHandle (hObject=0x110) returned 1 [0138.899] CloseHandle (hObject=0xc0) returned 1 [0138.899] CloseHandle (hObject=0x10c) returned 1 [0138.900] CloseHandle (hObject=0x18c) returned 1 [0138.900] SwitchToThread () returned 1 [0138.900] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.902] SetEvent (hEvent=0xa0) returned 1 [0138.902] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.906] SetEvent (hEvent=0xa0) returned 1 [0138.906] SwitchToThread () returned 1 [0138.906] SetEvent (hEvent=0xa0) returned 1 [0138.906] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.908] SetEvent (hEvent=0xa8) returned 1 [0138.908] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.909] SetEvent (hEvent=0xa8) returned 1 [0138.909] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.911] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.911] SetEvent (hEvent=0xa8) returned 1 [0138.911] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x12b92, lpOverlapped=0x0) returned 1 [0138.912] GetFileType (hFile=0x19c) returned 0x1 [0138.912] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0138.912] WriteFile (in: hFile=0x19c, lpBuffer=0x124a0000*, nNumberOfBytesToWrite=0x12b92, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x124a0000*, lpNumberOfBytesWritten=0x12429950*=0x12b92, lpOverlapped=0x1242995c) returned 1 [0138.912] GetFileType (hFile=0x19c) returned 0x1 [0138.912] SetFilePointerEx (in: hFile=0x19c, liDistanceToMove=0x12b92, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0138.912] ReadFile (in: hFile=0x19c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0138.913] CloseHandle (hObject=0x19c) returned 1 [0138.913] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/nLM3T.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\nlm3t.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.913] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0138.913] WriteFile (in: hFile=0x19c, lpBuffer=0x124c2240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x124c2240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0138.913] CloseHandle (hObject=0x19c) returned 1 [0138.913] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127c8000*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x127c8000*, lpNumberOfCharsWritten=0x12429624*=0x68) returned 1 [0138.914] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/s0xsAdksC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\s0xsadksc.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad0ee9d0, ftCreationTime.dwHighDateTime=0x1d4d06f, ftLastAccessTime.dwLowDateTime=0x6ebafdc0, ftLastAccessTime.dwHighDateTime=0x1d4d134, ftLastWriteTime.dwLowDateTime=0x6ebafdc0, ftLastWriteTime.dwHighDateTime=0x1d4d134, nFileSizeHigh=0x0, nFileSizeLow=0x16df8)) returned 1 [0138.914] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Music/W-7FSJ3TlndMmgKBJc/kqey/vxvQ/s0xsAdksC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w-7fsj3tlndmmgkbjc\\kqey\\vxvq\\s0xsadksc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0138.914] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0138.914] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0138.915] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0138.915] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d4002 | out: pbBuffer=0x124d4002) returned 1 [0138.916] SwitchToThread () returned 1 [0138.916] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.919] SetEvent (hEvent=0xa0) returned 1 [0138.919] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.921] SetEvent (hEvent=0xa0) returned 1 [0138.922] SwitchToThread () returned 1 [0138.922] SetEvent (hEvent=0xa0) returned 1 [0138.922] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.929] SetEvent (hEvent=0xa8) returned 1 [0138.929] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.930] SetEvent (hEvent=0xa8) returned 1 [0138.930] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0138.934] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.961] SetEvent (hEvent=0xa8) returned 1 [0138.961] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0138.961] SetEvent (hEvent=0xa8) returned 1 [0138.962] SetEvent (hEvent=0x7c) returned 1 [0138.962] CloseHandle (hObject=0xf0) returned 1 [0138.962] CloseHandle (hObject=0x104) returned 1 [0138.962] CloseHandle (hObject=0x154) returned 1 [0138.962] CloseHandle (hObject=0x190) returned 1 [0138.962] CloseHandle (hObject=0x180) returned 1 [0138.962] CloseHandle (hObject=0x118) returned 1 [0138.962] CloseHandle (hObject=0xc8) returned 1 [0138.962] CloseHandle (hObject=0xd0) returned 1 [0138.962] CloseHandle (hObject=0x168) returned 1 [0138.962] CloseHandle (hObject=0x110) returned 1 [0138.962] CloseHandle (hObject=0xc0) returned 1 [0138.962] CloseHandle (hObject=0x10c) returned 1 [0138.962] CloseHandle (hObject=0x18c) returned 1 [0138.962] CloseHandle (hObject=0x19c) returned 1 [0138.962] SwitchToThread () returned 1 [0139.022] SwitchToThread () returned 1 [0139.022] SetEvent (hEvent=0xa8) returned 1 [0139.022] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.025] SetEvent (hEvent=0x7c) returned 1 [0139.025] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0139.026] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.026] SetEvent (hEvent=0x7c) returned 1 [0139.026] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0139.029] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.029] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.029] SetEvent (hEvent=0xac) returned 1 [0139.030] SetEvent (hEvent=0xa8) returned 1 [0139.030] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x5d8c, lpOverlapped=0x0) returned 1 [0139.030] GetFileType (hFile=0xe4) returned 0x1 [0139.030] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.030] WriteFile (in: hFile=0xe4, lpBuffer=0x127f6000*, nNumberOfBytesToWrite=0x5d8c, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127f6000*, lpNumberOfBytesWritten=0x12429b48*=0x5d8c, lpOverlapped=0x12429b54) returned 1 [0139.030] GetFileType (hFile=0xe4) returned 0x1 [0139.193] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x5d8c, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.193] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0139.193] CloseHandle (hObject=0xe4) returned 1 [0139.193] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/UGhSJo.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ughsjo.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.193] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.283] WriteFile (in: hFile=0xe4, lpBuffer=0x12778240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12778240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0139.283] CloseHandle (hObject=0xe4) returned 1 [0139.283] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x126601e0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x126601e0*, lpNumberOfCharsWritten=0x1242981c*=0x4f) returned 1 [0139.284] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/UwLO9wL4D5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwlo9wl4d5.png"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x933294c0, ftCreationTime.dwHighDateTime=0x1d4cdb4, ftLastAccessTime.dwLowDateTime=0x7cfc3a20, ftLastAccessTime.dwHighDateTime=0x1d4cf13, ftLastWriteTime.dwLowDateTime=0x7cfc3a20, ftLastWriteTime.dwHighDateTime=0x1d4cf13, nFileSizeHigh=0x0, nFileSizeLow=0x8300)) returned 1 [0139.284] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/UwLO9wL4D5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwlo9wl4d5.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.284] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.289] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e020 | out: pbBuffer=0x1249e020) returned 1 [0139.289] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446124 | out: pbBuffer=0x12446124) returned 1 [0139.289] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0139.291] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.307] SetEvent (hEvent=0xac) returned 1 [0139.307] SetEvent (hEvent=0x7c) returned 1 [0139.307] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x8300, lpOverlapped=0x0) returned 1 [0139.307] GetFileType (hFile=0xe4) returned 0x1 [0139.307] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.307] WriteFile (in: hFile=0xe4, lpBuffer=0x1257c000*, nNumberOfBytesToWrite=0x8300, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1257c000*, lpNumberOfBytesWritten=0x12429b48*=0x8300, lpOverlapped=0x12429b54) returned 1 [0139.308] GetFileType (hFile=0xe4) returned 0x1 [0139.308] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x8300, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.308] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0139.308] CloseHandle (hObject=0xe4) returned 1 [0139.308] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/UwLO9wL4D5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwlo9wl4d5.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.308] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.319] WriteFile (in: hFile=0xe4, lpBuffer=0x12778fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12778fc0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0139.319] CloseHandle (hObject=0xe4) returned 1 [0139.319] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x53, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x53) returned 1 [0139.321] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/ZijcOI_7_iSEf.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zijcoi_7_isef.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce7bdf80, ftCreationTime.dwHighDateTime=0x1d4cc58, ftLastAccessTime.dwLowDateTime=0x8a7d97c0, ftLastAccessTime.dwHighDateTime=0x1d4d26a, ftLastWriteTime.dwLowDateTime=0x8a7d97c0, ftLastWriteTime.dwHighDateTime=0x1d4d26a, nFileSizeHigh=0x0, nFileSizeLow=0xf843)) returned 1 [0139.321] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/ZijcOI_7_iSEf.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zijcoi_7_isef.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.321] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.332] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.332] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0139.332] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0139.332] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c2024 | out: pbBuffer=0x124c2024) returned 1 [0139.333] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c209d | out: pbBuffer=0x124c209d) returned 1 [0139.334] SwitchToThread () returned 1 [0139.335] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.351] SetEvent (hEvent=0xa8) returned 1 [0139.351] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.354] SetEvent (hEvent=0xa8) returned 1 [0139.354] SwitchToThread () returned 1 [0139.355] SetEvent (hEvent=0xa8) returned 1 [0139.355] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.366] SetEvent (hEvent=0x7c) returned 1 [0139.366] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0139.394] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.394] SetEvent (hEvent=0x7c) returned 1 [0139.394] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0139.400] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.400] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0139.436] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.436] SetEvent (hEvent=0xac) returned 1 [0139.436] SetEvent (hEvent=0x7c) returned 1 [0139.436] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x10686, lpOverlapped=0x0) returned 1 [0139.437] GetFileType (hFile=0xe4) returned 0x1 [0139.437] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.437] WriteFile (in: hFile=0xe4, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x10686, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x12429b48*=0x10686, lpOverlapped=0x12429b54) returned 1 [0139.437] GetFileType (hFile=0xe4) returned 0x1 [0139.438] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x10686, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.438] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0139.438] CloseHandle (hObject=0xe4) returned 1 [0139.438] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/mibGrCxeLlA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mibgrcxella.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.438] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.447] WriteFile (in: hFile=0xe4, lpBuffer=0x127c0240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127c0240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0139.447] CloseHandle (hObject=0xe4) returned 1 [0139.447] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x54, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x54) returned 1 [0139.447] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/qIm 6 ynK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qim 6 ynk.png"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70faebb0, ftCreationTime.dwHighDateTime=0x1d4c86d, ftLastAccessTime.dwLowDateTime=0xc6ffd200, ftLastAccessTime.dwHighDateTime=0x1d4cfed, ftLastWriteTime.dwLowDateTime=0xc6ffd200, ftLastWriteTime.dwHighDateTime=0x1d4cfed, nFileSizeHigh=0x0, nFileSizeLow=0x5dde)) returned 1 [0139.448] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/qIm 6 ynK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qim 6 ynk.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.448] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.448] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.449] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0139.449] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b2002 | out: pbBuffer=0x124b2002) returned 1 [0139.451] SwitchToThread () returned 1 [0139.452] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.462] SetEvent (hEvent=0xa8) returned 1 [0139.462] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.465] SetEvent (hEvent=0xa8) returned 1 [0139.465] SwitchToThread () returned 1 [0139.465] SetEvent (hEvent=0xa8) returned 1 [0139.466] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.471] SetEvent (hEvent=0x7c) returned 1 [0139.471] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.472] SetEvent (hEvent=0x7c) returned 1 [0139.472] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.474] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.475] SetEvent (hEvent=0x7c) returned 1 [0139.475] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x343c, lpOverlapped=0x0) returned 1 [0139.476] GetFileType (hFile=0xe4) returned 0x1 [0139.476] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.476] WriteFile (in: hFile=0xe4, lpBuffer=0x1257c000*, nNumberOfBytesToWrite=0x343c, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1257c000*, lpNumberOfBytesWritten=0x12429b48*=0x343c, lpOverlapped=0x12429b54) returned 1 [0139.476] GetFileType (hFile=0xe4) returned 0x1 [0139.476] SetFilePointerEx (in: hFile=0xe4, liDistanceToMove=0x343c, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.476] ReadFile (in: hFile=0xe4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0139.476] CloseHandle (hObject=0xe4) returned 1 [0139.476] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/yulmPafaL.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\yulmpafal.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.476] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.477] WriteFile (in: hFile=0xe4, lpBuffer=0x127c06c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127c06c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0139.477] CloseHandle (hObject=0xe4) returned 1 [0139.477] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c0b0*, nNumberOfCharsToWrite=0x52, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c0b0*, lpNumberOfCharsWritten=0x1242981c*=0x52) returned 1 [0139.478] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.478] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.478] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.478] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0139.479] WriteFile (in: hFile=0xe4, lpBuffer=0x1246f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x1246f300*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0139.480] CloseHandle (hObject=0xe4) returned 1 [0139.480] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\@_read_to_recover_files_@.txt")) returned 0x20 [0139.480] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0139.480] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.480] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e535a80, ftCreationTime.dwHighDateTime=0x1d4c9e9, ftLastAccessTime.dwLowDateTime=0x48c26a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x48c26a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0139.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e535a80, ftCreationTime.dwHighDateTime=0x1d4c9e9, ftLastAccessTime.dwLowDateTime=0x48c26a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x48c26a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e76b560, ftCreationTime.dwHighDateTime=0x1d4cb53, ftLastAccessTime.dwLowDateTime=0x660fc470, ftLastAccessTime.dwHighDateTime=0x1d4cffa, ftLastWriteTime.dwLowDateTime=0x660fc470, ftLastWriteTime.dwHighDateTime=0x1d4cffa, nFileSizeHigh=0x0, nFileSizeLow=0x10a1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="3C0tKaP75SUIlGQ.bmp", cAlternateFileName="3C0TKA~1.BMP")) returned 1 [0139.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf0bc80, ftCreationTime.dwHighDateTime=0x1d4ccd7, ftLastAccessTime.dwLowDateTime=0x8bddcc10, ftLastAccessTime.dwHighDateTime=0x1d4d14e, ftLastWriteTime.dwLowDateTime=0x8bddcc10, ftLastWriteTime.dwHighDateTime=0x1d4d14e, nFileSizeHigh=0x0, nFileSizeLow=0x3812, dwReserved0=0x0, dwReserved1=0x0, cFileName="3sB7-T0b-InBHk.png", cAlternateFileName="3SB7-T~1.PNG")) returned 1 [0139.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe25f810, ftCreationTime.dwHighDateTime=0x1d4c60e, ftLastAccessTime.dwLowDateTime=0x46ed9990, ftLastAccessTime.dwHighDateTime=0x1d4cf65, ftLastWriteTime.dwLowDateTime=0x46ed9990, ftLastWriteTime.dwHighDateTime=0x1d4cf65, nFileSizeHigh=0x0, nFileSizeLow=0xd36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="4YB9ZaRq2Ae5tU.bmp", cAlternateFileName="4YB9ZA~1.BMP")) returned 1 [0139.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3eb1e00, ftCreationTime.dwHighDateTime=0x1d4c9de, ftLastAccessTime.dwLowDateTime=0xf2ad1590, ftLastAccessTime.dwHighDateTime=0x1d4d487, ftLastWriteTime.dwLowDateTime=0xf2ad1590, ftLastWriteTime.dwHighDateTime=0x1d4d487, nFileSizeHigh=0x0, nFileSizeLow=0xc0ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="6 aGnHE.png", cAlternateFileName="6AGNHE~1.PNG")) returned 1 [0139.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d04ce0, ftCreationTime.dwHighDateTime=0x1d4d18f, ftLastAccessTime.dwLowDateTime=0x407de3e0, ftLastAccessTime.dwHighDateTime=0x1d4c8f2, ftLastWriteTime.dwLowDateTime=0x407de3e0, ftLastWriteTime.dwHighDateTime=0x1d4c8f2, nFileSizeHigh=0x0, nFileSizeLow=0xdce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="8q8b.gif", cAlternateFileName="")) returned 1 [0139.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x48c26a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x48c26a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x48c26a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0139.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2e3920, ftCreationTime.dwHighDateTime=0x1d4c8a5, ftLastAccessTime.dwLowDateTime=0xad7d8740, ftLastAccessTime.dwHighDateTime=0x1d4c7b5, ftLastWriteTime.dwLowDateTime=0xad7d8740, ftLastWriteTime.dwHighDateTime=0x1d4c7b5, nFileSizeHigh=0x0, nFileSizeLow=0x8dd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DkRTw60Pu5d6yq-E7Yo7.jpg", cAlternateFileName="DKRTW6~1.JPG")) returned 1 [0139.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8af740, ftCreationTime.dwHighDateTime=0x1d4cc2e, ftLastAccessTime.dwLowDateTime=0xf903e190, ftLastAccessTime.dwHighDateTime=0x1d4d071, ftLastWriteTime.dwLowDateTime=0xf903e190, ftLastWriteTime.dwHighDateTime=0x1d4d071, nFileSizeHigh=0x0, nFileSizeLow=0x16ac9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ioqTUg1uiPOwAwq2az-.png", cAlternateFileName="IOQTUG~1.PNG")) returned 1 [0139.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6b3880, ftCreationTime.dwHighDateTime=0x1d4cb2f, ftLastAccessTime.dwLowDateTime=0xbc36bbf0, ftLastAccessTime.dwHighDateTime=0x1d4cf1a, ftLastWriteTime.dwLowDateTime=0xbc36bbf0, ftLastWriteTime.dwHighDateTime=0x1d4cf1a, nFileSizeHigh=0x0, nFileSizeLow=0x1602b, dwReserved0=0x0, dwReserved1=0x0, cFileName="njj-5NO.bmp", cAlternateFileName="")) returned 1 [0139.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76ef710, ftCreationTime.dwHighDateTime=0x1d4ca87, ftLastAccessTime.dwLowDateTime=0x80c21020, ftLastAccessTime.dwHighDateTime=0x1d4c61d, ftLastWriteTime.dwLowDateTime=0x80c21020, ftLastWriteTime.dwHighDateTime=0x1d4c61d, nFileSizeHigh=0x0, nFileSizeLow=0x16f0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VuhibnqUI8oH.jpg", cAlternateFileName="VUHIBN~1.JPG")) returned 1 [0139.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd92ad440, ftCreationTime.dwHighDateTime=0x1d4d536, ftLastAccessTime.dwLowDateTime=0xe2ea41c0, ftLastAccessTime.dwHighDateTime=0x1d4d093, ftLastWriteTime.dwLowDateTime=0xe2ea41c0, ftLastWriteTime.dwHighDateTime=0x1d4d093, nFileSizeHigh=0x0, nFileSizeLow=0xa0f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCCTBi.png", cAlternateFileName="")) returned 1 [0139.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe0b900, ftCreationTime.dwHighDateTime=0x1d4c89f, ftLastAccessTime.dwLowDateTime=0xf14316d0, ftLastAccessTime.dwHighDateTime=0x1d4c7b9, ftLastWriteTime.dwLowDateTime=0xf14316d0, ftLastWriteTime.dwHighDateTime=0x1d4c7b9, nFileSizeHigh=0x0, nFileSizeLow=0x93fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="wFgc-JfDcGBq3h6f.gif", cAlternateFileName="WFGC-J~1.GIF")) returned 1 [0139.481] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.481] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0139.481] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/3C0tKaP75SUIlGQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\3c0tkap75suilgq.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.481] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.483] ReadFile (in: hFile=0xe4, lpBuffer=0x124d8000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d8000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.483] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/3sB7-T0b-InBHk.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\3sb7-t0b-inbhk.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0139.484] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.485] ReadFile (in: hFile=0x19c, lpBuffer=0x124d8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d8200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.486] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/4YB9ZaRq2Ae5tU.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\4yb9zarq2ae5tu.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0139.486] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.486] ReadFile (in: hFile=0x18c, lpBuffer=0x124d8400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d8400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.487] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/6 aGnHE.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\6 agnhe.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0139.487] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.488] ReadFile (in: hFile=0x10c, lpBuffer=0x124d8500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d8500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.488] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/8q8b.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\8q8b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0139.489] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.489] ReadFile (in: hFile=0xc0, lpBuffer=0x124d8600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d8600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.490] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.490] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.490] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/DkRTw60Pu5d6yq-E7Yo7.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\dkrtw60pu5d6yq-e7yo7.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0139.490] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.490] ReadFile (in: hFile=0x110, lpBuffer=0x124d8700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d8700*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.491] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/VuhibnqUI8oH.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\vuhibnqui8oh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0139.491] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.491] ReadFile (in: hFile=0x168, lpBuffer=0x124d8900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d8900*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.492] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/WCCTBi.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\wcctbi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0139.492] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.493] ReadFile (in: hFile=0xd0, lpBuffer=0x124d8a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d8a00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.493] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/ioqTUg1uiPOwAwq2az-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\ioqtug1uipowawq2az-.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0139.494] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.494] ReadFile (in: hFile=0xc8, lpBuffer=0x124d8b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d8b00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.494] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/njj-5NO.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\njj-5no.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0139.495] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.495] ReadFile (in: hFile=0x118, lpBuffer=0x124d8c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d8c00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.496] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/wFgc-JfDcGBq3h6f.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\wfgc-jfdcgbq3h6f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0139.496] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0139.552] ReadFile (in: hFile=0x180, lpBuffer=0x124d8d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x124d8d00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0139.553] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/3C0tKaP75SUIlGQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\3c0tkap75suilgq.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e76b560, ftCreationTime.dwHighDateTime=0x1d4cb53, ftLastAccessTime.dwLowDateTime=0x660fc470, ftLastAccessTime.dwHighDateTime=0x1d4cffa, ftLastWriteTime.dwLowDateTime=0x660fc470, ftLastWriteTime.dwHighDateTime=0x1d4cffa, nFileSizeHigh=0x0, nFileSizeLow=0x10a1a)) returned 1 [0139.553] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/3sB7-T0b-InBHk.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\3sb7-t0b-inbhk.png"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf0bc80, ftCreationTime.dwHighDateTime=0x1d4ccd7, ftLastAccessTime.dwLowDateTime=0x8bddcc10, ftLastAccessTime.dwHighDateTime=0x1d4d14e, ftLastWriteTime.dwLowDateTime=0x8bddcc10, ftLastWriteTime.dwHighDateTime=0x1d4d14e, nFileSizeHigh=0x0, nFileSizeLow=0x3812)) returned 1 [0139.553] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/3sB7-T0b-InBHk.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\3sb7-t0b-inbhk.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.554] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.631] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e120 | out: pbBuffer=0x1249e120) returned 1 [0139.632] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d9002 | out: pbBuffer=0x124d9002) returned 1 [0139.632] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d900d | out: pbBuffer=0x124d900d) returned 1 [0139.634] SetEvent (hEvent=0xa8) returned 1 [0139.634] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x3812, lpOverlapped=0x0) returned 1 [0139.634] GetFileType (hFile=0x190) returned 0x1 [0139.634] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.634] WriteFile (in: hFile=0x190, lpBuffer=0x127fe000*, nNumberOfBytesToWrite=0x3812, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127fe000*, lpNumberOfBytesWritten=0x12429aa0*=0x3812, lpOverlapped=0x12429aac) returned 1 [0139.634] GetFileType (hFile=0x190) returned 0x1 [0139.635] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x3812, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.635] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0139.635] CloseHandle (hObject=0x190) returned 1 [0139.635] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/3sB7-T0b-InBHk.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\3sb7-t0b-inbhk.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.635] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.642] WriteFile (in: hFile=0x190, lpBuffer=0x127c0fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c0fc0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0139.642] CloseHandle (hObject=0x190) returned 1 [0139.642] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1248c180*, nNumberOfCharsToWrite=0x5d, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1248c180*, lpNumberOfCharsWritten=0x12429774*=0x5d) returned 1 [0139.644] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/4YB9ZaRq2Ae5tU.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\4yb9zarq2ae5tu.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe25f810, ftCreationTime.dwHighDateTime=0x1d4c60e, ftLastAccessTime.dwLowDateTime=0x46ed9990, ftLastAccessTime.dwHighDateTime=0x1d4cf65, ftLastWriteTime.dwLowDateTime=0x46ed9990, ftLastWriteTime.dwHighDateTime=0x1d4cf65, nFileSizeHigh=0x0, nFileSizeLow=0xd36b)) returned 1 [0139.644] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/6 aGnHE.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\6 agnhe.png"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3eb1e00, ftCreationTime.dwHighDateTime=0x1d4c9de, ftLastAccessTime.dwLowDateTime=0xf2ad1590, ftLastAccessTime.dwHighDateTime=0x1d4d487, ftLastWriteTime.dwLowDateTime=0xf2ad1590, ftLastWriteTime.dwHighDateTime=0x1d4d487, nFileSizeHigh=0x0, nFileSizeLow=0xc0ef)) returned 1 [0139.644] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/6 aGnHE.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\6 agnhe.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.644] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.645] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.646] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d8102 | out: pbBuffer=0x124d8102) returned 1 [0139.646] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d8141 | out: pbBuffer=0x124d8141) returned 1 [0139.646] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d8149 | out: pbBuffer=0x124d8149) returned 1 [0139.720] SetEvent (hEvent=0xa8) returned 1 [0139.720] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.724] SetEvent (hEvent=0x7c) returned 1 [0139.725] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.727] SetEvent (hEvent=0x7c) returned 1 [0139.727] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.730] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.730] SetEvent (hEvent=0x7c) returned 1 [0139.730] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xdce4, lpOverlapped=0x0) returned 1 [0139.731] GetFileType (hFile=0x190) returned 0x1 [0139.731] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.731] WriteFile (in: hFile=0x190, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0xdce4, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x12429aa0*=0xdce4, lpOverlapped=0x12429aac) returned 1 [0139.731] GetFileType (hFile=0x190) returned 0x1 [0139.731] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xdce4, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.731] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0139.731] CloseHandle (hObject=0x190) returned 1 [0139.732] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/8q8b.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\8q8b.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.732] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.732] WriteFile (in: hFile=0x190, lpBuffer=0x124c26c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c26c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0139.732] CloseHandle (hObject=0x190) returned 1 [0139.732] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c0b0*, nNumberOfCharsToWrite=0x53, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1264c0b0*, lpNumberOfCharsWritten=0x12429774*=0x53) returned 1 [0139.733] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/DkRTw60Pu5d6yq-E7Yo7.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\dkrtw60pu5d6yq-e7yo7.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2e3920, ftCreationTime.dwHighDateTime=0x1d4c8a5, ftLastAccessTime.dwLowDateTime=0xad7d8740, ftLastAccessTime.dwHighDateTime=0x1d4c7b5, ftLastWriteTime.dwLowDateTime=0xad7d8740, ftLastWriteTime.dwHighDateTime=0x1d4c7b5, nFileSizeHigh=0x0, nFileSizeLow=0x8dd4)) returned 1 [0139.733] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/DkRTw60Pu5d6yq-E7Yo7.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\dkrtw60pu5d6yq-e7yo7.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.733] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.735] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.736] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0139.736] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0139.737] SwitchToThread () returned 1 [0139.737] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.741] SetEvent (hEvent=0xa8) returned 1 [0139.741] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.744] SetEvent (hEvent=0xa8) returned 1 [0139.744] SwitchToThread () returned 1 [0139.744] SetEvent (hEvent=0xa8) returned 1 [0139.744] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.747] SetEvent (hEvent=0x7c) returned 1 [0139.747] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.748] SetEvent (hEvent=0x7c) returned 1 [0139.748] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0139.753] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.754] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.754] SetEvent (hEvent=0xac) returned 1 [0139.754] SetEvent (hEvent=0x7c) returned 1 [0139.754] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xa0f3, lpOverlapped=0x0) returned 1 [0139.755] GetFileType (hFile=0x190) returned 0x1 [0139.755] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.755] WriteFile (in: hFile=0x190, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xa0f3, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429aa0*=0xa0f3, lpOverlapped=0x12429aac) returned 1 [0139.755] GetFileType (hFile=0x190) returned 0x1 [0139.755] SetFilePointerEx (in: hFile=0x190, liDistanceToMove=0xa0f3, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.755] ReadFile (in: hFile=0x190, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0139.755] CloseHandle (hObject=0x190) returned 1 [0139.756] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/WCCTBi.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\wcctbi.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.756] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.757] WriteFile (in: hFile=0x190, lpBuffer=0x124c2240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x124c2240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0139.757] CloseHandle (hObject=0x190) returned 1 [0139.757] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x55, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x12429774*=0x55) returned 1 [0139.758] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/ioqTUg1uiPOwAwq2az-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\ioqtug1uipowawq2az-.png"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8af740, ftCreationTime.dwHighDateTime=0x1d4cc2e, ftLastAccessTime.dwLowDateTime=0xf903e190, ftLastAccessTime.dwHighDateTime=0x1d4d071, ftLastWriteTime.dwLowDateTime=0xf903e190, ftLastWriteTime.dwHighDateTime=0x1d4d071, nFileSizeHigh=0x0, nFileSizeLow=0x16ac9)) returned 1 [0139.759] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/1-p1L/ioqTUg1uiPOwAwq2az-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1-p1l\\ioqtug1uipowawq2az-.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.759] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.759] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e000 | out: pbBuffer=0x1249e000) returned 1 [0139.760] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0139.760] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d8002 | out: pbBuffer=0x124d8002) returned 1 [0139.760] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d802d | out: pbBuffer=0x124d802d) returned 1 [0139.761] SwitchToThread () returned 1 [0139.761] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.765] SetEvent (hEvent=0xa8) returned 1 [0139.765] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.771] SetEvent (hEvent=0xa8) returned 1 [0139.771] SwitchToThread () returned 1 [0139.771] SetEvent (hEvent=0xa8) returned 1 [0139.771] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.774] SetEvent (hEvent=0x7c) returned 1 [0139.774] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.775] SetEvent (hEvent=0x7c) returned 1 [0139.775] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.789] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.809] SetEvent (hEvent=0x7c) returned 1 [0139.809] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.809] SetEvent (hEvent=0x7c) returned 1 [0139.810] SetEvent (hEvent=0xa0) returned 1 [0139.810] CloseHandle (hObject=0xc0) returned 1 [0139.810] CloseHandle (hObject=0x10c) returned 1 [0139.810] CloseHandle (hObject=0x18c) returned 1 [0139.810] CloseHandle (hObject=0x19c) returned 1 [0139.810] CloseHandle (hObject=0xe4) returned 1 [0139.810] CloseHandle (hObject=0x190) returned 1 [0139.810] SwitchToThread () returned 1 [0139.888] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.892] SetEvent (hEvent=0xa8) returned 1 [0139.892] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.894] SetEvent (hEvent=0xa8) returned 1 [0139.894] SwitchToThread () returned 1 [0139.895] SetEvent (hEvent=0xa8) returned 1 [0139.895] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0139.897] SetEvent (hEvent=0x7c) returned 1 [0139.897] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.898] SetEvent (hEvent=0x7c) returned 1 [0139.898] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.901] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0139.901] SetEvent (hEvent=0x7c) returned 1 [0139.901] ReadFile (in: hFile=0x110, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xc6ea, lpOverlapped=0x0) returned 1 [0139.902] GetFileType (hFile=0x110) returned 0x1 [0139.902] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.902] WriteFile (in: hFile=0x110, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0xc6ea, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429aa0*=0xc6ea, lpOverlapped=0x12429aac) returned 1 [0139.902] GetFileType (hFile=0x110) returned 0x1 [0139.902] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xc6ea, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0139.902] ReadFile (in: hFile=0x110, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0139.902] CloseHandle (hObject=0x110) returned 1 [0139.903] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/qhHhyMHY2sNRiVr.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\qhhhymhy2snrivr.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0139.903] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0139.903] WriteFile (in: hFile=0x110, lpBuffer=0x12576240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12576240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0139.903] CloseHandle (hObject=0x110) returned 1 [0139.903] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1249a000*, nNumberOfCharsToWrite=0x6b, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1249a000*, lpNumberOfCharsWritten=0x12429774*=0x6b) returned 1 [0139.906] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/t10YqxFIamR42xrgFb.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\t10yqxfiamr42xrgfb.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc009db30, ftCreationTime.dwHighDateTime=0x1d4c84f, ftLastAccessTime.dwLowDateTime=0x206736b0, ftLastAccessTime.dwHighDateTime=0x1d4cdca, ftLastWriteTime.dwLowDateTime=0x206736b0, ftLastWriteTime.dwHighDateTime=0x1d4cdca, nFileSizeHigh=0x0, nFileSizeLow=0x36bc)) returned 1 [0139.906] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.906] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.906] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.906] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.907] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0139.907] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Pictures/wI_U1JdmZjkkoc9Kd7/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wi_u1jdmzjkkoc9kd7\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0139.907] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0139.907] CloseHandle (hObject=0x110) returned 1 [0139.907] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/PrintHood\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.908] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/PrintHood\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.908] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/PrintHood\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0139.909] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0139.910] WriteFile (in: hFile=0x110, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0139.910] CloseHandle (hObject=0x110) returned 1 [0139.911] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/PrintHood\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood\\@_read_to_recover_files_@.txt")) returned 0x2020 [0139.911] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/PrintHood\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0139.911] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/PrintHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.911] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/PrintHood\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.911] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Recent\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.912] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Recent\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.912] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Recent\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0139.912] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0139.913] WriteFile (in: hFile=0x110, lpBuffer=0x12773300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12773300*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0139.914] CloseHandle (hObject=0x110) returned 1 [0139.914] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Recent\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent\\@_read_to_recover_files_@.txt")) returned 0x20 [0139.914] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Recent\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0139.914] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Recent" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.914] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Recent\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.914] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.914] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.915] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0139.915] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0139.915] WriteFile (in: hFile=0x110, lpBuffer=0x12774600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12774600*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0139.916] CloseHandle (hObject=0x110) returned 1 [0139.916] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\@_read_to_recover_files_@.txt")) returned 0x20 [0139.916] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0139.916] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.917] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4c95e80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4c95e80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0139.917] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4c95e80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4c95e80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.917] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x4c95e80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x4c95e80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4c95e80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0139.917] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0139.917] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.917] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0139.917] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.917] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.917] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0139.917] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.918] ReadFile (in: hFile=0x110, lpBuffer=0x124c8000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.918] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0139.918] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.918] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.919] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.919] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.919] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0139.919] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Saved Games/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.919] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0139.919] CloseHandle (hObject=0x190) returned 1 [0139.919] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.919] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.919] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.920] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0139.920] WriteFile (in: hFile=0x190, lpBuffer=0x12776c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12776c00*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0139.921] CloseHandle (hObject=0x190) returned 1 [0139.922] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\@_read_to_recover_files_@.txt")) returned 0x20 [0139.922] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0139.922] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.922] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4c95e80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4c95e80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0139.922] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4c95e80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4c95e80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.922] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x4c95e80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x4c95e80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x4cbbfe0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0139.922] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0139.922] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0139.922] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0139.922] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.923] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0139.923] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.923] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.923] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.923] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Everywhere.search-ms\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.923] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.923] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Indexed Locations.search-ms\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.923] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0139.923] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.924] ReadFile (in: hFile=0x190, lpBuffer=0x124c8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.924] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c)) returned 1 [0139.924] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.925] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.925] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.925] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.925] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0139.925] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.925] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0139.925] CloseHandle (hObject=0xe4) returned 1 [0139.925] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Everywhere.search-ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.925] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Everywhere.search-ms\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.925] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Everywhere.search-ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.926] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Everywhere.search-ms\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.926] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Everywhere.search-ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0139.926] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.926] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0139.926] CloseHandle (hObject=0xe4) returned 1 [0139.926] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Indexed Locations.search-ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.926] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Indexed Locations.search-ms\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.927] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Indexed Locations.search-ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.927] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Indexed Locations.search-ms\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.927] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Indexed Locations.search-ms\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0139.927] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Searches/Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.927] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0139.927] CloseHandle (hObject=0xe4) returned 1 [0139.927] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/SendTo\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.930] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/SendTo\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.931] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/SendTo\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.931] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0139.932] WriteFile (in: hFile=0xe4, lpBuffer=0x12491300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12491300*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0139.933] CloseHandle (hObject=0xe4) returned 1 [0139.933] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/SendTo\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto\\@_read_to_recover_files_@.txt")) returned 0x2020 [0139.933] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/SendTo\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0139.933] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/SendTo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.933] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/SendTo\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.933] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Start Menu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.933] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Start Menu\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.934] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Start Menu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.934] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0139.935] WriteFile (in: hFile=0xe4, lpBuffer=0x12492600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12492600*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0139.936] CloseHandle (hObject=0xe4) returned 1 [0139.936] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Start Menu\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu\\@_read_to_recover_files_@.txt")) returned 0x20 [0139.936] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Start Menu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0139.937] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Start Menu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.937] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Start Menu\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.937] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Templates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.937] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Templates\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.937] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Templates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.938] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0139.938] WriteFile (in: hFile=0xe4, lpBuffer=0x12493900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12493900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0139.939] CloseHandle (hObject=0xe4) returned 1 [0139.939] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Templates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates\\@_read_to_recover_files_@.txt")) returned 0x2020 [0139.939] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Templates\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0139.939] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Templates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.939] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Templates\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.939] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.940] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.940] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.940] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.940] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\@_read_to_recover_files_@.txt")) returned 0x21 [0139.940] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0139.940] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.940] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3efded0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3efded0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0139.940] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x3efded0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3efded0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.940] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc37543e0, ftCreationTime.dwHighDateTime=0x1d4d2db, ftLastAccessTime.dwLowDateTime=0x9574e060, ftLastAccessTime.dwHighDateTime=0x1d4ce74, ftLastWriteTime.dwLowDateTime=0x9574e060, ftLastWriteTime.dwHighDateTime=0x1d4ce74, nFileSizeHigh=0x0, nFileSizeLow=0x10696, dwReserved0=0x0, dwReserved1=0x0, cFileName="1V3XSrXBie13JXZ2Fmie.swf", cAlternateFileName="1V3XSR~1.SWF")) returned 1 [0139.940] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1285bb30, ftCreationTime.dwHighDateTime=0x1d4cdf6, ftLastAccessTime.dwLowDateTime=0x60e47890, ftLastAccessTime.dwHighDateTime=0x1d4ca2a, ftLastWriteTime.dwLowDateTime=0x60e47890, ftLastWriteTime.dwHighDateTime=0x1d4ca2a, nFileSizeHigh=0x0, nFileSizeLow=0x54df, dwReserved0=0x0, dwReserved1=0x0, cFileName="6CjUOLDApXa.flv", cAlternateFileName="6CJUOL~1.FLV")) returned 1 [0139.940] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903a5b90, ftCreationTime.dwHighDateTime=0x1d4d313, ftLastAccessTime.dwLowDateTime=0x745d5ee0, ftLastAccessTime.dwHighDateTime=0x1d4cdc3, ftLastWriteTime.dwLowDateTime=0x745d5ee0, ftLastWriteTime.dwHighDateTime=0x1d4cdc3, nFileSizeHigh=0x0, nFileSizeLow=0x1fa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="7xrWY8rDXfCu8ZDXU.mkv", cAlternateFileName="7XRWY8~1.MKV")) returned 1 [0139.940] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x3efded0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x3efded0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x3f02cf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0139.940] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3308b10, ftCreationTime.dwHighDateTime=0x1d4cf5e, ftLastAccessTime.dwLowDateTime=0x78850b20, ftLastAccessTime.dwHighDateTime=0x1d4d34b, ftLastWriteTime.dwLowDateTime=0x78850b20, ftLastWriteTime.dwHighDateTime=0x1d4d34b, nFileSizeHigh=0x0, nFileSizeLow=0x14580, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cr_uW2FbmlFG.mkv", cAlternateFileName="CR_UW2~1.MKV")) returned 1 [0139.940] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0139.940] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5f2b780, ftCreationTime.dwHighDateTime=0x1d4d24d, ftLastAccessTime.dwLowDateTime=0x5a4526c0, ftLastAccessTime.dwHighDateTime=0x1d4d523, ftLastWriteTime.dwLowDateTime=0x5a4526c0, ftLastWriteTime.dwHighDateTime=0x1d4d523, nFileSizeHigh=0x0, nFileSizeLow=0x76dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DLVoZuGo8Sd-W-.mp4", cAlternateFileName="DLVOZU~1.MP4")) returned 1 [0139.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57236230, ftCreationTime.dwHighDateTime=0x1d4cc00, ftLastAccessTime.dwLowDateTime=0x77f31b20, ftLastAccessTime.dwHighDateTime=0x1d4cfb8, ftLastWriteTime.dwLowDateTime=0x77f31b20, ftLastWriteTime.dwHighDateTime=0x1d4cfb8, nFileSizeHigh=0x0, nFileSizeLow=0x103fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="DT-d76Tu9eXs.avi", cAlternateFileName="DT-D76~1.AVI")) returned 1 [0139.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f6aaa0, ftCreationTime.dwHighDateTime=0x1d4c5fc, ftLastAccessTime.dwLowDateTime=0xab9e2a40, ftLastAccessTime.dwHighDateTime=0x1d4c744, ftLastWriteTime.dwLowDateTime=0xab9e2a40, ftLastWriteTime.dwHighDateTime=0x1d4c744, nFileSizeHigh=0x0, nFileSizeLow=0xdf21, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETFeWTM9b2pQVD.swf", cAlternateFileName="ETFEWT~1.SWF")) returned 1 [0139.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac0bd80, ftCreationTime.dwHighDateTime=0x1d4c559, ftLastAccessTime.dwLowDateTime=0x8816a400, ftLastAccessTime.dwHighDateTime=0x1d4d124, ftLastWriteTime.dwLowDateTime=0x8816a400, ftLastWriteTime.dwHighDateTime=0x1d4d124, nFileSizeHigh=0x0, nFileSizeLow=0x12e51, dwReserved0=0x0, dwReserved1=0x0, cFileName="H7-2hc06c0.avi", cAlternateFileName="H7-2HC~1.AVI")) returned 1 [0139.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2ae7cf0, ftCreationTime.dwHighDateTime=0x1d4d172, ftLastAccessTime.dwLowDateTime=0xd8ce81c0, ftLastAccessTime.dwHighDateTime=0x1d4d3e9, ftLastWriteTime.dwLowDateTime=0xd8ce81c0, ftLastWriteTime.dwHighDateTime=0x1d4d3e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IyDTGTQoU103_nycy", cAlternateFileName="IYDTGT~1")) returned 1 [0139.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e892a90, ftCreationTime.dwHighDateTime=0x1d4ca2a, ftLastAccessTime.dwLowDateTime=0x96d457a0, ftLastAccessTime.dwHighDateTime=0x1d4d3ca, ftLastWriteTime.dwLowDateTime=0x96d457a0, ftLastWriteTime.dwHighDateTime=0x1d4d3ca, nFileSizeHigh=0x0, nFileSizeLow=0x16e34, dwReserved0=0x0, dwReserved1=0x0, cFileName="kWeM6qRi4e2e_ns.avi", cAlternateFileName="KWEM6Q~1.AVI")) returned 1 [0139.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd842f850, ftCreationTime.dwHighDateTime=0x1d4d3a1, ftLastAccessTime.dwLowDateTime=0x20681da0, ftLastAccessTime.dwHighDateTime=0x1d4c983, ftLastWriteTime.dwLowDateTime=0x20681da0, ftLastWriteTime.dwHighDateTime=0x1d4c983, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnHqj.flv", cAlternateFileName="")) returned 1 [0139.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fa31c0, ftCreationTime.dwHighDateTime=0x1d4cd6c, ftLastAccessTime.dwLowDateTime=0x6bb70750, ftLastAccessTime.dwHighDateTime=0x1d4d47b, ftLastWriteTime.dwLowDateTime=0x6bb70750, ftLastWriteTime.dwHighDateTime=0x1d4d47b, nFileSizeHigh=0x0, nFileSizeLow=0x75e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJDLlb.flv", cAlternateFileName="")) returned 1 [0139.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21ad0c0, ftCreationTime.dwHighDateTime=0x1d4d499, ftLastAccessTime.dwLowDateTime=0x9d9e26d0, ftLastAccessTime.dwHighDateTime=0x1d4cced, ftLastWriteTime.dwLowDateTime=0x9d9e26d0, ftLastWriteTime.dwHighDateTime=0x1d4cced, nFileSizeHigh=0x0, nFileSizeLow=0x167f, dwReserved0=0x0, dwReserved1=0x0, cFileName="T_Sn_RAxoI96.mkv", cAlternateFileName="T_SN_R~1.MKV")) returned 1 [0139.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0cc5e0, ftCreationTime.dwHighDateTime=0x1d4c7ef, ftLastAccessTime.dwLowDateTime=0x389da700, ftLastAccessTime.dwHighDateTime=0x1d4d482, ftLastWriteTime.dwLowDateTime=0x389da700, ftLastWriteTime.dwHighDateTime=0x1d4d482, nFileSizeHigh=0x0, nFileSizeLow=0x2e33, dwReserved0=0x0, dwReserved1=0x0, cFileName="X7l3GG.flv", cAlternateFileName="")) returned 1 [0139.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29ade0d0, ftCreationTime.dwHighDateTime=0x1d4cb8f, ftLastAccessTime.dwLowDateTime=0xcbc0eb60, ftLastAccessTime.dwHighDateTime=0x1d4d0d0, ftLastWriteTime.dwLowDateTime=0xcbc0eb60, ftLastWriteTime.dwHighDateTime=0x1d4d0d0, nFileSizeHigh=0x0, nFileSizeLow=0x17917, dwReserved0=0x0, dwReserved1=0x0, cFileName="z inyqAN7rqIx9IrQbQ.swf", cAlternateFileName="ZINYQA~1.SWF")) returned 1 [0139.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895ab320, ftCreationTime.dwHighDateTime=0x1d4d1dc, ftLastAccessTime.dwLowDateTime=0x95db3120, ftLastAccessTime.dwHighDateTime=0x1d4cca4, ftLastWriteTime.dwLowDateTime=0x95db3120, ftLastWriteTime.dwHighDateTime=0x1d4cca4, nFileSizeHigh=0x0, nFileSizeLow=0x1453a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ cAnQB.swf", cAlternateFileName="_CANQB~1.SWF")) returned 1 [0139.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924d9c00, ftCreationTime.dwHighDateTime=0x1d4c9cf, ftLastAccessTime.dwLowDateTime=0x56840470, ftLastAccessTime.dwHighDateTime=0x1d4c90c, ftLastWriteTime.dwLowDateTime=0x56840470, ftLastWriteTime.dwHighDateTime=0x1d4c90c, nFileSizeHigh=0x0, nFileSizeLow=0xea34, dwReserved0=0x0, dwReserved1=0x0, cFileName="_nnCnNW6M6TkNy.mp4", cAlternateFileName="_NNCNN~1.MP4")) returned 1 [0139.941] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.941] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0139.941] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/1V3XSrXBie13JXZ2Fmie.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1v3xsrxbie13jxz2fmie.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0139.941] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.944] ReadFile (in: hFile=0xe4, lpBuffer=0x124c8400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8400*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.945] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/6CjUOLDApXa.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6cjuoldapxa.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0139.945] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.945] ReadFile (in: hFile=0x19c, lpBuffer=0x124c8500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8500*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.946] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/7xrWY8rDXfCu8ZDXU.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\7xrwy8rdxfcu8zdxu.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0139.946] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.946] ReadFile (in: hFile=0x18c, lpBuffer=0x124c8600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.947] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.947] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.947] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/Cr_uW2FbmlFG.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\cr_uw2fbmlfg.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0139.948] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.948] ReadFile (in: hFile=0x10c, lpBuffer=0x124c8700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.962] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/DLVoZuGo8Sd-W-.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dlvozugo8sd-w-.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc0 [0139.962] GetConsoleMode (in: hConsoleHandle=0xc0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.963] ReadFile (in: hFile=0xc0, lpBuffer=0x124c8800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.964] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/DT-d76Tu9eXs.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dt-d76tu9exs.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168 [0139.965] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.973] ReadFile (in: hFile=0x168, lpBuffer=0x124c8900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.974] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/ETFeWTM9b2pQVD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\etfewtm9b2pqvd.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0139.974] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.975] ReadFile (in: hFile=0xd0, lpBuffer=0x124c8a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8a00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.976] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/H7-2hc06c0.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\h7-2hc06c0.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0139.976] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.977] ReadFile (in: hFile=0xc8, lpBuffer=0x124c8b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8b00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.978] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0139.978] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2ae7cf0, ftCreationTime.dwHighDateTime=0x1d4d172, ftLastAccessTime.dwLowDateTime=0xd8ce81c0, ftLastAccessTime.dwHighDateTime=0x1d4d3e9, ftLastWriteTime.dwLowDateTime=0xd8ce81c0, ftLastWriteTime.dwHighDateTime=0x1d4d3e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0139.978] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0139.978] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/OnHqj.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\onhqj.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0139.978] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.979] ReadFile (in: hFile=0x118, lpBuffer=0x124c8c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8c00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.980] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/PJDLlb.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\pjdllb.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0139.980] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.980] ReadFile (in: hFile=0x180, lpBuffer=0x124c8d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8d00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.981] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/T_Sn_RAxoI96.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\t_sn_raxoi96.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0139.981] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.984] ReadFile (in: hFile=0x154, lpBuffer=0x124c8e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8e00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.984] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/X7l3GG.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x7l3gg.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0139.985] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.985] ReadFile (in: hFile=0x104, lpBuffer=0x124c8f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c8f00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.986] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/_ cAnQB.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_ canqb.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0139.986] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.987] ReadFile (in: hFile=0xf0, lpBuffer=0x124c9000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c9000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.988] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/_nnCnNW6M6TkNy.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_nncnnw6m6tkny.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0139.988] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.989] ReadFile (in: hFile=0x108, lpBuffer=0x124c9100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c9100*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.989] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0139.989] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.990] ReadFile (in: hFile=0xdc, lpBuffer=0x124c9200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c9200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.990] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/kWeM6qRi4e2e_ns.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kwem6qri4e2e_ns.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0139.991] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.991] ReadFile (in: hFile=0x17c, lpBuffer=0x124c9300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c9300*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.992] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/z inyqAN7rqIx9IrQbQ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\z inyqan7rqix9irqbq.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0139.992] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0139.992] ReadFile (in: hFile=0x138, lpBuffer=0x124c9500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x124c9500*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0139.993] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/1V3XSrXBie13JXZ2Fmie.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1v3xsrxbie13jxz2fmie.swf"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc37543e0, ftCreationTime.dwHighDateTime=0x1d4d2db, ftLastAccessTime.dwLowDateTime=0x9574e060, ftLastAccessTime.dwHighDateTime=0x1d4ce74, ftLastWriteTime.dwLowDateTime=0x9574e060, ftLastWriteTime.dwHighDateTime=0x1d4ce74, nFileSizeHigh=0x0, nFileSizeLow=0x10696)) returned 1 [0139.993] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/1V3XSrXBie13JXZ2Fmie.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1v3xsrxbie13jxz2fmie.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0139.993] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.994] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124427e0 | out: pbBuffer=0x124427e0) returned 1 [0139.995] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446710 | out: pbBuffer=0x12446710) returned 1 [0139.995] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c9802 | out: pbBuffer=0x124c9802) returned 1 [0139.996] SetEvent (hEvent=0xa8) returned 1 [0139.996] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x10696, lpOverlapped=0x0) returned 1 [0139.997] GetFileType (hFile=0x16c) returned 0x1 [0139.997] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.997] WriteFile (in: hFile=0x16c, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0x10696, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x12429b48*=0x10696, lpOverlapped=0x12429b54) returned 1 [0139.998] GetFileType (hFile=0x16c) returned 0x1 [0139.998] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x10696, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0139.998] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0139.998] CloseHandle (hObject=0x16c) returned 1 [0139.998] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/1V3XSrXBie13JXZ2Fmie.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\1v3xsrxbie13jxz2fmie.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0139.998] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0139.999] WriteFile (in: hFile=0x16c, lpBuffer=0x12576fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x12576fc0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0139.999] CloseHandle (hObject=0x16c) returned 1 [0139.999] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x125786c0*, nNumberOfCharsToWrite=0x5b, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x125786c0*, lpNumberOfCharsWritten=0x1242981c*=0x5b) returned 1 [0140.000] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/6CjUOLDApXa.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6cjuoldapxa.flv"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1285bb30, ftCreationTime.dwHighDateTime=0x1d4cdf6, ftLastAccessTime.dwLowDateTime=0x60e47890, ftLastAccessTime.dwHighDateTime=0x1d4ca2a, ftLastWriteTime.dwLowDateTime=0x60e47890, ftLastWriteTime.dwHighDateTime=0x1d4ca2a, nFileSizeHigh=0x0, nFileSizeLow=0x54df)) returned 1 [0140.000] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/6CjUOLDApXa.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\6cjuoldapxa.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.000] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.001] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.001] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0140.002] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c808f | out: pbBuffer=0x124c808f) returned 1 [0140.003] CloseHandle (hObject=0x168) returned 1 [0140.003] CloseHandle (hObject=0xc0) returned 1 [0140.003] CloseHandle (hObject=0x10c) returned 1 [0140.003] CloseHandle (hObject=0x18c) returned 1 [0140.003] CloseHandle (hObject=0x19c) returned 1 [0140.003] CloseHandle (hObject=0xe4) returned 1 [0140.003] CloseHandle (hObject=0x190) returned 1 [0140.003] CloseHandle (hObject=0x110) returned 1 [0140.003] CloseHandle (hObject=0x138) returned 1 [0140.003] CloseHandle (hObject=0x17c) returned 1 [0140.003] CloseHandle (hObject=0xdc) returned 1 [0140.003] CloseHandle (hObject=0x108) returned 1 [0140.003] CloseHandle (hObject=0xf0) returned 1 [0140.003] CloseHandle (hObject=0x104) returned 1 [0140.003] CloseHandle (hObject=0x154) returned 1 [0140.003] CloseHandle (hObject=0x180) returned 1 [0140.003] CloseHandle (hObject=0x118) returned 1 [0140.004] CloseHandle (hObject=0xc8) returned 1 [0140.004] CloseHandle (hObject=0xd0) returned 1 [0140.004] SwitchToThread () returned 1 [0140.004] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.009] SetEvent (hEvent=0x7c) returned 1 [0140.009] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.012] SetEvent (hEvent=0x7c) returned 1 [0140.012] SwitchToThread () returned 1 [0140.013] SetEvent (hEvent=0x7c) returned 1 [0140.013] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.017] SetEvent (hEvent=0xa8) returned 1 [0140.017] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.018] SetEvent (hEvent=0xa8) returned 1 [0140.018] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.021] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.021] SetEvent (hEvent=0xa8) returned 1 [0140.021] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x103fe, lpOverlapped=0x0) returned 1 [0140.022] GetFileType (hFile=0x16c) returned 0x1 [0140.022] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.023] WriteFile (in: hFile=0x16c, lpBuffer=0x1264e000*, nNumberOfBytesToWrite=0x103fe, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1264e000*, lpNumberOfBytesWritten=0x12429b48*=0x103fe, lpOverlapped=0x12429b54) returned 1 [0140.023] GetFileType (hFile=0x16c) returned 0x1 [0140.023] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x103fe, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.023] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0140.023] CloseHandle (hObject=0x16c) returned 1 [0140.023] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/DT-d76Tu9eXs.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dt-d76tu9exs.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.023] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.024] WriteFile (in: hFile=0x16c, lpBuffer=0x127de240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127de240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0140.024] CloseHandle (hObject=0x16c) returned 1 [0140.024] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264c000*, nNumberOfCharsToWrite=0x53, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x1264c000*, lpNumberOfCharsWritten=0x1242981c*=0x53) returned 1 [0140.024] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/ETFeWTM9b2pQVD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\etfewtm9b2pqvd.swf"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f6aaa0, ftCreationTime.dwHighDateTime=0x1d4c5fc, ftLastAccessTime.dwLowDateTime=0xab9e2a40, ftLastAccessTime.dwHighDateTime=0x1d4c744, ftLastWriteTime.dwLowDateTime=0xab9e2a40, ftLastWriteTime.dwHighDateTime=0x1d4c744, nFileSizeHigh=0x0, nFileSizeLow=0xdf21)) returned 1 [0140.024] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/ETFeWTM9b2pQVD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\etfewtm9b2pqvd.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.025] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.025] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.026] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0140.026] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0140.027] SwitchToThread () returned 1 [0140.027] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.030] SetEvent (hEvent=0x7c) returned 1 [0140.030] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.033] SetEvent (hEvent=0x7c) returned 1 [0140.033] SwitchToThread () returned 1 [0140.034] SetEvent (hEvent=0x7c) returned 1 [0140.034] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.036] SetEvent (hEvent=0xa8) returned 1 [0140.036] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.038] SetEvent (hEvent=0xa8) returned 1 [0140.038] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0140.084] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.084] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0140.135] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.135] SetEvent (hEvent=0xac) returned 1 [0140.135] SetEvent (hEvent=0xa8) returned 1 [0140.135] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x506, lpOverlapped=0x0) returned 1 [0140.136] GetFileType (hFile=0x16c) returned 0x1 [0140.136] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.136] WriteFile (in: hFile=0x16c, lpBuffer=0x124d2000*, nNumberOfBytesToWrite=0x506, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x124d2000*, lpNumberOfBytesWritten=0x12429b48*=0x506, lpOverlapped=0x12429b54) returned 1 [0140.137] GetFileType (hFile=0x16c) returned 0x1 [0140.137] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x506, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.137] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0140.137] CloseHandle (hObject=0x16c) returned 1 [0140.137] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/OnHqj.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\onhqj.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.137] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.189] WriteFile (in: hFile=0x16c, lpBuffer=0x127de6c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127de6c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0140.190] CloseHandle (hObject=0x16c) returned 1 [0140.190] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127e00a0*, nNumberOfCharsToWrite=0x4c, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x127e00a0*, lpNumberOfCharsWritten=0x1242981c*=0x4c) returned 1 [0140.253] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/PJDLlb.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\pjdllb.flv"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fa31c0, ftCreationTime.dwHighDateTime=0x1d4cd6c, ftLastAccessTime.dwLowDateTime=0x6bb70750, ftLastAccessTime.dwHighDateTime=0x1d4d47b, ftLastWriteTime.dwLowDateTime=0x6bb70750, ftLastWriteTime.dwHighDateTime=0x1d4d47b, nFileSizeHigh=0x0, nFileSizeLow=0x75e7)) returned 1 [0140.253] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/PJDLlb.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\pjdllb.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.253] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.255] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.256] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0140.256] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0140.258] SwitchToThread () returned 1 [0140.264] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.279] SetEvent (hEvent=0x7c) returned 1 [0140.279] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.283] SetEvent (hEvent=0x7c) returned 1 [0140.284] SwitchToThread () returned 1 [0140.284] SetEvent (hEvent=0x7c) returned 1 [0140.284] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.287] SetEvent (hEvent=0xa8) returned 1 [0140.287] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.289] SetEvent (hEvent=0xa8) returned 1 [0140.289] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0140.292] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.292] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.293] SetEvent (hEvent=0xac) returned 1 [0140.293] SetEvent (hEvent=0xa8) returned 1 [0140.293] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x1453a, lpOverlapped=0x0) returned 1 [0140.295] GetFileType (hFile=0x16c) returned 0x1 [0140.295] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.295] WriteFile (in: hFile=0x16c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x1453a, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429b48*=0x1453a, lpOverlapped=0x12429b54) returned 1 [0140.295] GetFileType (hFile=0x16c) returned 0x1 [0140.295] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x1453a, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.295] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0140.296] CloseHandle (hObject=0x16c) returned 1 [0140.296] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/_ cAnQB.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_ canqb.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.296] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.296] WriteFile (in: hFile=0x16c, lpBuffer=0x127de240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127de240*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0140.296] CloseHandle (hObject=0x16c) returned 1 [0140.297] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x127e0000*, nNumberOfCharsToWrite=0x4e, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x127e0000*, lpNumberOfCharsWritten=0x1242981c*=0x4e) returned 1 [0140.297] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/_nnCnNW6M6TkNy.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_nncnnw6m6tkny.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924d9c00, ftCreationTime.dwHighDateTime=0x1d4c9cf, ftLastAccessTime.dwLowDateTime=0x56840470, ftLastAccessTime.dwHighDateTime=0x1d4c90c, ftLastWriteTime.dwLowDateTime=0x56840470, ftLastWriteTime.dwHighDateTime=0x1d4c90c, nFileSizeHigh=0x0, nFileSizeLow=0xea34)) returned 1 [0140.297] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/_nnCnNW6M6TkNy.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_nncnnw6m6tkny.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.297] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.298] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.298] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0140.298] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0140.299] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c2036 | out: pbBuffer=0x124c2036) returned 1 [0140.300] SwitchToThread () returned 1 [0140.300] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.308] SetEvent (hEvent=0x7c) returned 1 [0140.308] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.317] SetEvent (hEvent=0x7c) returned 1 [0140.317] SwitchToThread () returned 1 [0140.325] SetEvent (hEvent=0x7c) returned 1 [0140.325] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.335] SetEvent (hEvent=0xa8) returned 1 [0140.336] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0140.337] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.337] SetEvent (hEvent=0xa8) returned 1 [0140.337] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0140.342] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.342] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.346] SetEvent (hEvent=0xac) returned 1 [0140.346] SetEvent (hEvent=0xa8) returned 1 [0140.346] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x17917, lpOverlapped=0x0) returned 1 [0140.348] GetFileType (hFile=0x16c) returned 0x1 [0140.348] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.349] WriteFile (in: hFile=0x16c, lpBuffer=0x1274e000*, nNumberOfBytesToWrite=0x17917, lpNumberOfBytesWritten=0x12429b48, lpOverlapped=0x12429b54 | out: lpBuffer=0x1274e000*, lpNumberOfBytesWritten=0x12429b48*=0x17917, lpOverlapped=0x12429b54) returned 1 [0140.349] GetFileType (hFile=0x16c) returned 0x1 [0140.349] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x17917, lpNewFilePointer=0x0, dwMoveMethod=0x12429b2c | out: lpNewFilePointer=0x0) returned 1 [0140.349] ReadFile (in: hFile=0x16c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429b64, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429b64*=0x0, lpOverlapped=0x0) returned 1 [0140.349] CloseHandle (hObject=0x16c) returned 1 [0140.349] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/z inyqAN7rqIx9IrQbQ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\z inyqan7rqix9irqbq.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.349] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429b54 | out: lpMode=0x12429b54) returned 0 [0140.350] WriteFile (in: hFile=0x16c, lpBuffer=0x127de6c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429b58, lpOverlapped=0x0 | out: lpBuffer=0x127de6c0*, lpNumberOfBytesWritten=0x12429b58*=0x108, lpOverlapped=0x0) returned 1 [0140.350] CloseHandle (hObject=0x16c) returned 1 [0140.350] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0x5a, lpNumberOfCharsWritten=0x1242981c, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x1242981c*=0x5a) returned 1 [0140.353] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.353] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.353] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.353] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.353] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0140.353] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.354] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0140.354] CloseHandle (hObject=0x16c) returned 1 [0140.355] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.355] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.355] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.355] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0140.360] WriteFile (in: hFile=0x16c, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0140.361] CloseHandle (hObject=0x16c) returned 1 [0140.361] GetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\@_read_to_recover_files_@.txt")) returned 0x20 [0140.361] SetFileAttributesW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0140.362] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.362] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2ae7cf0, ftCreationTime.dwHighDateTime=0x1d4d172, ftLastAccessTime.dwLowDateTime=0x50974c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x50974c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2ae7cf0, ftCreationTime.dwHighDateTime=0x1d4d172, ftLastAccessTime.dwLowDateTime=0x50974c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x50974c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dbb59d0, ftCreationTime.dwHighDateTime=0x1d4d071, ftLastAccessTime.dwLowDateTime=0xef2c0ed0, ftLastAccessTime.dwHighDateTime=0x1d4d30b, ftLastWriteTime.dwLowDateTime=0xef2c0ed0, ftLastWriteTime.dwHighDateTime=0x1d4d30b, nFileSizeHigh=0x0, nFileSizeLow=0x28b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B-yAG.mkv", cAlternateFileName="")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x50974c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x50974c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x50bd620, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60f4da40, ftCreationTime.dwHighDateTime=0x1d4c71f, ftLastAccessTime.dwLowDateTime=0x91c6e2e0, ftLastAccessTime.dwHighDateTime=0x1d4d2ae, ftLastWriteTime.dwLowDateTime=0x91c6e2e0, ftLastWriteTime.dwHighDateTime=0x1d4d2ae, nFileSizeHigh=0x0, nFileSizeLow=0x6a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="ag3hlJ.avi", cAlternateFileName="")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c59ae40, ftCreationTime.dwHighDateTime=0x1d4d10b, ftLastAccessTime.dwLowDateTime=0xdc05a030, ftLastAccessTime.dwHighDateTime=0x1d4ccff, ftLastWriteTime.dwLowDateTime=0xdc05a030, ftLastWriteTime.dwHighDateTime=0x1d4ccff, nFileSizeHigh=0x0, nFileSizeLow=0x1374f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aK8rBrJLO.swf", cAlternateFileName="AK8RBR~1.SWF")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc6d6160, ftCreationTime.dwHighDateTime=0x1d4d0b7, ftLastAccessTime.dwLowDateTime=0x15f477c0, ftLastAccessTime.dwHighDateTime=0x1d4c8f6, ftLastWriteTime.dwLowDateTime=0x15f477c0, ftLastWriteTime.dwHighDateTime=0x1d4c8f6, nFileSizeHigh=0x0, nFileSizeLow=0x183a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ayvjHTRQ7B-Qu1.mp4", cAlternateFileName="AYVJHT~1.MP4")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb48b1a50, ftCreationTime.dwHighDateTime=0x1d4d03b, ftLastAccessTime.dwLowDateTime=0xca13b9f0, ftLastAccessTime.dwHighDateTime=0x1d4c6f3, ftLastWriteTime.dwLowDateTime=0xca13b9f0, ftLastWriteTime.dwHighDateTime=0x1d4c6f3, nFileSizeHigh=0x0, nFileSizeLow=0x54a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BDOR7o.swf", cAlternateFileName="")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e7010, ftCreationTime.dwHighDateTime=0x1d4cccf, ftLastAccessTime.dwLowDateTime=0x9696acb0, ftLastAccessTime.dwHighDateTime=0x1d4cb56, ftLastWriteTime.dwLowDateTime=0x9696acb0, ftLastWriteTime.dwHighDateTime=0x1d4cb56, nFileSizeHigh=0x0, nFileSizeLow=0x1240d, dwReserved0=0x0, dwReserved1=0x0, cFileName="C9Oa2S.avi", cAlternateFileName="")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60c182c0, ftCreationTime.dwHighDateTime=0x1d4ce05, ftLastAccessTime.dwLowDateTime=0x70ef9d70, ftLastAccessTime.dwHighDateTime=0x1d4d036, ftLastWriteTime.dwLowDateTime=0x70ef9d70, ftLastWriteTime.dwHighDateTime=0x1d4d036, nFileSizeHigh=0x0, nFileSizeLow=0x4dad, dwReserved0=0x0, dwReserved1=0x0, cFileName="DI V0p.mp4", cAlternateFileName="DIV0P~1.MP4")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b490fa0, ftCreationTime.dwHighDateTime=0x1d4c770, ftLastAccessTime.dwLowDateTime=0xa17b72f0, ftLastAccessTime.dwHighDateTime=0x1d4d1cd, ftLastWriteTime.dwLowDateTime=0xa17b72f0, ftLastWriteTime.dwHighDateTime=0x1d4d1cd, nFileSizeHigh=0x0, nFileSizeLow=0xcd20, dwReserved0=0x0, dwReserved1=0x0, cFileName="d_ZyRMwpSBe4XnxJ2I.mp4", cAlternateFileName="D_ZYRM~1.MP4")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9faf3e90, ftCreationTime.dwHighDateTime=0x1d4d045, ftLastAccessTime.dwLowDateTime=0x6c529d00, ftLastAccessTime.dwHighDateTime=0x1d4c9a4, ftLastWriteTime.dwLowDateTime=0x6c529d00, ftLastWriteTime.dwHighDateTime=0x1d4c9a4, nFileSizeHigh=0x0, nFileSizeLow=0xfcab, dwReserved0=0x0, dwReserved1=0x0, cFileName="eyVqagYKT64lOZ.swf", cAlternateFileName="EYVQAG~1.SWF")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d2f72a0, ftCreationTime.dwHighDateTime=0x1d4cba5, ftLastAccessTime.dwLowDateTime=0x956fab00, ftLastAccessTime.dwHighDateTime=0x1d4c586, ftLastWriteTime.dwLowDateTime=0x956fab00, ftLastWriteTime.dwHighDateTime=0x1d4c586, nFileSizeHigh=0x0, nFileSizeLow=0x15378, dwReserved0=0x0, dwReserved1=0x0, cFileName="f8DnfscpyoEN1mpQ94D.avi", cAlternateFileName="F8DNFS~1.AVI")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e6a02a0, ftCreationTime.dwHighDateTime=0x1d4ccc3, ftLastAccessTime.dwLowDateTime=0xae626230, ftLastAccessTime.dwHighDateTime=0x1d4d45c, ftLastWriteTime.dwLowDateTime=0xae626230, ftLastWriteTime.dwHighDateTime=0x1d4d45c, nFileSizeHigh=0x0, nFileSizeLow=0x8490, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q1T6.swf", cAlternateFileName="")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc95a8b40, ftCreationTime.dwHighDateTime=0x1d4d519, ftLastAccessTime.dwLowDateTime=0xfdd9d7b0, ftLastAccessTime.dwHighDateTime=0x1d4ca9f, ftLastWriteTime.dwLowDateTime=0xfdd9d7b0, ftLastWriteTime.dwHighDateTime=0x1d4ca9f, nFileSizeHigh=0x0, nFileSizeLow=0x147d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="qq5U.mkv", cAlternateFileName="")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c718410, ftCreationTime.dwHighDateTime=0x1d4d4aa, ftLastAccessTime.dwLowDateTime=0x3098b730, ftLastAccessTime.dwHighDateTime=0x1d4ca31, ftLastWriteTime.dwLowDateTime=0x3098b730, ftLastWriteTime.dwHighDateTime=0x1d4ca31, nFileSizeHigh=0x0, nFileSizeLow=0xdc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="T13I_.mkv", cAlternateFileName="")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06be9b0, ftCreationTime.dwHighDateTime=0x1d4cf32, ftLastAccessTime.dwLowDateTime=0x81056bd0, ftLastAccessTime.dwHighDateTime=0x1d4d4f1, ftLastWriteTime.dwLowDateTime=0x81056bd0, ftLastWriteTime.dwHighDateTime=0x1d4d4f1, nFileSizeHigh=0x0, nFileSizeLow=0x134f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="uO0tkKL5G0GoIA31CoY2.swf", cAlternateFileName="UO0TKK~1.SWF")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142b92f0, ftCreationTime.dwHighDateTime=0x1d4ca88, ftLastAccessTime.dwLowDateTime=0x751c5fe0, ftLastAccessTime.dwHighDateTime=0x1d4cec5, ftLastWriteTime.dwLowDateTime=0x751c5fe0, ftLastWriteTime.dwHighDateTime=0x1d4cec5, nFileSizeHigh=0x0, nFileSizeLow=0x59bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2BJb.mp4", cAlternateFileName="")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27f64be0, ftCreationTime.dwHighDateTime=0x1d4d389, ftLastAccessTime.dwLowDateTime=0x52f3fd10, ftLastAccessTime.dwHighDateTime=0x1d4c6e1, ftLastWriteTime.dwLowDateTime=0x52f3fd10, ftLastWriteTime.dwHighDateTime=0x1d4c6e1, nFileSizeHigh=0x0, nFileSizeLow=0xb3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VK_iXNbuWHUlI5Q.mp4", cAlternateFileName="VK_IXN~1.MP4")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc22b47a0, ftCreationTime.dwHighDateTime=0x1d4ce0d, ftLastAccessTime.dwLowDateTime=0x2f6da0c0, ftLastAccessTime.dwHighDateTime=0x1d4c728, ftLastWriteTime.dwLowDateTime=0x2f6da0c0, ftLastWriteTime.dwHighDateTime=0x1d4c728, nFileSizeHigh=0x0, nFileSizeLow=0x813b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WL_O-XAPNOYr01t0TN.mp4", cAlternateFileName="WL_O-X~1.MP4")) returned 1 [0140.362] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.362] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0140.362] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/7B-yAG.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\7b-yag.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0140.363] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.364] ReadFile (in: hFile=0x16c, lpBuffer=0x127fa000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa000*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.365] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0140.365] FindFirstFileW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.365] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/BDOR7o.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\bdor7o.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0140.365] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.370] ReadFile (in: hFile=0xd0, lpBuffer=0x127fa100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.370] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/C9Oa2S.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\c9oa2s.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0140.371] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.371] ReadFile (in: hFile=0xc8, lpBuffer=0x127fa300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.371] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/DI V0p.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\di v0p.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0140.372] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.372] ReadFile (in: hFile=0x118, lpBuffer=0x127fa400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.373] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/Q1T6.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\q1t6.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0140.373] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.373] ReadFile (in: hFile=0x180, lpBuffer=0x127fa600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.374] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/T13I_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\t13i_.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0140.374] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.374] ReadFile (in: hFile=0x154, lpBuffer=0x127fa700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa700*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.375] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/VK_iXNbuWHUlI5Q.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\vk_ixnbuwhuli5q.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0140.375] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.375] ReadFile (in: hFile=0x104, lpBuffer=0x127fa800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa800*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.376] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/WL_O-XAPNOYr01t0TN.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\wl_o-xapnoyr01t0tn.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0140.376] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.376] ReadFile (in: hFile=0xf0, lpBuffer=0x127fa900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fa900*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.377] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/aK8rBrJLO.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\ak8rbrjlo.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0140.377] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.377] ReadFile (in: hFile=0x108, lpBuffer=0x127faa00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127faa00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.378] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/ag3hlJ.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\ag3hlj.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0140.378] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.379] ReadFile (in: hFile=0xdc, lpBuffer=0x127fab00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fab00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.379] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/ayvjHTRQ7B-Qu1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\ayvjhtrq7b-qu1.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0140.379] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.380] ReadFile (in: hFile=0x17c, lpBuffer=0x127fac00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fac00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.380] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/d_ZyRMwpSBe4XnxJ2I.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\d_zyrmwpsbe4xnxj2i.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0140.380] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.381] ReadFile (in: hFile=0x138, lpBuffer=0x127fad00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fad00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.381] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/eyVqagYKT64lOZ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\eyvqagykt64loz.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110 [0140.382] GetConsoleMode (in: hConsoleHandle=0x110, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.382] ReadFile (in: hFile=0x110, lpBuffer=0x127fae00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fae00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.383] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/f8DnfscpyoEN1mpQ94D.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\f8dnfscpyoen1mpq94d.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0140.383] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.383] ReadFile (in: hFile=0x190, lpBuffer=0x127faf00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127faf00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.384] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/qq5U.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\qq5u.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe4 [0140.384] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.384] ReadFile (in: hFile=0xe4, lpBuffer=0x127fb100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fb100*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.385] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/uO0tkKL5G0GoIA31CoY2.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\uo0tkkl5g0goia31coy2.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0140.385] GetConsoleMode (in: hConsoleHandle=0x19c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.385] ReadFile (in: hFile=0x19c, lpBuffer=0x127fb200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fb200*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.386] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/v2BJb.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\v2bjb.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c [0140.386] GetConsoleMode (in: hConsoleHandle=0x18c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0140.387] ReadFile (in: hFile=0x18c, lpBuffer=0x127fb300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x127fb300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0140.387] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/7B-yAG.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\7b-yag.mkv"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dbb59d0, ftCreationTime.dwHighDateTime=0x1d4d071, ftLastAccessTime.dwLowDateTime=0xef2c0ed0, ftLastAccessTime.dwHighDateTime=0x1d4d30b, ftLastWriteTime.dwLowDateTime=0xef2c0ed0, ftLastWriteTime.dwHighDateTime=0x1d4d30b, nFileSizeHigh=0x0, nFileSizeLow=0x28b1)) returned 1 [0140.387] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/BDOR7o.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\bdor7o.swf"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb48b1a50, ftCreationTime.dwHighDateTime=0x1d4d03b, ftLastAccessTime.dwLowDateTime=0xca13b9f0, ftLastAccessTime.dwHighDateTime=0x1d4c6f3, ftLastWriteTime.dwLowDateTime=0xca13b9f0, ftLastWriteTime.dwHighDateTime=0x1d4c6f3, nFileSizeHigh=0x0, nFileSizeLow=0x54a4)) returned 1 [0140.388] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/BDOR7o.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\bdor7o.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.388] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.388] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442340 | out: pbBuffer=0x12442340) returned 1 [0140.389] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446240 | out: pbBuffer=0x12446240) returned 1 [0140.389] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x127fb402 | out: pbBuffer=0x127fb402) returned 1 [0140.390] SetEvent (hEvent=0x7c) returned 1 [0140.390] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x54a4, lpOverlapped=0x0) returned 1 [0140.391] GetFileType (hFile=0x10c) returned 0x1 [0140.391] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.391] WriteFile (in: hFile=0x10c, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x54a4, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x12429aa0*=0x54a4, lpOverlapped=0x12429aac) returned 1 [0140.391] GetFileType (hFile=0x10c) returned 0x1 [0140.391] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x54a4, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.391] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0140.391] CloseHandle (hObject=0x10c) returned 1 [0140.392] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/BDOR7o.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\bdor7o.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.392] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.392] WriteFile (in: hFile=0x10c, lpBuffer=0x127defc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127defc0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0140.392] CloseHandle (hObject=0x10c) returned 1 [0140.392] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c00c0*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c00c0*, lpNumberOfCharsWritten=0x12429774*=0x5f) returned 1 [0140.393] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/C9Oa2S.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\c9oa2s.avi"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e7010, ftCreationTime.dwHighDateTime=0x1d4cccf, ftLastAccessTime.dwLowDateTime=0x9696acb0, ftLastAccessTime.dwHighDateTime=0x1d4cb56, ftLastWriteTime.dwLowDateTime=0x9696acb0, ftLastWriteTime.dwHighDateTime=0x1d4cb56, nFileSizeHigh=0x0, nFileSizeLow=0x1240d)) returned 1 [0140.393] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/C9Oa2S.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\c9oa2s.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.393] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.393] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.394] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0140.394] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0140.394] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc0a2 | out: pbBuffer=0x124bc0a2) returned 1 [0140.396] CloseHandle (hObject=0x18c) returned 1 [0140.396] CloseHandle (hObject=0x19c) returned 1 [0140.396] CloseHandle (hObject=0xe4) returned 1 [0140.396] CloseHandle (hObject=0x190) returned 1 [0140.396] CloseHandle (hObject=0x110) returned 1 [0140.396] CloseHandle (hObject=0x138) returned 1 [0140.396] CloseHandle (hObject=0x17c) returned 1 [0140.396] CloseHandle (hObject=0xdc) returned 1 [0140.396] CloseHandle (hObject=0x108) returned 1 [0140.396] CloseHandle (hObject=0xf0) returned 1 [0140.396] CloseHandle (hObject=0x104) returned 1 [0140.396] CloseHandle (hObject=0x154) returned 1 [0140.396] CloseHandle (hObject=0x180) returned 1 [0140.396] CloseHandle (hObject=0x118) returned 1 [0140.396] CloseHandle (hObject=0xc8) returned 1 [0140.396] CloseHandle (hObject=0xd0) returned 1 [0140.396] CloseHandle (hObject=0x16c) returned 1 [0140.396] SwitchToThread () returned 1 [0140.397] SetEvent (hEvent=0x7c) returned 1 [0140.397] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.399] SetEvent (hEvent=0xa8) returned 1 [0140.399] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.400] SetEvent (hEvent=0xa8) returned 1 [0140.400] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.403] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.403] SetEvent (hEvent=0xa8) returned 1 [0140.403] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x4dad, lpOverlapped=0x0) returned 1 [0140.403] GetFileType (hFile=0x10c) returned 0x1 [0140.403] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.403] WriteFile (in: hFile=0x10c, lpBuffer=0x1257c000*, nNumberOfBytesToWrite=0x4dad, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1257c000*, lpNumberOfBytesWritten=0x12429aa0*=0x4dad, lpOverlapped=0x12429aac) returned 1 [0140.404] GetFileType (hFile=0x10c) returned 0x1 [0140.404] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x4dad, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.404] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0140.404] CloseHandle (hObject=0x10c) returned 1 [0140.404] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/DI V0p.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\di v0p.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.404] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.404] WriteFile (in: hFile=0x10c, lpBuffer=0x127c86c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c86c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0140.404] CloseHandle (hObject=0x10c) returned 1 [0140.405] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c00c0*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c00c0*, lpNumberOfCharsWritten=0x12429774*=0x5f) returned 1 [0140.405] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/Q1T6.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\q1t6.swf"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e6a02a0, ftCreationTime.dwHighDateTime=0x1d4ccc3, ftLastAccessTime.dwLowDateTime=0xae626230, ftLastAccessTime.dwHighDateTime=0x1d4d45c, ftLastWriteTime.dwLowDateTime=0xae626230, ftLastWriteTime.dwHighDateTime=0x1d4d45c, nFileSizeHigh=0x0, nFileSizeLow=0x8490)) returned 1 [0140.405] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/Q1T6.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\q1t6.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.405] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.405] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.406] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0140.406] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124bc002 | out: pbBuffer=0x124bc002) returned 1 [0140.406] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124bc098 | out: pbBuffer=0x124bc098) returned 1 [0140.407] SwitchToThread () returned 1 [0140.407] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.409] SetEvent (hEvent=0x7c) returned 1 [0140.409] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.412] SetEvent (hEvent=0x7c) returned 1 [0140.412] SwitchToThread () returned 1 [0140.412] SetEvent (hEvent=0x7c) returned 1 [0140.412] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.413] SetEvent (hEvent=0xa8) returned 1 [0140.413] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.414] SetEvent (hEvent=0xa8) returned 1 [0140.414] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.416] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.417] SetEvent (hEvent=0xa8) returned 1 [0140.417] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x813b, lpOverlapped=0x0) returned 1 [0140.417] GetFileType (hFile=0x10c) returned 0x1 [0140.417] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.417] WriteFile (in: hFile=0x10c, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x813b, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429aa0*=0x813b, lpOverlapped=0x12429aac) returned 1 [0140.417] GetFileType (hFile=0x10c) returned 0x1 [0140.418] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x813b, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.418] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0140.418] CloseHandle (hObject=0x10c) returned 1 [0140.418] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/WL_O-XAPNOYr01t0TN.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\wl_o-xapnoyr01t0tn.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.418] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.418] WriteFile (in: hFile=0x10c, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0140.418] CloseHandle (hObject=0x10c) returned 1 [0140.418] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x6b, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x12429774*=0x6b) returned 1 [0140.419] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/aK8rBrJLO.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\ak8rbrjlo.swf"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c59ae40, ftCreationTime.dwHighDateTime=0x1d4d10b, ftLastAccessTime.dwLowDateTime=0xdc05a030, ftLastAccessTime.dwHighDateTime=0x1d4ccff, ftLastWriteTime.dwLowDateTime=0xdc05a030, ftLastWriteTime.dwHighDateTime=0x1d4ccff, nFileSizeHigh=0x0, nFileSizeLow=0x1374f)) returned 1 [0140.419] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/aK8rBrJLO.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\ak8rbrjlo.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.419] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.419] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.420] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0140.420] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0140.421] SwitchToThread () returned 1 [0140.421] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.424] SetEvent (hEvent=0x7c) returned 1 [0140.424] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.426] SetEvent (hEvent=0x7c) returned 1 [0140.426] SwitchToThread () returned 1 [0140.426] SetEvent (hEvent=0x7c) returned 1 [0140.426] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.427] SetEvent (hEvent=0xa8) returned 1 [0140.428] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.428] SetEvent (hEvent=0xa8) returned 1 [0140.428] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0140.430] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.430] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0140.431] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.431] SetEvent (hEvent=0xac) returned 1 [0140.431] SetEvent (hEvent=0xa8) returned 1 [0140.431] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x183a2, lpOverlapped=0x0) returned 1 [0140.432] GetFileType (hFile=0x10c) returned 0x1 [0140.432] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.433] WriteFile (in: hFile=0x10c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x183a2, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x183a2, lpOverlapped=0x12429aac) returned 1 [0140.433] GetFileType (hFile=0x10c) returned 0x1 [0140.433] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x183a2, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.433] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0140.433] CloseHandle (hObject=0x10c) returned 1 [0140.433] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/ayvjHTRQ7B-Qu1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\ayvjhtrq7b-qu1.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.433] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.434] WriteFile (in: hFile=0x10c, lpBuffer=0x127c86c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c86c0*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0140.434] CloseHandle (hObject=0x10c) returned 1 [0140.434] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c0000*, nNumberOfCharsToWrite=0x67, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c0000*, lpNumberOfCharsWritten=0x12429774*=0x67) returned 1 [0140.434] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/d_ZyRMwpSBe4XnxJ2I.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\d_zyrmwpsbe4xnxj2i.mp4"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b490fa0, ftCreationTime.dwHighDateTime=0x1d4c770, ftLastAccessTime.dwLowDateTime=0xa17b72f0, ftLastAccessTime.dwHighDateTime=0x1d4d1cd, ftLastWriteTime.dwLowDateTime=0xa17b72f0, ftLastWriteTime.dwHighDateTime=0x1d4d1cd, nFileSizeHigh=0x0, nFileSizeLow=0xcd20)) returned 1 [0140.434] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/d_ZyRMwpSBe4XnxJ2I.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\d_zyrmwpsbe4xnxj2i.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.434] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.435] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.435] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c2002 | out: pbBuffer=0x124c2002) returned 1 [0140.435] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c204c | out: pbBuffer=0x124c204c) returned 1 [0140.436] SwitchToThread () returned 1 [0140.436] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.439] SetEvent (hEvent=0x7c) returned 1 [0140.439] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.441] SetEvent (hEvent=0x7c) returned 1 [0140.441] SwitchToThread () returned 1 [0140.441] SetEvent (hEvent=0x7c) returned 1 [0140.442] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.443] SetEvent (hEvent=0xa8) returned 1 [0140.443] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.444] SetEvent (hEvent=0xa8) returned 1 [0140.444] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.446] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.447] SetEvent (hEvent=0xa8) returned 1 [0140.447] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x15378, lpOverlapped=0x0) returned 1 [0140.448] GetFileType (hFile=0x10c) returned 0x1 [0140.448] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.448] WriteFile (in: hFile=0x10c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x15378, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12429aa0*=0x15378, lpOverlapped=0x12429aac) returned 1 [0140.448] GetFileType (hFile=0x10c) returned 0x1 [0140.448] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x15378, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0140.448] ReadFile (in: hFile=0x10c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0140.449] CloseHandle (hObject=0x10c) returned 1 [0140.449] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/f8DnfscpyoEN1mpQ94D.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\f8dnfscpyoen1mpq94d.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.449] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.449] WriteFile (in: hFile=0x10c, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0140.449] CloseHandle (hObject=0x10c) returned 1 [0140.449] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x6c, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x12429774*=0x6c) returned 1 [0140.450] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/qq5U.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\qq5u.mkv"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc95a8b40, ftCreationTime.dwHighDateTime=0x1d4d519, ftLastAccessTime.dwLowDateTime=0xfdd9d7b0, ftLastAccessTime.dwHighDateTime=0x1d4ca9f, ftLastWriteTime.dwLowDateTime=0xfdd9d7b0, ftLastWriteTime.dwHighDateTime=0x1d4ca9f, nFileSizeHigh=0x0, nFileSizeLow=0x147d4)) returned 1 [0140.450] GetFileAttributesExW (in: lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/uO0tkKL5G0GoIA31CoY2.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\uo0tkkl5g0goia31coy2.swf"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06be9b0, ftCreationTime.dwHighDateTime=0x1d4cf32, ftLastAccessTime.dwLowDateTime=0x81056bd0, ftLastAccessTime.dwHighDateTime=0x1d4d4f1, ftLastWriteTime.dwLowDateTime=0x81056bd0, ftLastWriteTime.dwHighDateTime=0x1d4d4f1, nFileSizeHigh=0x0, nFileSizeLow=0x134f9)) returned 1 [0140.450] CreateFileW (lpFileName="C:/Users/5p5NrGJn0jS HALPmcxz/Videos/IyDTGTQoU103_nycy/uO0tkKL5G0GoIA31CoY2.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\iydtgtqou103_nycy\\uo0tkkl5g0goia31coy2.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0140.450] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0140.450] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0140.451] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124c8002 | out: pbBuffer=0x124c8002) returned 1 [0140.451] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124c80d9 | out: pbBuffer=0x124c80d9) returned 1 [0140.452] SwitchToThread () returned 1 [0140.452] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.458] SetEvent (hEvent=0x7c) returned 1 [0140.458] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.461] SetEvent (hEvent=0x7c) returned 1 [0140.461] SwitchToThread () returned 1 [0140.461] SetEvent (hEvent=0x7c) returned 1 [0140.461] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.462] SetEvent (hEvent=0xa8) returned 1 [0140.462] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.464] SetEvent (hEvent=0xa8) returned 1 [0140.464] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0140.466] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.466] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.800] SetEvent (hEvent=0xa8) returned 1 [0140.800] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.856] SetEvent (hEvent=0xa8) returned 1 [0140.856] SwitchToThread () returned 1 [0140.857] SetEvent (hEvent=0xa8) returned 1 [0140.857] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0140.922] SetEvent (hEvent=0x7c) returned 1 [0140.922] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.932] SetEvent (hEvent=0x7c) returned 1 [0140.932] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.934] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0140.935] SetEvent (hEvent=0x7c) returned 1 [0140.935] ReadFile (in: hFile=0x124, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x400000, lpOverlapped=0x0) returned 1 [0141.026] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0141.037] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0141.112] SetEvent (hEvent=0xa0) returned 1 [0141.112] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0141.158] SetEvent (hEvent=0xa0) returned 1 [0141.158] SwitchToThread () returned 1 [0141.162] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0141.490] SetEvent (hEvent=0xa0) returned 1 [0141.491] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0141.508] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0141.509] SetEvent (hEvent=0xa0) returned 1 [0141.509] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0141.513] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0141.513] SetEvent (hEvent=0xa0) returned 1 [0141.541] GetFileType (hFile=0x1b0) returned 0x1 [0141.541] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0141.541] WriteFile (in: hFile=0x1b0, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x469bd5, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429aa0*=0x469bd5, lpOverlapped=0x12429aac) returned 1 [0141.606] GetFileType (hFile=0x1b0) returned 0x1 [0141.606] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x469bd5, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0141.606] ReadFile (in: hFile=0x1b0, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0141.606] CloseHandle (hObject=0x1b0) returned 1 [0141.606] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0141.607] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0141.607] WriteFile (in: hFile=0x1b0, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0141.607] CloseHandle (hObject=0x1b0) returned 1 [0141.607] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x66, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x12429774*=0x66) returned 1 [0141.608] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.608] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.608] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.608] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.608] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.608] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0141.609] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0141.609] CloseHandle (hObject=0x1b0) returned 1 [0141.609] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.609] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.609] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0141.610] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0141.610] WriteFile (in: hFile=0x1b0, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0141.611] CloseHandle (hObject=0x1b0) returned 1 [0141.612] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.612] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.612] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.612] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5c5b810, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5c5b810, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.612] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5c5b810, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5c5b810, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.612] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5c5b810, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5c5b810, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5c60630, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.612] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1 [0141.612] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.612] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.612] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.612] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.613] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache/cache.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0141.614] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0141.614] ReadFile (in: hFile=0x1b0, lpBuffer=0x1249a500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1249a500*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0141.617] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache/cache.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270)) returned 1 [0141.618] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache/cache.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0141.618] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0141.618] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442220 | out: pbBuffer=0x12442220) returned 1 [0141.619] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e2100 | out: pbBuffer=0x124e2100) returned 1 [0141.619] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1249a602 | out: pbBuffer=0x1249a602) returned 1 [0141.619] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1249a6cc | out: pbBuffer=0x1249a6cc) returned 1 [0141.620] SetEvent (hEvent=0x7c) returned 1 [0141.620] ReadFile (in: hFile=0xbc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x40270, lpOverlapped=0x0) returned 1 [0141.626] GetFileType (hFile=0xbc) returned 0x1 [0141.626] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0141.626] WriteFile (in: hFile=0xbc, lpBuffer=0x125b6000*, nNumberOfBytesToWrite=0x40270, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x125b6000*, lpNumberOfBytesWritten=0x124299f8*=0x40270, lpOverlapped=0x12429a04) returned 1 [0141.627] GetFileType (hFile=0xbc) returned 0x1 [0141.627] SetFilePointerEx (in: hFile=0xbc, liDistanceToMove=0x40270, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0141.627] ReadFile (in: hFile=0xbc, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0141.627] CloseHandle (hObject=0xbc) returned 1 [0141.627] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache/cache.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0141.627] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0141.627] WriteFile (in: hFile=0xbc, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0141.627] CloseHandle (hObject=0xbc) returned 1 [0141.627] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124bc000*, nNumberOfCharsToWrite=0x6b, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124bc000*, lpNumberOfCharsWritten=0x124296cc*=0x6b) returned 1 [0141.628] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.628] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.628] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.628] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.628] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.628] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/OfficeSoftwareProtectionPlatform/Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0141.628] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.628] CloseHandle (hObject=0xbc) returned 1 [0141.629] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.629] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.629] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0141.631] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0141.631] WriteFile (in: hFile=0xbc, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0141.632] CloseHandle (hObject=0xbc) returned 1 [0141.632] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.632] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.632] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC" (normalized: "c:\\users\\all users\\microsoft\\rac"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.632] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5c8c550, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5c8c550, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.632] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5c8c550, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5c8c550, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.632] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5c87730, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5c87730, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5c8ec60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.632] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1 [0141.632] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xbd72faa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbd72faa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1 [0141.632] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xbd72faa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbd72faa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1 [0141.633] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xbd8142e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbd8142e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0141.633] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.633] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.633] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.633] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.633] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.633] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.633] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.633] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.633] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xbd72faa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbd72faa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.633] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.633] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.634] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/StateData\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xbd72faa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbd72faa0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.634] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.634] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Temp" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.634] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/Temp\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xbd8142e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbd8142e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.634] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.634] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.634] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.634] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.634] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.634] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.634] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0141.634] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0141.635] CloseHandle (hObject=0xbc) returned 1 [0141.635] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.635] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.635] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0141.635] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0141.635] WriteFile (in: hFile=0xbc, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0141.636] CloseHandle (hObject=0xbc) returned 1 [0141.637] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.637] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.637] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.637] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5c988a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5c988a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.637] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5c988a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5c988a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.637] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5c96190, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5c96190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5c9afb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.637] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.637] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.637] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.637] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.637] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.637] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.638] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.638] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.638] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.638] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Outbound/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0141.638] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.638] CloseHandle (hObject=0xbc) returned 1 [0141.638] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.638] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.638] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0141.639] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0141.640] WriteFile (in: hFile=0xbc, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0141.641] CloseHandle (hObject=0xbc) returned 1 [0141.641] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.641] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.641] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.641] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5ca24e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ca24e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.641] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5ca24e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ca24e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.641] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5ca24e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5ca24e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ca4bf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.641] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbd72faa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xe2174a00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1 [0141.641] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.641] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.641] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.641] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.641] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData/RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0141.642] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0141.642] ReadFile (in: hFile=0xbc, lpBuffer=0x1249a900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1249a900*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0141.642] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData/RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xbd72faa0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xe2174a00, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0141.642] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData/RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0141.642] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0141.642] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x124425e0 | out: pbBuffer=0x124425e0) returned 1 [0141.643] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124e22a4 | out: pbBuffer=0x124e22a4) returned 1 [0141.643] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1249aa02 | out: pbBuffer=0x1249aa02) returned 1 [0141.644] SetEvent (hEvent=0xa0) returned 1 [0141.644] ReadFile (in: hFile=0x1b0, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x25000, lpOverlapped=0x0) returned 1 [0141.646] GetFileType (hFile=0x1b0) returned 0x1 [0141.646] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0141.647] WriteFile (in: hFile=0x1b0, lpBuffer=0x12780000*, nNumberOfBytesToWrite=0x25000, lpNumberOfBytesWritten=0x124299f8, lpOverlapped=0x12429a04 | out: lpBuffer=0x12780000*, lpNumberOfBytesWritten=0x124299f8*=0x25000, lpOverlapped=0x12429a04) returned 1 [0141.647] GetFileType (hFile=0x1b0) returned 0x1 [0141.647] SetFilePointerEx (in: hFile=0x1b0, liDistanceToMove=0x25000, lpNewFilePointer=0x0, dwMoveMethod=0x124299dc | out: lpNewFilePointer=0x0) returned 1 [0141.647] ReadFile (in: hFile=0x1b0, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429a14, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x12429a14*=0x0, lpOverlapped=0x0) returned 1 [0141.647] CloseHandle (hObject=0x1b0) returned 1 [0141.647] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData/RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0141.647] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429a04 | out: lpMode=0x12429a04) returned 0 [0141.648] WriteFile (in: hFile=0x1b0, lpBuffer=0x12467440*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429a08, lpOverlapped=0x0 | out: lpBuffer=0x12467440*, lpNumberOfBytesWritten=0x12429a08*=0x108, lpOverlapped=0x0) returned 1 [0141.648] CloseHandle (hObject=0x1b0) returned 1 [0141.648] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b8600*, nNumberOfCharsToWrite=0x5f, lpNumberOfCharsWritten=0x124296cc, lpReserved=0x0 | out: lpBuffer=0x124b8600*, lpNumberOfCharsWritten=0x124296cc*=0x5f) returned 1 [0141.649] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.649] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.649] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.649] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.649] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.649] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/PublishedData/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0141.649] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.650] CloseHandle (hObject=0x1b0) returned 1 [0141.650] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.650] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/StateData\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.650] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0141.650] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0141.651] WriteFile (in: hFile=0x1b0, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0141.652] CloseHandle (hObject=0x1b0) returned 1 [0141.652] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.652] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.652] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.652] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/StateData\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5cbd290, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5cbd290, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.652] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5cbd290, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5cbd290, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.652] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5cbd290, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5cbd290, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5cbf9a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.652] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb35800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xecb35800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xbddb7d60, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1 [0141.652] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1 [0141.652] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.652] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.652] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.653] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.653] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.653] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacDatabase.sdf\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.653] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacMetaData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.653] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacMetaData.dat\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.653] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.653] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.653] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.653] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.653] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.654] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0141.654] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.654] CloseHandle (hObject=0x1b0) returned 1 [0141.654] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacDatabase.sdf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.654] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacDatabase.sdf\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.654] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacDatabase.sdf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.654] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacDatabase.sdf\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.654] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacDatabase.sdf\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.654] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0141.655] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.655] CloseHandle (hObject=0x1b0) returned 1 [0141.655] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacMetaData.dat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.655] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacMetaData.dat\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.655] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacMetaData.dat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.655] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacMetaData.dat\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.655] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacMetaData.dat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.655] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacMetaData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.655] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/StateData/RacMetaData.dat\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.655] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Temp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.656] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/Temp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.656] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Temp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0141.656] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0141.656] WriteFile (in: hFile=0x1b0, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0141.657] CloseHandle (hObject=0x1b0) returned 1 [0141.657] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/Temp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.658] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/Temp\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.658] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Temp" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.658] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/Temp\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5cc95e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5cc95e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.658] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5cc95e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5cc95e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.658] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5cc95e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5cc95e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5cce400, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.658] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd7ee180, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xbd7ee180, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbd7ee180, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql31C9.tmp", cAlternateFileName="")) returned 1 [0141.658] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd8142e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xbd8142e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbd8142e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql31D9.tmp", cAlternateFileName="")) returned 1 [0141.658] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.658] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.658] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Temp/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.658] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/Temp/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.658] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Temp/sql31C9.tmp" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\sql31c9.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0141.659] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0141.659] ReadFile (in: hFile=0x1b0, lpBuffer=0x1249a300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1249a300*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0141.659] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Temp/sql31D9.tmp" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\sql31d9.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0141.732] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0141.732] ReadFile (in: hFile=0xbc, lpBuffer=0x1249a400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x1249a400*, lpNumberOfBytesRead=0x12429b30*=0x100, lpOverlapped=0x0) returned 1 [0141.732] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/Temp/sql31C9.tmp" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\sql31c9.tmp"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd7ee180, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xbd7ee180, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbd7ee180, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0141.733] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/Temp/sql31D9.tmp" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\sql31d9.tmp"), fInfoLevelId=0x0, lpFileInformation=0x12429908 | out: lpFileInformation=0x12429908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd8142e0, ftCreationTime.dwHighDateTime=0x1d5793e, ftLastAccessTime.dwLowDateTime=0xbd8142e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xbd8142e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0141.733] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.733] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.733] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.733] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/RAC/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.733] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/RAC/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.733] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/RAC/Temp/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.733] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.733] CloseHandle (hObject=0xe8) returned 1 [0141.734] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.734] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.734] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.734] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0141.734] WriteFile (in: hFile=0xe8, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0141.736] CloseHandle (hObject=0xe8) returned 1 [0141.736] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Search\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.736] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Search\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.736] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search" (normalized: "c:\\users\\all users\\microsoft\\search"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.736] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5d855b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5d855b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.736] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5d855b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5d855b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.736] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5d855b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5d855b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5d8a3d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.736] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0141.736] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.736] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.736] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.736] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.737] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data" (normalized: "c:\\users\\all users\\microsoft\\search\\data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.737] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.737] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.737] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.737] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.737] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.737] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.737] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Search/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.738] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.738] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0141.738] CloseHandle (hObject=0xe8) returned 1 [0141.738] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.738] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.738] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.738] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0141.739] WriteFile (in: hFile=0xe8, lpBuffer=0x12491300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12491300*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0141.740] CloseHandle (hObject=0xe8) returned 1 [0141.740] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Search/Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.740] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Search/Data\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.740] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data" (normalized: "c:\\users\\all users\\microsoft\\search\\data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.740] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5d91900, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5d91900, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.740] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5d91900, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5d91900, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.740] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5d91900, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5d91900, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5d94010, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.740] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1 [0141.740] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0141.740] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.740] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.740] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.741] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.741] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.741] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.742] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.742] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.742] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.742] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.742] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.742] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.742] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.742] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.742] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.743] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.743] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.743] CloseHandle (hObject=0xe8) returned 1 [0141.743] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.743] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.743] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.743] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0141.744] WriteFile (in: hFile=0xe8, lpBuffer=0x12493900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12493900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0141.745] CloseHandle (hObject=0xe8) returned 1 [0141.745] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.745] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.745] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.745] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5d9dc50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5d9dc50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.745] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5d9dc50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5d9dc50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.745] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5d9dc50, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5d9dc50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5da0360, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.745] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0141.745] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.745] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.745] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.746] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.746] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications/Windows" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.746] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications/Windows\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.747] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.748] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.748] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.748] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.748] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.748] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.748] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Applications/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.749] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0141.749] CloseHandle (hObject=0xe8) returned 1 [0141.749] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.749] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.749] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.749] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0141.749] WriteFile (in: hFile=0xe8, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0141.750] CloseHandle (hObject=0xe8) returned 1 [0141.750] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.751] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.751] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.751] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5da9fa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5da9fa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.751] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5da9fa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5da9fa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.751] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5da9fa0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5da9fa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5daedc0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.751] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.751] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.751] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.751] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.751] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.751] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.752] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.752] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.752] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.752] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Search/Data/Temp/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.752] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0141.752] CloseHandle (hObject=0xe8) returned 1 [0141.752] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.752] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.752] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.753] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0141.753] WriteFile (in: hFile=0xe8, lpBuffer=0x12774600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12774600*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0141.762] CloseHandle (hObject=0xe8) returned 1 [0141.763] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.763] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.763] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures" (normalized: "c:\\users\\all users\\microsoft\\user account pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.763] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5db3be0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5db3be0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.763] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5db3be0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5db3be0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.763] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29423840, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz.dat", cAlternateFileName="5P5NRG~1.DAT")) returned 1 [0141.763] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5db3be0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5db3be0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5dc9b70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.763] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1 [0141.763] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0141.763] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0141.763] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.763] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.763] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/5p5NrGJn0jS HALPmcxz.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.764] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0141.764] ReadFile (in: hFile=0xe8, lpBuffer=0x1249a700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1249a700*, lpNumberOfBytesRead=0x12429bd8*=0x0, lpOverlapped=0x0) returned 1 [0141.765] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.765] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.765] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.765] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.766] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.767] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0141.768] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0141.768] ReadFile (in: hFile=0x114, lpBuffer=0x1249a900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1249a900*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0141.798] SetEvent (hEvent=0xac) returned 1 [0141.798] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0141.799] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0141.799] ReadFile (in: hFile=0x160, lpBuffer=0x1249aa00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x1249aa00*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0141.800] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1 [0141.800] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1 [0141.800] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/5p5NrGJn0jS HALPmcxz.dat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.801] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/5p5NrGJn0jS HALPmcxz.dat\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.801] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/5p5NrGJn0jS HALPmcxz.dat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.801] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/5p5NrGJn0jS HALPmcxz.dat\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.801] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/5p5NrGJn0jS HALPmcxz.dat\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.801] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/5p5NrGJn0jS HALPmcxz.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.801] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0141.801] CloseHandle (hObject=0x164) returned 1 [0141.801] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.801] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.801] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.801] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.802] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.802] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.802] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0141.802] CloseHandle (hObject=0x164) returned 1 [0141.802] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.803] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.803] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.804] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0141.804] WriteFile (in: hFile=0x164, lpBuffer=0x127a6000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x127a6000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0141.805] CloseHandle (hObject=0x164) returned 1 [0141.805] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.805] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.806] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.806] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5e2cd60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5e2cd60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5e2cd60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5e2cd60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5e2cd60, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5e2cd60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5e2cd60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae29b72e, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae29b72e, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb76b98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb82a065, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdbb95fd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae30db45, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae30db45, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdca9c9ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc3f8f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc65a55, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae359dff, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae359dff, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc8bbb3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae37ff5c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae37ff5c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdccb1d11, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd069f3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd09009d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3cc216, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3cc216, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd0b61fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd232fa7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd259105, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd27f263, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4184d0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4184d0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd2a53c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3177db, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1 [0141.806] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd33d939, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae46478a, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae46478a, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd42216d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4b0a44, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4b0a44, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd4482cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9c9561, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae548fb8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae548fb8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae595272, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae595272, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5bb3cf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5bb3cf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5e152c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5e152c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc2ab41, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae607689, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae607689, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc50c9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae62d7e6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae62d7e6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddcc30b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddce9217, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd0f375, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1 [0141.807] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.807] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.807] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.807] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.807] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile10.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.808] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile10.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.808] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile11.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.808] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile11.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.808] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile12.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.808] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile12.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.809] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile13.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.809] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile13.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.809] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile14.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.809] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile14.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.809] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile15.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.810] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile15.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.810] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile16.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.810] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile16.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.810] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile17.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.810] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile17.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.810] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile18.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.811] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile18.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.811] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile19.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.811] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile19.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.811] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile20.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.811] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile20.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.811] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile21.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.811] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile21.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.811] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile22.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.812] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile22.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.812] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile23.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.812] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile23.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.812] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile24.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.812] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile24.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.812] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile25.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.812] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile25.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.813] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile26.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.813] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile26.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.813] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile27.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.813] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile27.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.814] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile28.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.814] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile28.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.814] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile29.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.814] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile29.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.814] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile30.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.815] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile30.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.815] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile31.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.815] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile31.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.815] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile32.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.815] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile32.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.815] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile33.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.815] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile33.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.815] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile34.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.816] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile34.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.816] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile35.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.816] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile35.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.816] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile36.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.816] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile36.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.816] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile37.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.816] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile37.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.816] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile38.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.817] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile38.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.817] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile39.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.817] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile39.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.817] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile40.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.817] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile40.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.818] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile41.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.818] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile41.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.818] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile42.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.818] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile42.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.818] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile43.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.818] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile43.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.818] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile44.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.818] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile44.bmp\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.818] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.819] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.819] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.819] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.819] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.819] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.819] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.819] CloseHandle (hObject=0x164) returned 1 [0141.819] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile10.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.819] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile10.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.819] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile10.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.820] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile10.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.820] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile10.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.820] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile10.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.820] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.820] CloseHandle (hObject=0x164) returned 1 [0141.820] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile11.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.820] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile11.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.820] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile11.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.820] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile11.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.821] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile11.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.821] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile11.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.821] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.821] CloseHandle (hObject=0x164) returned 1 [0141.821] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile12.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.821] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile12.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.821] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile12.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.821] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile12.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.822] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile12.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.822] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile12.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.822] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.822] CloseHandle (hObject=0x164) returned 1 [0141.822] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile13.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.822] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile13.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.822] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile13.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.822] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile13.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.823] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile13.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.823] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile13.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.823] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.823] CloseHandle (hObject=0x164) returned 1 [0141.823] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile14.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.823] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile14.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.823] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile14.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.823] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile14.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.824] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile14.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.824] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile14.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.824] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.824] CloseHandle (hObject=0x164) returned 1 [0141.824] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile15.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.824] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile15.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.824] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile15.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.825] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile15.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.825] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile15.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.825] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile15.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.825] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.825] CloseHandle (hObject=0x164) returned 1 [0141.825] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile16.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.825] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile16.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.826] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile16.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.826] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile16.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.826] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile16.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.826] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile16.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.826] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.826] CloseHandle (hObject=0x164) returned 1 [0141.826] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile17.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.826] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile17.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.827] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile17.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.827] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile17.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.827] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile17.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.827] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile17.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.827] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.827] CloseHandle (hObject=0x164) returned 1 [0141.827] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile18.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.827] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile18.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.828] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile18.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.828] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile18.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.828] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile18.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.828] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile18.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.828] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.828] CloseHandle (hObject=0x164) returned 1 [0141.828] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile19.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.829] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile19.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.829] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile19.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.829] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile19.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.829] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile19.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.829] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile19.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.829] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.829] CloseHandle (hObject=0x164) returned 1 [0141.829] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile20.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.830] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile20.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.830] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile20.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.830] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile20.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.830] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile20.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.830] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile20.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.830] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.830] CloseHandle (hObject=0x164) returned 1 [0141.830] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile21.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.831] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile21.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.831] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile21.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.831] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile21.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.831] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile21.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.831] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile21.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.831] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.831] CloseHandle (hObject=0x164) returned 1 [0141.832] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile22.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.832] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile22.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.832] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile22.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.832] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile22.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.832] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile22.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.832] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile22.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.832] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.833] CloseHandle (hObject=0x164) returned 1 [0141.833] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile23.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.833] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile23.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.833] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile23.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.833] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile23.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.833] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile23.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.833] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile23.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.833] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.834] CloseHandle (hObject=0x164) returned 1 [0141.834] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile24.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.834] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile24.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.834] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile24.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.834] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile24.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.834] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile24.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.834] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile24.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.834] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.835] CloseHandle (hObject=0x164) returned 1 [0141.835] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile25.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.835] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile25.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.835] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile25.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.835] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile25.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.835] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile25.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.835] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile25.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.835] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.836] CloseHandle (hObject=0x164) returned 1 [0141.836] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile26.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.836] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile26.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.836] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile26.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.836] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile26.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.836] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile26.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.836] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile26.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.837] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.837] CloseHandle (hObject=0x164) returned 1 [0141.837] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile27.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.837] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile27.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.837] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile27.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.837] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile27.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.837] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile27.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.837] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile27.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.838] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.838] CloseHandle (hObject=0x164) returned 1 [0141.838] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile28.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.838] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile28.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.838] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile28.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.838] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile28.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.838] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile28.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.839] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile28.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.839] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.839] CloseHandle (hObject=0x164) returned 1 [0141.839] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile29.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.839] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile29.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.839] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile29.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.839] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile29.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.839] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile29.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.839] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile29.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.840] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.840] CloseHandle (hObject=0x164) returned 1 [0141.840] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile30.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.840] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile30.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.840] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile30.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.840] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile30.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.840] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile30.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.840] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile30.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.841] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.841] CloseHandle (hObject=0x164) returned 1 [0141.841] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile31.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.841] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile31.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.841] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile31.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.841] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile31.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.841] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile31.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.841] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile31.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.842] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.842] CloseHandle (hObject=0x164) returned 1 [0141.842] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile32.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.842] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile32.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.842] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile32.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.842] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile32.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.842] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile32.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.843] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile32.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.843] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.843] CloseHandle (hObject=0x164) returned 1 [0141.843] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile33.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.843] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile33.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.843] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile33.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.843] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile33.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.843] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile33.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.844] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile33.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.844] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.844] CloseHandle (hObject=0x164) returned 1 [0141.844] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile34.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.844] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile34.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.844] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile34.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.845] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile34.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.845] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile34.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.845] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile34.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.845] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.845] CloseHandle (hObject=0x164) returned 1 [0141.845] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile35.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.845] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile35.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.845] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile35.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.845] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile35.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.846] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile35.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.846] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile35.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.846] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.846] CloseHandle (hObject=0x164) returned 1 [0141.846] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile36.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.846] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile36.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.846] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile36.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.846] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile36.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.847] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile36.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.847] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile36.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.847] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.847] CloseHandle (hObject=0x164) returned 1 [0141.847] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile37.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.847] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile37.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.847] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile37.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.847] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile37.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.848] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile37.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.848] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile37.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.848] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.848] CloseHandle (hObject=0x164) returned 1 [0141.848] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile38.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.848] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile38.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.848] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile38.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.848] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile38.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.849] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile38.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.849] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile38.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.849] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.849] CloseHandle (hObject=0x164) returned 1 [0141.849] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile39.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.849] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile39.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.849] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile39.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.849] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile39.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.849] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile39.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.850] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile39.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.850] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.850] CloseHandle (hObject=0x164) returned 1 [0141.850] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile40.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.850] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile40.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.850] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile40.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.850] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile40.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.850] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile40.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.851] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile40.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.851] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.851] CloseHandle (hObject=0x164) returned 1 [0141.851] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile41.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.851] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile41.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.851] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile41.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.851] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile41.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.852] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile41.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.852] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile41.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.852] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.852] CloseHandle (hObject=0x164) returned 1 [0141.852] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile42.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.852] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile42.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.852] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile42.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.852] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile42.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.853] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile42.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.853] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile42.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.853] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.853] CloseHandle (hObject=0x164) returned 1 [0141.853] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile43.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.853] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile43.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.853] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile43.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.853] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile43.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.853] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile43.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.854] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile43.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.854] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.854] CloseHandle (hObject=0x164) returned 1 [0141.854] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile44.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.854] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile44.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.854] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile44.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.854] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile44.bmp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.854] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile44.bmp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.855] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/User Account Pictures/Default Pictures/usertile44.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.855] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.855] CloseHandle (hObject=0x164) returned 1 [0141.855] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/VISIO\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\visio\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.855] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/VISIO\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.855] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/VISIO\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\visio\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.856] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0141.856] WriteFile (in: hFile=0x164, lpBuffer=0x127d6600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x127d6600*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0141.857] CloseHandle (hObject=0x164) returned 1 [0141.857] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/VISIO\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\visio\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.857] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/VISIO\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.857] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/VISIO" (normalized: "c:\\users\\all users\\microsoft\\visio"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.858] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/VISIO\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x5ea85f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ea85f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.858] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x5ea85f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ea85f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.858] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5ea85f0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5ea85f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5eaad00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.858] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.858] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.858] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/VISIO/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\visio\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.858] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/VISIO/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.858] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/VISIO/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\visio\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.858] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/VISIO/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.858] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/VISIO/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\visio\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.858] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/VISIO/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.858] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/VISIO/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\visio\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.858] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/VISIO/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\visio\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.859] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0141.859] CloseHandle (hObject=0x164) returned 1 [0141.859] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Vault\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.859] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Vault\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.859] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Vault\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.860] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0141.860] WriteFile (in: hFile=0x164, lpBuffer=0x127d8c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x127d8c00*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0141.861] CloseHandle (hObject=0x164) returned 1 [0141.861] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Vault\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\@_read_to_recover_files_@.txt")) returned 0x20 [0141.861] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Vault\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0141.861] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Vault" (normalized: "c:\\users\\all users\\microsoft\\vault"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.861] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Vault\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5eb2230, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5eb2230, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.861] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5eb2230, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5eb2230, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x5eb2230, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5eb2230, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5eb4940, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.862] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.862] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.862] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Vault/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.862] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Vault/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.862] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Vault/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.862] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Vault/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.862] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Vault/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.862] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Vault/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.862] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Vault/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.862] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Vault/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.862] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0141.863] CloseHandle (hObject=0x164) returned 1 [0141.863] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.863] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.863] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.863] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0141.864] WriteFile (in: hFile=0x164, lpBuffer=0x124a1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124a1300*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0141.865] CloseHandle (hObject=0x164) returned 1 [0141.865] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.865] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.865] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender" (normalized: "c:\\users\\all users\\microsoft\\windows defender"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.865] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5eb9760, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5eb9760, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.865] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5eb9760, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5eb9760, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.865] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5eb9760, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5eb9760, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ebe580, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.865] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Definition Updates", cAlternateFileName="DEFINI~1")) returned 1 [0141.865] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCopy", cAlternateFileName="LOCALC~1")) returned 1 [0141.865] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quarantine", cAlternateFileName="QUARAN~1")) returned 1 [0141.865] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scans", cAlternateFileName="")) returned 1 [0141.865] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1 [0141.865] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.865] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.865] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.866] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.866] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Definition Updates" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.866] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Definition Updates\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.866] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.866] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/LocalCopy" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\localcopy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.866] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/LocalCopy\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.866] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.866] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Quarantine" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\quarantine"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.867] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Quarantine\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.867] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.867] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.867] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.867] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.867] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.867] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.867] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.867] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.868] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.868] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.868] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.868] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.868] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.868] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0141.868] CloseHandle (hObject=0x164) returned 1 [0141.868] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Definition Updates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.869] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Definition Updates\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.869] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Definition Updates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.870] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0141.871] WriteFile (in: hFile=0x164, lpBuffer=0x124a3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124a3900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0141.872] CloseHandle (hObject=0x164) returned 1 [0141.872] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Definition Updates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.872] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Definition Updates\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.872] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5eca8d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5eca8d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.873] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5ec81c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5ec81c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ecf6f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.873] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0141.873] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1 [0141.873] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 1 [0141.873] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.873] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.875] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Definition Updates/Backup\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.876] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5ed4510, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ed4510, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.876] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5ed4510, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5ed4510, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ed6c20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.876] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.876] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.877] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Definition Updates/Updates\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.878] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5ed9330, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ed9330, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.878] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5ed9330, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5ed9330, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ede150, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.878] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.878] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.881] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Definition Updates/{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.882] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x5ee2f70, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ee2f70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.882] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5ee0860, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5ee0860, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ee5680, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.882] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fd91f9, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fd91f9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x12c4d000, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0xb17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasbase.vdm", cAlternateFileName="")) returned 1 [0141.882] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fff35a, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x6da22700, ftLastWriteTime.dwHighDateTime=0x1cb8783, nFileSizeHigh=0x0, nFileSizeLow=0x52d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasdlta.vdm", cAlternateFileName="")) returned 1 [0141.882] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 1 [0141.882] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.882] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.893] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/LocalCopy\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.893] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5efb610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5efb610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.893] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5efb610, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5efb610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5efdd20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.893] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.893] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.895] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Quarantine\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.895] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5f00430, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f00430, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.895] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5f00430, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5f00430, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f02b40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.895] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.896] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.898] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.898] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5f05250, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f05250, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.898] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5f05250, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5f05250, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f0a070, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.898] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0141.898] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.898] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.901] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x5f0ee90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f0ee90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5f0c780, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5f0c780, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f115a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CacheManager", cAlternateFileName="CACHEM~1")) returned 1 [0141.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Results", cAlternateFileName="")) returned 1 [0141.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Service", cAlternateFileName="")) returned 1 [0141.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 1 [0141.902] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.902] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.904] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/CacheManager\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.905] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x5f163c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f163c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.905] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5f163c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5f163c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f1b1e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.905] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 1 [0141.905] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.905] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.908] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249fd60 | out: pbBuffer=0x1249fd60) returned 1 [0141.909] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1249bb02 | out: pbBuffer=0x1249bb02) returned 1 [0141.910] SetEvent (hEvent=0xa8) returned 1 [0141.910] ReadFile (in: hFile=0x130, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x33b60, lpOverlapped=0x0) returned 1 [0141.914] GetFileType (hFile=0x130) returned 0x1 [0141.914] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0141.914] WriteFile (in: hFile=0x130, lpBuffer=0x124f2000*, nNumberOfBytesToWrite=0x33b60, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124f2000*, lpNumberOfBytesWritten=0x124298a8*=0x33b60, lpOverlapped=0x124298b4) returned 1 [0141.915] GetFileType (hFile=0x130) returned 0x1 [0141.915] SetFilePointerEx (in: hFile=0x130, liDistanceToMove=0x33b60, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0141.915] ReadFile (in: hFile=0x130, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0141.915] CloseHandle (hObject=0x130) returned 1 [0141.915] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/CacheManager/MpSfc.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpsfc.bin"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0141.916] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0141.916] WriteFile (in: hFile=0x130, lpBuffer=0x127e9b00*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x127e9b00*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0141.916] CloseHandle (hObject=0x130) returned 1 [0141.916] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x12466000*, nNumberOfCharsToWrite=0x70, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x12466000*, lpNumberOfCharsWritten=0x1242957c*=0x70) returned 1 [0141.917] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/CacheManager/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.918] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/CacheManager/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.918] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/CacheManager/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.918] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/CacheManager/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.918] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/CacheManager/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.918] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/CacheManager/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0141.918] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0141.918] CloseHandle (hObject=0xf8) returned 1 [0141.919] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.919] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.919] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0141.919] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0141.919] WriteFile (in: hFile=0xf8, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0141.920] CloseHandle (hObject=0xf8) returned 1 [0141.920] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.921] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.921] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.921] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x5f3d4c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f3d4c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.921] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x5f3d4c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f3d4c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.921] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5f3d4c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5f3d4c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f422e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.921] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0141.921] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.921] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.921] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.921] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.921] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.921] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.922] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.922] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.922] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.922] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.922] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.922] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.922] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0141.922] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0141.923] CloseHandle (hObject=0xf8) returned 1 [0141.923] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.923] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.923] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0141.923] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0141.923] WriteFile (in: hFile=0xf8, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0141.924] CloseHandle (hObject=0xf8) returned 1 [0141.924] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.925] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.925] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.925] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x5f47100, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f47100, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.925] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x5f47100, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f47100, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.925] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5f47100, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5f47100, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f4bf20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.925] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="{1D1DB~1")) returned 1 [0141.925] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.925] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.925] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.925] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.925] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource/{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\{1d1dbf3a-752f-47e2-be70-d848d4a9afb0}"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0141.926] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429928 | out: lpMode=0x12429928) returned 0 [0141.926] ReadFile (in: hFile=0xf8, lpBuffer=0x1249a300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429938, lpOverlapped=0x0 | out: lpBuffer=0x1249a300*, lpNumberOfBytesRead=0x12429938*=0x100, lpOverlapped=0x0) returned 1 [0141.928] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource/{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\{1d1dbf3a-752f-47e2-be70-d848d4a9afb0}"), fInfoLevelId=0x0, lpFileInformation=0x12429710 | out: lpFileInformation=0x12429710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1 [0141.928] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.928] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.928] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.928] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.928] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.928] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Results/Resource/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.929] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0141.929] CloseHandle (hObject=0x164) returned 1 [0141.929] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.929] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.929] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.929] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0141.929] WriteFile (in: hFile=0x164, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0141.931] CloseHandle (hObject=0x164) returned 1 [0141.931] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.931] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.931] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.931] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x5f55b60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f55b60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x5f55b60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f55b60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5f55b60, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5f55b60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f5a980, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9820270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0x7de6c9b0, ftLastWriteTime.dwHighDateTime=0x1d3373d, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.Log", cAlternateFileName="")) returned 1 [0141.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2d1f02a0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 1 [0141.931] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.931] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.932] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.932] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.932] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service/History.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\history.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0141.933] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0141.933] ReadFile (in: hFile=0x164, lpBuffer=0x1249a400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1249a400*, lpNumberOfBytesRead=0x124299e0*=0x2, lpOverlapped=0x0) returned 1 [0141.934] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service/Unknown.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0141.935] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0141.935] ReadFile (in: hFile=0x158, lpBuffer=0x1249a500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1249a500*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0141.936] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service/History.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\history.log"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9820270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0x7de6c9b0, ftLastWriteTime.dwHighDateTime=0x1d3373d, nFileSizeHigh=0x0, nFileSizeLow=0x2)) returned 1 [0141.937] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service/Unknown.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2d1f02a0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1a86)) returned 1 [0141.937] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service/Unknown.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.937] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0141.937] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e360 | out: pbBuffer=0x1249e360) returned 1 [0141.938] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124462f0 | out: pbBuffer=0x124462f0) returned 1 [0141.938] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1249a602 | out: pbBuffer=0x1249a602) returned 1 [0141.939] SetEvent (hEvent=0x7c) returned 1 [0141.939] ReadFile (in: hFile=0xe8, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x1a86, lpOverlapped=0x0) returned 1 [0141.939] GetFileType (hFile=0xe8) returned 0x1 [0141.940] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0141.940] WriteFile (in: hFile=0xe8, lpBuffer=0x127ea000*, nNumberOfBytesToWrite=0x1a86, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x127ea000*, lpNumberOfBytesWritten=0x124298a8*=0x1a86, lpOverlapped=0x124298b4) returned 1 [0141.940] GetFileType (hFile=0xe8) returned 0x1 [0141.940] SetFilePointerEx (in: hFile=0xe8, liDistanceToMove=0x1a86, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0141.940] ReadFile (in: hFile=0xe8, lpBuffer=0x1300a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1300a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0141.940] CloseHandle (hObject=0xe8) returned 1 [0141.940] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service/Unknown.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.940] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0141.940] WriteFile (in: hFile=0xe8, lpBuffer=0x124c2b40*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x124c2b40*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0141.941] CloseHandle (hObject=0xe8) returned 1 [0141.941] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124667e0*, nNumberOfCharsToWrite=0x6d, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124667e0*, lpNumberOfCharsWritten=0x1242957c*=0x6d) returned 1 [0141.941] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.941] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.941] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.941] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.942] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.942] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Service/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.942] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0141.942] CloseHandle (hObject=0xe8) returned 1 [0141.942] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.942] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.942] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.943] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0141.943] WriteFile (in: hFile=0xe8, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0141.944] CloseHandle (hObject=0xe8) returned 1 [0141.944] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.945] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.945] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.945] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x5f77e40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f77e40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.945] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x5f77e40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f77e40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.945] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5f77e40, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5f77e40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f7cc60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.945] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.945] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.945] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.945] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.945] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.945] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.946] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.946] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.946] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.946] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Scans/History/Store/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.946] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0141.946] CloseHandle (hObject=0xe8) returned 1 [0141.946] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.946] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.947] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.947] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0141.947] WriteFile (in: hFile=0xe8, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0141.948] CloseHandle (hObject=0xe8) returned 1 [0141.948] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.948] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.948] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.949] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5f81a80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f81a80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.949] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5f81a80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f81a80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.949] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5f81a80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5f81a80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f84190, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.949] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x798d48a0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x30ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="MPLOG-~1.LOG")) returned 1 [0141.949] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.949] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.949] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.949] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.949] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/MPLog-07132009-221054.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-07132009-221054.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.949] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/MPLog-07132009-221054.log\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.949] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.949] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.950] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.950] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.950] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.950] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.950] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.950] CloseHandle (hObject=0xe8) returned 1 [0141.951] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/MPLog-07132009-221054.log\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-07132009-221054.log\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.951] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/MPLog-07132009-221054.log\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.951] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/MPLog-07132009-221054.log\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-07132009-221054.log\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.951] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/MPLog-07132009-221054.log\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.951] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/MPLog-07132009-221054.log\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-07132009-221054.log\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.951] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows Defender/Support/MPLog-07132009-221054.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-07132009-221054.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.951] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.951] CloseHandle (hObject=0xe8) returned 1 [0141.951] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.952] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.952] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.952] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0141.952] WriteFile (in: hFile=0xe8, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0141.953] CloseHandle (hObject=0xe8) returned 1 [0141.953] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.953] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.953] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT" (normalized: "c:\\users\\all users\\microsoft\\windows nt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.954] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5f88fb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f88fb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.954] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5f88fb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f88fb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.954] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5f88fb0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5f88fb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f8b6c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.954] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0141.954] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0141.954] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.954] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.954] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.954] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.954] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.954] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.956] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.957] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.957] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.957] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.957] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.957] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.958] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.958] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.958] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.958] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.958] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0141.958] CloseHandle (hObject=0xe8) returned 1 [0141.958] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.959] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.959] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.959] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0141.960] WriteFile (in: hFile=0xe8, lpBuffer=0x127f6000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x127f6000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0141.961] CloseHandle (hObject=0xe8) returned 1 [0141.961] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.961] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.961] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.961] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5f9a120, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f9a120, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.961] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5f9a120, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f9a120, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.961] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5f9a120, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5f9a120, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5f9ef40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.961] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActivityLog", cAlternateFileName="ACTIVI~1")) returned 1 [0141.961] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1 [0141.961] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1 [0141.961] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1 [0141.962] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1 [0141.962] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1 [0141.962] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.962] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.962] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.962] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.962] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.962] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.962] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.962] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.962] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.963] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.963] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.963] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.964] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.964] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.964] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.964] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.964] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.964] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.964] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.964] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.965] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.965] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.965] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.965] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.965] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.965] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.965] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.965] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.965] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0141.966] CloseHandle (hObject=0xe8) returned 1 [0141.966] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.966] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.966] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.966] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0141.966] WriteFile (in: hFile=0xe8, lpBuffer=0x127f8600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0141.968] CloseHandle (hObject=0xe8) returned 1 [0141.968] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.968] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.968] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.968] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5fab290, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fab290, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.968] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5fab290, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fab290, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.968] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5fab290, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5fab290, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fb00b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.968] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.968] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.968] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.968] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.969] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.969] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.969] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.969] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.969] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.969] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/ActivityLog/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.969] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0141.969] CloseHandle (hObject=0xe8) returned 1 [0141.970] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.970] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.970] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.970] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0141.970] WriteFile (in: hFile=0xe8, lpBuffer=0x127fac00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x127fac00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0141.971] CloseHandle (hObject=0xe8) returned 1 [0141.972] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.972] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.972] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.972] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5fb4ed0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fb4ed0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.972] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5fb4ed0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fb4ed0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.972] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5fb4ed0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5fb4ed0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fb9cf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.972] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0141.972] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.972] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.972] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.972] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.973] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.973] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.973] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.973] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.973] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.973] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.973] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.973] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.973] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.973] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0141.974] CloseHandle (hObject=0xe8) returned 1 [0141.974] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.974] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.974] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.974] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0141.975] WriteFile (in: hFile=0xe8, lpBuffer=0x12493300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12493300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0141.976] CloseHandle (hObject=0xe8) returned 1 [0141.976] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.976] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.976] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.976] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x5fbeb10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fbeb10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.976] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x5fbeb10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fbeb10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.976] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5fbeb10, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5fbeb10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fc3930, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.976] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x28aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="confident.cov", cAlternateFileName="")) returned 1 [0141.976] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fyi.cov", cAlternateFileName="")) returned 1 [0141.976] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic.cov", cAlternateFileName="")) returned 1 [0141.976] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 1 [0141.976] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.976] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.977] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.977] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.977] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/confident.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\confident.cov"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.978] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/confident.cov\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.978] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/fyi.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\fyi.cov"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.978] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/fyi.cov\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.978] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/generic.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\generic.cov"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.978] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/generic.cov\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.978] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/urgent.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\urgent.cov"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.978] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/urgent.cov\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.978] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.978] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.978] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.979] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.979] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.979] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.979] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0141.979] CloseHandle (hObject=0xe8) returned 1 [0141.979] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/confident.cov\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\confident.cov\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.979] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/confident.cov\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.979] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/confident.cov\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\confident.cov\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.979] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/confident.cov\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.980] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/confident.cov\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\confident.cov\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.980] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/confident.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\confident.cov"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.980] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0141.980] CloseHandle (hObject=0xe8) returned 1 [0141.980] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/fyi.cov\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\fyi.cov\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.980] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/fyi.cov\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.980] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/fyi.cov\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\fyi.cov\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.980] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/fyi.cov\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.981] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/fyi.cov\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\fyi.cov\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.981] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/fyi.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\fyi.cov"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.981] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0141.981] CloseHandle (hObject=0xe8) returned 1 [0141.981] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/generic.cov\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\generic.cov\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.981] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/generic.cov\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.981] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/generic.cov\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\generic.cov\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.981] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/generic.cov\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.982] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/generic.cov\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\generic.cov\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.982] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/generic.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\generic.cov"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.982] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0141.982] CloseHandle (hObject=0xe8) returned 1 [0141.982] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/urgent.cov\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\urgent.cov\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.982] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/urgent.cov\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.982] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/urgent.cov\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\urgent.cov\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.982] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/urgent.cov\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.982] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/urgent.cov\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\urgent.cov\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.983] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Common Coverpages/en-US/urgent.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\urgent.cov"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.983] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0141.983] CloseHandle (hObject=0xe8) returned 1 [0141.983] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.983] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.983] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.984] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0141.984] WriteFile (in: hFile=0xe8, lpBuffer=0x12774600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12774600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0141.985] CloseHandle (hObject=0xe8) returned 1 [0141.985] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.985] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.985] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.985] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5fd71b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fd71b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.985] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5fd71b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fd71b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.985] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5fd71b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5fd71b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fd98c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.985] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.986] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.986] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.986] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.986] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.986] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.986] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.986] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.986] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.986] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Inbox/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.986] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0141.986] CloseHandle (hObject=0xe8) returned 1 [0141.987] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.987] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.987] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.987] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0141.987] WriteFile (in: hFile=0xe8, lpBuffer=0x12776c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12776c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0141.988] CloseHandle (hObject=0xe8) returned 1 [0141.988] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.988] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.989] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.989] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5fde6e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fde6e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.989] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5fde6e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fde6e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.989] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5fde6e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5fde6e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fe3500, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.989] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.989] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.989] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.989] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.989] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.989] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.989] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.989] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.990] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.990] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/Queue/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.990] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0141.990] CloseHandle (hObject=0xe8) returned 1 [0141.990] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.990] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.990] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.991] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0141.991] WriteFile (in: hFile=0xe8, lpBuffer=0x1257d300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1257d300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0141.992] CloseHandle (hObject=0xe8) returned 1 [0141.992] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.992] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.992] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.992] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5fe8320, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fe8320, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.992] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x5fe8320, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fe8320, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.992] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5fe8320, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5fe8320, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5feaa30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.992] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.993] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.993] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.993] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.993] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.993] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.993] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.993] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.993] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.993] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/SentItems/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.993] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0141.993] CloseHandle (hObject=0xe8) returned 1 [0141.994] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.994] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.994] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.994] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0141.994] WriteFile (in: hFile=0xe8, lpBuffer=0x1257f900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1257f900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0141.995] CloseHandle (hObject=0xe8) returned 1 [0141.995] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.995] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.996] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.996] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x5fef850, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fef850, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.996] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x5fef850, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5fef850, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.996] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5fef850, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5fef850, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ff4670, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0141.996] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0141.996] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.996] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.996] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.996] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.996] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.996] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0141.996] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0141.997] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.997] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.997] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.997] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.997] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0141.997] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.997] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0141.997] CloseHandle (hObject=0xe8) returned 1 [0141.997] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.998] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0141.998] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0141.998] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0141.998] WriteFile (in: hFile=0xe8, lpBuffer=0x1258c000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1258c000*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0141.999] CloseHandle (hObject=0xe8) returned 1 [0141.999] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\@_read_to_recover_files_@.txt")) returned 0x2020 [0141.999] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0141.999] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.000] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x5ff9490, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ff9490, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.000] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x5ff9490, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ff9490, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.000] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x5ff9490, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5ff9490, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5ffbba0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.000] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 1 [0142.000] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.000] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.000] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.000] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.000] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/WelcomeFax.tif" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\welcomefax.tif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.000] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/WelcomeFax.tif\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.000] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.000] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.001] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.001] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.001] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.001] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.001] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0142.001] CloseHandle (hObject=0xe8) returned 1 [0142.001] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/WelcomeFax.tif\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\welcomefax.tif\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.001] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/WelcomeFax.tif\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.001] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/WelcomeFax.tif\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\welcomefax.tif\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.001] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/WelcomeFax.tif\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.002] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/WelcomeFax.tif\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\welcomefax.tif\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.002] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSFax/VirtualInbox/en-US/WelcomeFax.tif" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\welcomefax.tif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.002] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0142.002] CloseHandle (hObject=0xe8) returned 1 [0142.002] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.002] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.002] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.003] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0142.003] WriteFile (in: hFile=0xe8, lpBuffer=0x1258f900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x1258f900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0142.004] CloseHandle (hObject=0xe8) returned 1 [0142.004] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\@_read_to_recover_files_@.txt")) returned 0x2020 [0142.004] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0142.005] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.005] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x60057e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x60057e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.005] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x60057e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x60057e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.005] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x60057e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x60057e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6007ef0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.005] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0142.005] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.005] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.005] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.005] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.005] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.005] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/WelcomeScan.jpg\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.006] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.006] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.006] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.006] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.006] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.006] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.006] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0142.006] CloseHandle (hObject=0xe8) returned 1 [0142.006] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/WelcomeScan.jpg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.006] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/WelcomeScan.jpg\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.006] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/WelcomeScan.jpg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.007] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/WelcomeScan.jpg\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.007] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/WelcomeScan.jpg\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.007] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/Windows NT/MSScan/WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.007] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0142.007] CloseHandle (hObject=0xe8) returned 1 [0142.007] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.007] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/WwanSvc\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.007] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.008] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0142.008] WriteFile (in: hFile=0xe8, lpBuffer=0x12459300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12459300*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0142.009] CloseHandle (hObject=0xe8) returned 1 [0142.009] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\@_read_to_recover_files_@.txt")) returned 0x2020 [0142.009] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0142.009] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc" (normalized: "c:\\users\\all users\\microsoft\\wwansvc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.009] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/WwanSvc\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6011b30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6011b30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.009] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x6011b30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6011b30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.009] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x6011b30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6011b30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6014240, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.009] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0142.009] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.010] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.010] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.010] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/WwanSvc/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.010] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc/Profiles" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.010] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/WwanSvc/Profiles\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.010] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.010] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.010] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/WwanSvc/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.010] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.010] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/WwanSvc/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.010] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.011] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.011] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0142.011] CloseHandle (hObject=0xe8) returned 1 [0142.011] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc/Profiles\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.011] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/WwanSvc/Profiles\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.011] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc/Profiles\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.011] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/WwanSvc/Profiles\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.011] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc/Profiles\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.011] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/WwanSvc/Profiles" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.012] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/WwanSvc/Profiles\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.012] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.012] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.012] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.012] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.012] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/eHome\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.012] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.012] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0142.013] WriteFile (in: hFile=0xe8, lpBuffer=0x1245cc00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x1245cc00*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0142.013] CloseHandle (hObject=0xe8) returned 1 [0142.014] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/eHome\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\@_read_to_recover_files_@.txt")) returned 0x2020 [0142.014] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/eHome\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0142.014] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome" (normalized: "c:\\users\\all users\\microsoft\\ehome"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.014] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/eHome\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x601b770, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x601b770, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.014] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x601b770, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x601b770, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.014] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x601b770, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x601b770, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6020590, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.014] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0142.014] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.014] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.014] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.014] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/eHome/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.014] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome/logs" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.015] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/eHome/logs\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.015] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.015] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.015] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/eHome/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.015] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.015] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/eHome/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.015] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/eHome/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.015] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.015] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0142.016] CloseHandle (hObject=0xe8) returned 1 [0142.016] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome/logs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.016] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/eHome/logs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.016] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome/logs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.016] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0142.016] WriteFile (in: hFile=0xe8, lpBuffer=0x1256f300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x1256f300*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0142.023] CloseHandle (hObject=0xe8) returned 1 [0142.023] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/eHome/logs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\@_read_to_recover_files_@.txt")) returned 0x2020 [0142.023] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/eHome/logs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0142.023] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome/logs" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.023] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/eHome/logs\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6020590, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6020590, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.023] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x6020590, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6020590, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.023] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x6020590, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6020590, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6031700, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.023] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.023] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.023] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome/logs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.023] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/eHome/logs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.023] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome/logs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.024] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/eHome/logs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.024] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome/logs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.024] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft/eHome/logs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.024] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft/eHome/logs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.024] CreateFileW (lpFileName="C:/Users/All Users/Microsoft/eHome/logs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.024] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0142.024] CloseHandle (hObject=0xe8) returned 1 [0142.024] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft help\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.025] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft Help\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.025] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft help\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.026] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0142.026] WriteFile (in: hFile=0xe8, lpBuffer=0x12571900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12571900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0142.027] CloseHandle (hObject=0xe8) returned 1 [0142.027] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft Help\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft help\\@_read_to_recover_files_@.txt")) returned 0x2020 [0142.027] SetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft Help\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0142.027] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help" (normalized: "c:\\users\\all users\\microsoft help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.027] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft Help\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x6038c30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6038c30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0x6038c30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6038c30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.028] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x6036520, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6036520, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x603b340, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.028] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0142.028] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0142.028] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0142.028] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0142.028] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0142.029] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.029] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.030] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft help\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.030] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.030] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/Hx.hxn" (normalized: "c:\\users\\all users\\microsoft help\\hx.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.030] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.031] ReadFile (in: hFile=0xe8, lpBuffer=0x1249be00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1249be00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.032] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.EXCEL.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0142.032] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.032] ReadFile (in: hFile=0xf8, lpBuffer=0x1249bf00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x1249bf00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.034] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0142.034] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.034] ReadFile (in: hFile=0x164, lpBuffer=0x12654000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.035] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.GRAPH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.graph.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0142.036] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.036] ReadFile (in: hFile=0x158, lpBuffer=0x12654100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12654100*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.037] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.GROOVE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.groove.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0142.039] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.039] ReadFile (in: hFile=0x114, lpBuffer=0x12654200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12654200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.040] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.INFOPATH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopath.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0142.041] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.041] ReadFile (in: hFile=0x160, lpBuffer=0x12654300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12654300*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.042] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopatheditor.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0142.043] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.043] ReadFile (in: hFile=0x1b0, lpBuffer=0x12654500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12654500*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.044] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.MSACCESS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0142.045] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.045] ReadFile (in: hFile=0xbc, lpBuffer=0x12654600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12654600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.051] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0142.051] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.051] ReadFile (in: hFile=0x130, lpBuffer=0x12654800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12654800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.053] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.MSOUC.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msouc.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0142.053] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.053] ReadFile (in: hFile=0x134, lpBuffer=0x12654900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12654900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.054] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.MSPUB.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0142.055] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.055] ReadFile (in: hFile=0x188, lpBuffer=0x12654a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12654a00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.056] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0142.056] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.056] ReadFile (in: hFile=0x150, lpBuffer=0x12654b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12654b00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.057] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.MSTORE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mstore.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0142.057] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.058] ReadFile (in: hFile=0x98, lpBuffer=0x12654c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12654c00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.058] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.OIS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.ois.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0142.059] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.059] ReadFile (in: hFile=0x100, lpBuffer=0x12654d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12654d00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.060] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.ONENOTE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.onenote.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0142.060] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.060] ReadFile (in: hFile=0x13c, lpBuffer=0x12654e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12654e00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.061] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0142.062] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.062] ReadFile (in: hFile=0x11c, lpBuffer=0x12654f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12654f00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.063] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0142.063] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.063] ReadFile (in: hFile=0x170, lpBuffer=0x12655100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12655100*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.065] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.POWERPNT.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0142.065] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.066] ReadFile (in: hFile=0x174, lpBuffer=0x12655200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12655200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.067] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0142.067] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.067] ReadFile (in: hFile=0xf4, lpBuffer=0x12655400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12655400*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.068] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.SETLANG.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.setlang.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0142.068] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.068] ReadFile (in: hFile=0x14c, lpBuffer=0x12655500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12655500*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.074] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.VISIO.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0142.113] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.266] ReadFile (in: hFile=0x140, lpBuffer=0x12655600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12655600*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.267] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0142.267] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.290] ReadFile (in: hFile=0x108, lpBuffer=0x12655700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12655700*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.291] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0142.291] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.326] ReadFile (in: hFile=0xdc, lpBuffer=0x12655800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12655800*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.327] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_prm.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0142.333] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.344] ReadFile (in: hFile=0x17c, lpBuffer=0x12655900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12655900*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.344] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_std.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0142.345] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.351] ReadFile (in: hFile=0x138, lpBuffer=0x12655a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12655a00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.352] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.WINPROJ.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0142.352] GetConsoleMode (in: hConsoleHandle=0x180, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.360] ReadFile (in: hFile=0x180, lpBuffer=0x12655b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12655b00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.362] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0142.368] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.369] ReadFile (in: hFile=0xd0, lpBuffer=0x12655d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12655d00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.370] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.WINWORD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xc8 [0142.378] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.380] ReadFile (in: hFile=0xc8, lpBuffer=0x12655e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12655e00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.384] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118 [0142.393] GetConsoleMode (in: hConsoleHandle=0x118, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.396] ReadFile (in: hFile=0x118, lpBuffer=0x12658000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12658000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.397] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/nslist.hxl" (normalized: "c:\\users\\all users\\microsoft help\\nslist.hxl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c [0142.398] GetConsoleMode (in: hConsoleHandle=0x10c, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0142.398] ReadFile (in: hFile=0x10c, lpBuffer=0x12658100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12658100*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0142.399] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/Hx.hxn" (normalized: "c:\\users\\all users\\microsoft help\\hx.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1 [0142.400] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.EXCEL.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1 [0142.400] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1 [0142.400] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.GRAPH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.graph.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1 [0142.400] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.GROOVE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.groove.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1 [0142.400] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.INFOPATH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopath.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158)) returned 1 [0142.400] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopatheditor.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0142.400] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.MSACCESS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158)) returned 1 [0142.400] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0142.401] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.MSOUC.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msouc.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1 [0142.401] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.MSPUB.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1 [0142.401] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1 [0142.401] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.MSTORE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mstore.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1 [0142.401] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.OIS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.ois.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a)) returned 1 [0142.401] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.ONENOTE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.onenote.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1 [0142.401] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1 [0142.401] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1 [0142.401] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.POWERPNT.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158)) returned 1 [0142.401] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0142.401] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.SETLANG.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.setlang.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1 [0142.402] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.VISIO.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1 [0142.402] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1 [0142.402] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188)) returned 1 [0142.402] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_prm.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1 [0142.402] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_std.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1 [0142.402] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.WINPROJ.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1 [0142.402] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1 [0142.402] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.WINWORD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1 [0142.402] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1 [0142.402] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Microsoft Help/nslist.hxl" (normalized: "c:\\users\\all users\\microsoft help\\nslist.hxl"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc)) returned 1 [0142.402] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft help\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.403] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.403] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft help\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.403] FindFirstFileW (in: lpFileName="C:/Users/All Users/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.403] GetFileAttributesW (lpFileName="C:/Users/All Users/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft help\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.403] CreateFileW (lpFileName="C:/Users/All Users/Microsoft Help/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\microsoft help\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0142.403] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0142.403] CloseHandle (hObject=0x16c) returned 1 [0142.403] CreateFileW (lpFileName="C:/Users/All Users/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.403] FindFirstFileW (in: lpFileName="C:/Users/All Users/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.403] CreateFileW (lpFileName="C:/Users/All Users/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0142.404] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0142.404] WriteFile (in: hFile=0x16c, lpBuffer=0x127b0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x127b0000*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0142.405] CloseHandle (hObject=0x16c) returned 1 [0142.405] GetFileAttributesW (lpFileName="C:/Users/All Users/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\@_read_to_recover_files_@.txt")) returned 0x2020 [0142.405] SetFileAttributesW (lpFileName="C:/Users/All Users/Mozilla\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0142.405] CreateFileW (lpFileName="C:/Users/All Users/Mozilla" (normalized: "c:\\users\\all users\\mozilla"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.405] FindFirstFileW (in: lpFileName="C:/Users/All Users/Mozilla\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x63bb330, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63bb330, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x63bb330, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63bb330, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x63bb330, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x63bb330, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63bb330, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0142.406] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.406] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.406] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.406] FindFirstFileW (in: lpFileName="C:/Users/All Users/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.406] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/logs" (normalized: "c:\\users\\all users\\mozilla\\logs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.406] FindFirstFileW (in: lpFileName="C:/Users/All Users/Mozilla/logs\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.407] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.407] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.408] FindFirstFileW (in: lpFileName="C:/Users/All Users/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.408] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.408] FindFirstFileW (in: lpFileName="C:/Users/All Users/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.408] GetFileAttributesW (lpFileName="C:/Users/All Users/Mozilla/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.408] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0142.408] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0142.408] CloseHandle (hObject=0x16c) returned 1 [0142.408] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/logs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\logs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.408] FindFirstFileW (in: lpFileName="C:/Users/All Users/Mozilla/logs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.409] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/logs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\logs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0142.409] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0142.409] WriteFile (in: hFile=0x16c, lpBuffer=0x127b2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x127b2600*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0142.410] CloseHandle (hObject=0x16c) returned 1 [0142.410] GetFileAttributesW (lpFileName="C:/Users/All Users/Mozilla/logs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\logs\\@_read_to_recover_files_@.txt")) returned 0x2020 [0142.410] SetFileAttributesW (lpFileName="C:/Users/All Users/Mozilla/logs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0142.410] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/logs" (normalized: "c:\\users\\all users\\mozilla\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.411] FindFirstFileW (in: lpFileName="C:/Users/All Users/Mozilla/logs\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x63c2860, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63c2860, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.411] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x63c2860, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63c2860, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.411] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x63c2860, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x63c2860, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63c4f70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.411] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0142.411] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.411] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.411] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/logs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\logs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.411] FindFirstFileW (in: lpFileName="C:/Users/All Users/Mozilla/logs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.411] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/logs/maintenanceservice-install.log" (normalized: "c:\\users\\all users\\mozilla\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c [0142.412] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0142.412] ReadFile (in: hFile=0x16c, lpBuffer=0x12659000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12659000*, lpNumberOfBytesRead=0x12429bd8*=0xa4, lpOverlapped=0x0) returned 1 [0142.413] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Mozilla/logs/maintenanceservice-install.log" (normalized: "c:\\users\\all users\\mozilla\\logs\\maintenanceservice-install.log"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4)) returned 1 [0142.413] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/logs/maintenanceservice-install.log" (normalized: "c:\\users\\all users\\mozilla\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.413] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0142.413] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249faa0 | out: pbBuffer=0x1249faa0) returned 1 [0142.414] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12447004 | out: pbBuffer=0x12447004) returned 1 [0142.414] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12659302 | out: pbBuffer=0x12659302) returned 1 [0142.416] SetEvent (hEvent=0xa0) returned 1 [0142.416] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0xa4, lpOverlapped=0x0) returned 1 [0142.416] GetFileType (hFile=0x178) returned 0x1 [0142.416] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0142.416] WriteFile (in: hFile=0x178, lpBuffer=0x127fc6e0*, nNumberOfBytesToWrite=0xa4, lpNumberOfBytesWritten=0x12429aa0, lpOverlapped=0x12429aac | out: lpBuffer=0x127fc6e0*, lpNumberOfBytesWritten=0x12429aa0*=0xa4, lpOverlapped=0x12429aac) returned 1 [0142.416] GetFileType (hFile=0x178) returned 0x1 [0142.416] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0xa4, lpNewFilePointer=0x0, dwMoveMethod=0x12429a84 | out: lpNewFilePointer=0x0) returned 1 [0142.417] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x0, lpOverlapped=0x0) returned 1 [0142.417] CloseHandle (hObject=0x178) returned 1 [0142.417] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/logs/maintenanceservice-install.log" (normalized: "c:\\users\\all users\\mozilla\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.417] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0142.417] WriteFile (in: hFile=0x178, lpBuffer=0x127c0000*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429ab0, lpOverlapped=0x0 | out: lpBuffer=0x127c0000*, lpNumberOfBytesWritten=0x12429ab0*=0x108, lpOverlapped=0x0) returned 1 [0142.417] CloseHandle (hObject=0x178) returned 1 [0142.417] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x1264e840*, nNumberOfCharsToWrite=0x5c, lpNumberOfCharsWritten=0x12429774, lpReserved=0x0 | out: lpBuffer=0x1264e840*, lpNumberOfCharsWritten=0x12429774*=0x5c) returned 1 [0142.418] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/logs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\logs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.418] FindFirstFileW (in: lpFileName="C:/Users/All Users/Mozilla/logs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.418] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/logs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\logs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.418] FindFirstFileW (in: lpFileName="C:/Users/All Users/Mozilla/logs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.418] GetFileAttributesW (lpFileName="C:/Users/All Users/Mozilla/logs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\logs\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.419] CreateFileW (lpFileName="C:/Users/All Users/Mozilla/logs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\mozilla\\logs\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.419] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0142.421] CloseHandle (hObject=0x178) returned 1 [0142.421] CreateFileW (lpFileName="C:/Users/All Users/Oracle\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\oracle\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.421] FindFirstFileW (in: lpFileName="C:/Users/All Users/Oracle\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.421] CreateFileW (lpFileName="C:/Users/All Users/Oracle\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\oracle\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.421] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0142.422] WriteFile (in: hFile=0x178, lpBuffer=0x124d1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x124d1300*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0142.423] CloseHandle (hObject=0x178) returned 1 [0142.423] GetFileAttributesW (lpFileName="C:/Users/All Users/Oracle\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\oracle\\@_read_to_recover_files_@.txt")) returned 0x2020 [0142.423] SetFileAttributesW (lpFileName="C:/Users/All Users/Oracle\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0142.423] CreateFileW (lpFileName="C:/Users/All Users/Oracle" (normalized: "c:\\users\\all users\\oracle"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.423] FindFirstFileW (in: lpFileName="C:/Users/All Users/Oracle\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x63dfd20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63dfd20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.424] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x63dfd20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63dfd20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.424] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x63dfd20, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x63dfd20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63e4b40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.424] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.424] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.424] CreateFileW (lpFileName="C:/Users/All Users/Oracle/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\oracle\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.424] FindFirstFileW (in: lpFileName="C:/Users/All Users/Oracle/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.424] CreateFileW (lpFileName="C:/Users/All Users/Oracle/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\oracle\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.424] FindFirstFileW (in: lpFileName="C:/Users/All Users/Oracle/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.424] CreateFileW (lpFileName="C:/Users/All Users/Oracle/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\oracle\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.424] FindFirstFileW (in: lpFileName="C:/Users/All Users/Oracle/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.424] GetFileAttributesW (lpFileName="C:/Users/All Users/Oracle/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\oracle\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.424] CreateFileW (lpFileName="C:/Users/All Users/Oracle/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\oracle\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.424] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0142.425] CloseHandle (hObject=0x178) returned 1 [0142.425] CreateFileW (lpFileName="C:/Users/All Users/Package Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.426] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.426] CreateFileW (lpFileName="C:/Users/All Users/Package Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.432] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0142.432] WriteFile (in: hFile=0x178, lpBuffer=0x124d3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x124d3900*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0142.433] CloseHandle (hObject=0x178) returned 1 [0142.433] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0142.433] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0142.434] CreateFileW (lpFileName="C:/Users/All Users/Package Cache" (normalized: "c:\\users\\all users\\package cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.434] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x63faad0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63faad0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.434] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x63faad0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63faad0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x63faad0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x63faad0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x63ff8f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.435] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.435] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.436] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.436] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.436] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.436] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.437] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.437] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.437] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.437] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.437] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.437] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.437] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.437] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.438] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.438] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.438] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.439] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.439] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.439] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.440] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.440] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.440] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.441] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.441] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.441] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.442] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.442] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.442] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.444] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.444] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.444] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.444] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.444] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.444] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.445] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.445] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.445] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.446] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.446] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.446] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.446] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.446] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.446] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.448] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.448] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.448] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.449] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.449] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.449] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.450] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.450] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.450] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.451] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.451] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.451] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.451] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.451] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.451] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.452] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.452] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.452] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.453] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.453] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.453] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.453] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.454] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0142.454] WriteFile (in: hFile=0x178, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0142.455] CloseHandle (hObject=0x178) returned 1 [0142.455] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.455] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.455] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.455] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6430630, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6430630, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.456] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6430630, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6430630, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.456] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6430630, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6430630, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6432d40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.456] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0142.456] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.456] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.456] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.456] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.456] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.456] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.456] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.456] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.456] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.457] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.457] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.457] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.457] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.457] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0142.457] CloseHandle (hObject=0x178) returned 1 [0142.457] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.457] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.457] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.458] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0142.458] WriteFile (in: hFile=0x178, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0142.459] CloseHandle (hObject=0x178) returned 1 [0142.459] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.459] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.459] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.459] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x643a270, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x643a270, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.460] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x643a270, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x643a270, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.460] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x643a270, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x643a270, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x643c980, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.460] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0142.460] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.460] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.460] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.460] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.460] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.460] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.460] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.460] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.461] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.461] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.461] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.461] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.461] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.461] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0142.461] CloseHandle (hObject=0x178) returned 1 [0142.461] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.461] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.461] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.462] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0142.462] WriteFile (in: hFile=0x178, lpBuffer=0x12650000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12650000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0142.463] CloseHandle (hObject=0x178) returned 1 [0142.463] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.463] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.463] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.463] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6443eb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6443eb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.464] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6443eb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6443eb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.464] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6443eb0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6443eb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x64465c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.464] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0142.464] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.464] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.464] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.464] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.464] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.464] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.464] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.464] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.464] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.465] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.465] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.465] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.465] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.465] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0142.465] CloseHandle (hObject=0x178) returned 1 [0142.465] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.465] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.465] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.466] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0142.466] WriteFile (in: hFile=0x178, lpBuffer=0x12652600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12652600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0142.467] CloseHandle (hObject=0x178) returned 1 [0142.467] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.467] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.467] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.467] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x644daf0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x644daf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.468] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x644daf0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x644daf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.468] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x644daf0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x644daf0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6450200, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.468] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0142.468] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.468] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.468] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.468] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.468] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64/Windows6.1-KB2999226-x64.msu" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0142.468] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0142.469] ReadFile (in: hFile=0x178, lpBuffer=0x12658e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12658e00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0142.473] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64/Windows6.1-KB2999226-x64.msu" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139)) returned 1 [0142.474] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.474] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.474] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.474] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.475] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.475] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/42D5BEC7DDFBD49E76467529CBC2868987BF8460/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.475] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0142.475] CloseHandle (hObject=0xe8) returned 1 [0142.475] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.475] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.475] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.476] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0142.476] WriteFile (in: hFile=0xe8, lpBuffer=0x12654c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12654c00*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0142.477] CloseHandle (hObject=0xe8) returned 1 [0142.477] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.477] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.477] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.477] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x6461370, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6461370, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.477] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x6461370, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6461370, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.478] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x645ec60, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x645ec60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6463a80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.478] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0142.478] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.478] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.478] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.478] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.478] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.478] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.478] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.478] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.478] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.479] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.479] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.479] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.479] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.479] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0142.479] CloseHandle (hObject=0xe8) returned 1 [0142.479] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.479] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.479] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.480] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0142.480] WriteFile (in: hFile=0xe8, lpBuffer=0x127bb300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x127bb300*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0142.481] CloseHandle (hObject=0xe8) returned 1 [0142.481] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.481] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.481] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.481] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x646afb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x646afb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.482] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x646afb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x646afb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.482] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x646afb0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x646afb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x646d6c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.482] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0142.482] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.482] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.482] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.482] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.482] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.482] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.483] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.483] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.483] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.483] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.483] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.484] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.484] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.484] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0142.484] CloseHandle (hObject=0xe8) returned 1 [0142.484] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.484] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.484] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.485] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0142.485] WriteFile (in: hFile=0xe8, lpBuffer=0x127bd900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x127bd900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0142.486] CloseHandle (hObject=0xe8) returned 1 [0142.486] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.486] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.486] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.486] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x6477300, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6477300, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.486] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x6477300, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6477300, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.486] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6477300, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6477300, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6479a10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.486] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0142.487] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.487] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.487] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.487] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.487] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.487] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.487] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.487] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.487] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.487] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.487] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.488] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.488] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.488] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0142.488] CloseHandle (hObject=0xe8) returned 1 [0142.488] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.488] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.488] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.489] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0142.489] WriteFile (in: hFile=0xe8, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0142.490] CloseHandle (hObject=0xe8) returned 1 [0142.490] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.490] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.490] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.490] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x6480f40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6480f40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.490] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x6480f40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6480f40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.490] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6480f40, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x6480f40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x6483650, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.491] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0142.491] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.491] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.491] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.491] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.491] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64/Windows6.1-KB2999226-x64.msu" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0142.495] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0142.495] ReadFile (in: hFile=0xe8, lpBuffer=0x12659b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12659b00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0142.497] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64/Windows6.1-KB2999226-x64.msu" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c)) returned 1 [0142.498] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.499] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.499] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.499] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.499] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.499] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/54050A5F8AE7F0C56E553F0090146C17A1D2BF8D/packages/Patch/x64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0142.499] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0142.499] CloseHandle (hObject=0xf8) returned 1 [0142.499] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.500] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.500] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.500] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.500] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.500] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0142.500] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0142.500] CloseHandle (hObject=0xf8) returned 1 [0142.500] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.500] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.500] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0142.501] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0142.501] WriteFile (in: hFile=0xf8, lpBuffer=0x1255d900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x1255d900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0142.502] CloseHandle (hObject=0xf8) returned 1 [0142.502] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.502] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.502] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.503] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x649e400, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x649e400, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.503] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x649e400, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x649e400, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.503] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x649e400, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x649e400, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x64a0b10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.503] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0142.503] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.503] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.503] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.503] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.503] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.503] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.504] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.504] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.504] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.504] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.504] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.504] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.504] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0142.504] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0142.504] CloseHandle (hObject=0xf8) returned 1 [0142.504] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.505] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.505] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0142.505] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0142.505] WriteFile (in: hFile=0xf8, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0142.506] CloseHandle (hObject=0xf8) returned 1 [0142.506] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.507] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.507] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.507] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x64a8040, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x64a8040, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.507] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x64a8040, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x64a8040, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.507] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x64a8040, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x64a8040, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x64ace60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.507] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0142.507] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.507] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.507] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.507] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.507] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.507] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.508] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.508] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.508] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.508] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.508] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.508] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0142.508] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0142.508] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0142.509] CloseHandle (hObject=0xf8) returned 1 [0142.509] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.509] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.509] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0142.511] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0142.511] WriteFile (in: hFile=0xf8, lpBuffer=0x12774600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12774600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0142.512] CloseHandle (hObject=0xf8) returned 1 [0142.512] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt")) returned 0x20 [0142.512] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0142.512] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.512] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x64b6aa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x64b6aa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0142.512] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x64b6aa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x64b6aa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.512] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x64b1c80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x64b1c80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x64b91b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0142.512] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0142.512] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0142.513] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.513] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0142.513] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0142.513] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0142.513] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0142.513] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0142.513] ReadFile (in: hFile=0xf8, lpBuffer=0x1256e700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1256e700*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0142.516] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86/vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0142.516] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0142.516] ReadFile (in: hFile=0x164, lpBuffer=0x1256e800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1256e800*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0142.519] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be)) returned 1 [0142.519] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005/packages/vcRuntimeMinimum_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0142.519] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0142.519] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249efa0 | out: pbBuffer=0x1249efa0) returned 1 [0142.521] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1256eb02 | out: pbBuffer=0x1256eb02) returned 1 [0142.522] SetEvent (hEvent=0xa8) returned 1 [0142.522] ReadFile (in: hFile=0x158, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0xf36be, lpOverlapped=0x0) returned 1 [0142.536] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0142.536] SetEvent (hEvent=0xa8) returned 1 [0142.537] SetEvent (hEvent=0x7c) returned 1 [0142.537] CloseHandle (hObject=0x164) returned 1 [0142.537] CloseHandle (hObject=0xf8) returned 1 [0142.537] CloseHandle (hObject=0xe8) returned 1 [0142.537] CloseHandle (hObject=0x178) returned 1 [0142.537] SwitchToThread () returned 1 [0142.537] SetEvent (hEvent=0xa8) returned 1 [0142.537] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0142.547] SetEvent (hEvent=0x7c) returned 1 [0142.547] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0142.548] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0142.548] SetEvent (hEvent=0x7c) returned 1 [0142.548] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0142.549] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0142.549] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0142.731] SetEvent (hEvent=0x7c) returned 1 [0142.731] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0142.731] SetEvent (hEvent=0x7c) returned 1 [0142.731] SetEvent (hEvent=0xa8) returned 1 [0142.731] CloseHandle (hObject=0xf8) returned 1 [0142.731] CloseHandle (hObject=0xe8) returned 1 [0142.731] CloseHandle (hObject=0x178) returned 1 [0142.731] CloseHandle (hObject=0x158) returned 1 [0142.732] SwitchToThread () returned 1 [0142.732] SetEvent (hEvent=0x7c) returned 1 [0142.732] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0142.733] SetEvent (hEvent=0x7c) returned 1 [0142.733] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0142.733] SetEvent (hEvent=0x7c) returned 1 [0142.733] SwitchToThread () returned 1 [0142.734] SetEvent (hEvent=0x7c) returned 1 [0142.734] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0142.828] SetEvent (hEvent=0xa8) returned 1 [0142.829] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0142.836] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0142.836] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0142.837] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0142.837] SetEvent (hEvent=0xa0) returned 1 [0142.837] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0142.838] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0142.838] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0142.989] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.052] SetEvent (hEvent=0xa8) returned 1 [0143.052] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.123] SetEvent (hEvent=0xa8) returned 1 [0143.123] SwitchToThread () returned 1 [0143.123] SetEvent (hEvent=0xa8) returned 1 [0143.124] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.209] SetEvent (hEvent=0x7c) returned 1 [0143.209] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0143.211] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.211] SetEvent (hEvent=0x7c) returned 1 [0143.212] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0143.213] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.213] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.249] SetEvent (hEvent=0x7c) returned 1 [0143.249] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.268] SetEvent (hEvent=0x7c) returned 1 [0143.268] SwitchToThread () returned 1 [0143.268] SetEvent (hEvent=0x7c) returned 1 [0143.268] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.283] SetEvent (hEvent=0xa8) returned 1 [0143.283] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0143.285] SetEvent (hEvent=0xa8) returned 1 [0143.285] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0143.286] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.286] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.424] SetEvent (hEvent=0xa8) returned 1 [0143.424] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.424] SetEvent (hEvent=0xa8) returned 1 [0143.424] SetEvent (hEvent=0x7c) returned 1 [0143.425] CloseHandle (hObject=0x178) returned 1 [0143.425] CloseHandle (hObject=0x158) returned 1 [0143.425] SwitchToThread () returned 1 [0143.426] SetEvent (hEvent=0xa8) returned 1 [0143.426] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.521] SetEvent (hEvent=0x7c) returned 1 [0143.521] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0143.524] SetEvent (hEvent=0x7c) returned 1 [0143.524] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0143.526] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.561] SetEvent (hEvent=0x7c) returned 1 [0143.561] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.578] SetEvent (hEvent=0x7c) returned 1 [0143.578] SetEvent (hEvent=0xa0) returned 1 [0143.578] CloseHandle (hObject=0x158) returned 1 [0143.578] CloseHandle (hObject=0x164) returned 1 [0143.578] SwitchToThread () returned 1 [0143.579] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.647] SetEvent (hEvent=0xa0) returned 1 [0143.647] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0143.711] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.711] SetEvent (hEvent=0xa0) returned 1 [0143.711] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0143.712] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0143.713] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.713] SetEvent (hEvent=0xac) returned 1 [0143.713] SetEvent (hEvent=0xa0) returned 1 [0143.758] GetFileType (hFile=0x178) returned 0x1 [0143.758] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0143.758] WriteFile (in: hFile=0x178, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x4ea418, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429950*=0x4ea418, lpOverlapped=0x1242995c) returned 1 [0143.811] GetFileType (hFile=0x178) returned 0x1 [0143.811] SetFilePointerEx (in: hFile=0x178, liDistanceToMove=0x4ea418, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0143.811] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0143.811] CloseHandle (hObject=0x178) returned 1 [0143.811] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.811] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.812] WriteFile (in: hFile=0x178, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0143.812] CloseHandle (hObject=0x178) returned 1 [0143.812] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x9a, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x12429624*=0x9a) returned 1 [0143.813] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86/vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0143.813] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.813] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.813] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.813] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.813] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.813] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030/packages/vcRuntimeAdditional_x86/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.813] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0143.814] CloseHandle (hObject=0x178) returned 1 [0143.814] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.814] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.814] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.814] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0143.815] WriteFile (in: hFile=0x178, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0143.816] CloseHandle (hObject=0x178) returned 1 [0143.816] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.816] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.816] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.816] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x70c49a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x70c49a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.816] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x70c49a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x70c49a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.816] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x70c49a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x70c49a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x70c49a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.816] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.816] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.816] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.816] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.816] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.817] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.817] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.818] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.818] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.818] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.818] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.818] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.818] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.818] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.818] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0143.818] CloseHandle (hObject=0x178) returned 1 [0143.818] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.818] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.819] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.819] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0143.819] WriteFile (in: hFile=0x178, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0143.820] CloseHandle (hObject=0x178) returned 1 [0143.820] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.820] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.820] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.820] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x70c49a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x70c49a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.821] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x70c49a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x70c49a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.821] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x70c49a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x70c49a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x70c49a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.821] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0143.821] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.821] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.821] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.821] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.821] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.821] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.822] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.822] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.822] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.822] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.822] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.822] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.822] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.822] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0143.823] CloseHandle (hObject=0x178) returned 1 [0143.823] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.823] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.823] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.824] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0143.825] WriteFile (in: hFile=0x178, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0143.826] CloseHandle (hObject=0x178) returned 1 [0143.826] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.826] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.826] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.826] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x70eab00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x70eab00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.826] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x70eab00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x70eab00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.826] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x70c49a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x70c49a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x70eab00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.826] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884c0c00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x884c0c00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x884c0c00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0143.826] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0143.826] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.826] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.826] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.826] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.827] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.827] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.827] ReadFile (in: hFile=0x178, lpBuffer=0x1255e900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255e900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.829] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86/vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.829] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.830] ReadFile (in: hFile=0x164, lpBuffer=0x1255ea00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255ea00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.831] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884c0c00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x884c0c00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x884c0c00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1)) returned 1 [0143.832] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030/packages/vcRuntimeMinimum_x86/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.832] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.832] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e4e0 | out: pbBuffer=0x1249e4e0) returned 1 [0143.833] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1255ed02 | out: pbBuffer=0x1255ed02) returned 1 [0143.834] SetEvent (hEvent=0xa8) returned 1 [0143.834] ReadFile (in: hFile=0x158, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0xc89b1, lpOverlapped=0x0) returned 1 [0143.841] CloseHandle (hObject=0x164) returned 1 [0143.841] CloseHandle (hObject=0x178) returned 1 [0143.841] SwitchToThread () returned 1 [0143.841] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.850] SetEvent (hEvent=0xa0) returned 1 [0143.850] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.852] SetEvent (hEvent=0xa0) returned 1 [0143.852] SwitchToThread () returned 1 [0143.855] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.877] SetEvent (hEvent=0xa0) returned 1 [0143.877] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0143.878] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.878] SetEvent (hEvent=0xa0) returned 1 [0143.878] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0143.884] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.884] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0143.885] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.885] SetEvent (hEvent=0xac) returned 1 [0143.885] SetEvent (hEvent=0xa0) returned 1 [0143.889] GetFileType (hFile=0x164) returned 0x1 [0143.889] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0143.889] WriteFile (in: hFile=0x164, lpBuffer=0x12662000*, nNumberOfBytesToWrite=0xc5b25, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x12662000*, lpNumberOfBytesWritten=0x12429950*=0xc5b25, lpOverlapped=0x1242995c) returned 1 [0143.891] GetFileType (hFile=0x164) returned 0x1 [0143.891] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xc5b25, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0143.891] ReadFile (in: hFile=0x164, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0143.892] CloseHandle (hObject=0x164) returned 1 [0143.892] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.892] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.892] WriteFile (in: hFile=0x164, lpBuffer=0x1248c240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1248c240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0143.893] CloseHandle (hObject=0x164) returned 1 [0143.893] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c8000*, nNumberOfCharsToWrite=0x99, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124c8000*, lpNumberOfCharsWritten=0x12429624*=0x99) returned 1 [0143.893] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64/vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0143.893] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.893] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.894] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.894] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.894] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.894] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030/packages/vcRuntimeMinimum_amd64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.894] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0143.894] CloseHandle (hObject=0x164) returned 1 [0143.894] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.894] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.895] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.895] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0143.896] WriteFile (in: hFile=0x164, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0143.897] CloseHandle (hObject=0x164) returned 1 [0143.897] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.897] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.897] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.897] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x7181910, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7181910, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.898] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x7181910, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7181910, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.898] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x7181910, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7181910, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7181910, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.898] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.898] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.898] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.898] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.898] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.898] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.898] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.899] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.900] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.900] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.900] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.900] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.900] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.900] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.900] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0143.900] CloseHandle (hObject=0x164) returned 1 [0143.901] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.901] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.901] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.902] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0143.902] WriteFile (in: hFile=0x164, lpBuffer=0x124d2600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d2600*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0143.903] CloseHandle (hObject=0x164) returned 1 [0143.904] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.904] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.904] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.904] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x7181910, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7181910, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.904] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x7181910, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x7181910, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.904] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x7181910, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x7181910, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x71a7a70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.904] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0143.904] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.904] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.905] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.905] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.905] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.905] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.905] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.905] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.905] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.906] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.906] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.906] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0143.906] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.906] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0143.906] CloseHandle (hObject=0x164) returned 1 [0143.906] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.906] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.907] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.914] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0143.915] WriteFile (in: hFile=0x164, lpBuffer=0x124d4c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x124d4c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0143.916] CloseHandle (hObject=0x164) returned 1 [0143.916] GetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt")) returned 0x20 [0143.916] SetFileAttributesW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0143.916] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.916] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x71a7a70, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x71a7a70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0143.917] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0x71a7a70, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x71a7a70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.917] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x71a7a70, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x71a7a70, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x71a7a70, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0143.917] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7f300, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xdae7f300, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xdae7f300, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0143.917] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0143.917] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.917] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0143.917] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0143.917] FindFirstFileW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0143.917] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0143.919] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.920] ReadFile (in: hFile=0x164, lpBuffer=0x1255eb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255eb00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.923] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64/vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0143.925] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0143.925] ReadFile (in: hFile=0x158, lpBuffer=0x1255ec00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255ec00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0143.927] GetFileAttributesExW (in: lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7f300, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xdae7f300, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xdae7f300, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5)) returned 1 [0143.927] CreateFileW (lpFileName="C:/Users/All Users/Package Cache/{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017/packages/vcRuntimeAdditional_amd64/cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0143.928] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0143.928] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e4e0 | out: pbBuffer=0x1249e4e0) returned 1 [0143.929] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446214 | out: pbBuffer=0x12446214) returned 1 [0143.929] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1255ef02 | out: pbBuffer=0x1255ef02) returned 1 [0143.929] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1255efd2 | out: pbBuffer=0x1255efd2) returned 1 [0143.931] SetEvent (hEvent=0xa8) returned 1 [0143.931] ReadFile (in: hFile=0x178, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x59bde5, lpOverlapped=0x0) returned 1 [0144.055] CloseHandle (hObject=0x158) returned 1 [0144.055] CloseHandle (hObject=0x164) returned 1 [0144.055] SwitchToThread () returned 1 [0144.055] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0144.359] SetEvent (hEvent=0xa0) returned 1 [0144.359] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0144.447] SetEvent (hEvent=0xa0) returned 1 [0144.447] SwitchToThread () returned 1 [0144.525] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.144] SetEvent (hEvent=0xa0) returned 1 [0145.144] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0145.169] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.169] SetEvent (hEvent=0xa0) returned 1 [0145.169] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0145.277] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.404] SetEvent (hEvent=0xa8) returned 1 [0145.405] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.417] SetEvent (hEvent=0xa8) returned 1 [0145.417] SetEvent (hEvent=0x7c) returned 1 [0145.417] CloseHandle (hObject=0x11c) returned 1 [0145.417] CloseHandle (hObject=0x13c) returned 1 [0145.417] CloseHandle (hObject=0x100) returned 1 [0145.417] CloseHandle (hObject=0x98) returned 1 [0145.417] CloseHandle (hObject=0x150) returned 1 [0145.417] CloseHandle (hObject=0x188) returned 1 [0145.417] CloseHandle (hObject=0x134) returned 1 [0145.417] CloseHandle (hObject=0x130) returned 1 [0145.417] CloseHandle (hObject=0x160) returned 1 [0145.417] CloseHandle (hObject=0x114) returned 1 [0145.417] CloseHandle (hObject=0xf8) returned 1 [0145.417] CloseHandle (hObject=0xe8) returned 1 [0145.417] CloseHandle (hObject=0x164) returned 1 [0145.417] CloseHandle (hObject=0x178) returned 1 [0145.417] CloseHandle (hObject=0x158) returned 1 [0145.417] SwitchToThread () returned 1 [0145.418] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.423] SetEvent (hEvent=0x7c) returned 1 [0145.423] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0145.425] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.425] SetEvent (hEvent=0x7c) returned 1 [0145.425] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0145.426] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.426] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.451] SetEvent (hEvent=0x7c) returned 1 [0145.451] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.457] SetEvent (hEvent=0x7c) returned 1 [0145.457] SwitchToThread () returned 1 [0145.457] SetEvent (hEvent=0x7c) returned 1 [0145.457] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.465] SetEvent (hEvent=0xa0) returned 1 [0145.465] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0145.466] SetEvent (hEvent=0xa0) returned 1 [0145.466] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0145.469] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.469] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.552] SetEvent (hEvent=0xa0) returned 1 [0145.552] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.553] SetEvent (hEvent=0xa0) returned 1 [0145.553] SetEvent (hEvent=0xa8) returned 1 [0145.553] CloseHandle (hObject=0xbc) returned 1 [0145.553] CloseHandle (hObject=0xf8) returned 1 [0145.553] CloseHandle (hObject=0xe8) returned 1 [0145.553] SwitchToThread () returned 1 [0145.556] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.597] SetEvent (hEvent=0xa8) returned 1 [0145.597] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0145.598] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.598] SetEvent (hEvent=0xa8) returned 1 [0145.598] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0145.684] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0145.684] SetEvent (hEvent=0xac) returned 1 [0145.684] SetEvent (hEvent=0x7c) returned 1 [0145.684] ReadFile (in: hFile=0x134, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x2fa9, lpOverlapped=0x0) returned 1 [0145.685] GetFileType (hFile=0x134) returned 0x1 [0145.685] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0145.685] WriteFile (in: hFile=0x134, lpBuffer=0x124d0000*, nNumberOfBytesToWrite=0x2fa9, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x124d0000*, lpNumberOfBytesWritten=0x12429950*=0x2fa9, lpOverlapped=0x1242995c) returned 1 [0145.685] GetFileType (hFile=0x134) returned 0x1 [0145.685] SetFilePointerEx (in: hFile=0x134, liDistanceToMove=0x2fa9, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0145.685] ReadFile (in: hFile=0x134, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0145.685] CloseHandle (hObject=0x134) returned 1 [0145.686] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0145.686] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0145.686] WriteFile (in: hFile=0x134, lpBuffer=0x127c8240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x127c8240*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0145.686] CloseHandle (hObject=0x134) returned 1 [0145.686] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d8000*, nNumberOfCharsToWrite=0x64, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124d8000*, lpNumberOfCharsWritten=0x12429624*=0x64) returned 1 [0145.687] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.687] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.687] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.687] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.687] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.687] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0145.687] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0145.688] CloseHandle (hObject=0x134) returned 1 [0145.688] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.689] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.689] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0145.689] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0145.690] WriteFile (in: hFile=0x134, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0145.690] CloseHandle (hObject=0x134) returned 1 [0145.691] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.691] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.691] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.691] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8236e90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8236e90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8236e90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8236e90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8236e90, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8236e90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8236e90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0145.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0145.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0145.691] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.691] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.691] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.691] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.691] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/CurrentDatabase_372.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0145.692] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.692] ReadFile (in: hFile=0x134, lpBuffer=0x1255c200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255c200*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.694] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/LocalMLS_3.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0145.696] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.696] ReadFile (in: hFile=0x114, lpBuffer=0x1255c300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255c300*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.697] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.697] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.698] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.698] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/CurrentDatabase_372.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000)) returned 1 [0145.698] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/LocalMLS_3.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c)) returned 1 [0145.698] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.698] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.699] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.699] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.699] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.699] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.699] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0145.699] CloseHandle (hObject=0x1b0) returned 1 [0145.699] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.699] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.699] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.700] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0145.700] WriteFile (in: hFile=0x1b0, lpBuffer=0x12774600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12774600*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0145.701] CloseHandle (hObject=0x1b0) returned 1 [0145.701] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.701] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.701] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.701] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8236e90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8236e90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.701] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8236e90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8236e90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.701] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8236e90, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8236e90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8236e90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.701] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0145.702] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.702] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.702] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.702] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.702] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.702] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.702] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.702] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.702] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.702] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.702] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.702] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.703] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.703] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0145.703] CloseHandle (hObject=0x1b0) returned 1 [0145.703] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.703] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.703] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.703] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0145.704] WriteFile (in: hFile=0x1b0, lpBuffer=0x12776c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x12776c00*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0145.704] CloseHandle (hObject=0x1b0) returned 1 [0145.705] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.705] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.705] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.705] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x825cff0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x825cff0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.705] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x825cff0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x825cff0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.705] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1 [0145.705] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x825cff0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x825cff0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x825cff0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.705] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.705] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.705] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.705] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.707] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.707] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.707] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.708] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.708] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.708] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.709] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0145.709] WriteFile (in: hFile=0x1b0, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0145.710] CloseHandle (hObject=0x1b0) returned 1 [0145.710] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.710] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.710] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.710] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x825cff0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x825cff0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.710] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x825cff0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x825cff0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.710] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0145.710] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0145.710] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0145.710] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0145.710] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0145.710] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0145.710] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0145.710] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0145.711] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0145.711] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0145.711] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0145.711] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0145.711] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x825cff0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x825cff0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x825cff0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.711] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.711] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.711] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0145.711] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0145.711] ReadFile (in: hFile=0x1b0, lpBuffer=0x1255c400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1255c400*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0145.713] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0145.714] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0145.714] ReadFile (in: hFile=0x158, lpBuffer=0x1255c600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1255c600*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0145.715] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0145.715] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0145.716] ReadFile (in: hFile=0x178, lpBuffer=0x1255c700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1255c700*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0145.717] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0145.718] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0145.718] ReadFile (in: hFile=0x164, lpBuffer=0x1255c900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1255c900*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0145.720] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0145.720] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0145.720] ReadFile (in: hFile=0xe8, lpBuffer=0x1255cb00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1255cb00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0145.721] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0145.722] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0145.722] ReadFile (in: hFile=0xf8, lpBuffer=0x1255cc00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1255cc00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0145.723] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0145.724] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0145.724] ReadFile (in: hFile=0xbc, lpBuffer=0x1255cd00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1255cd00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0145.725] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0145.725] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0145.726] ReadFile (in: hFile=0x160, lpBuffer=0x1255ce00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1255ce00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0145.730] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/09_Music_played_the_most.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0145.731] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0145.731] ReadFile (in: hFile=0x130, lpBuffer=0x1255cf00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1255cf00*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0145.732] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/10_All_Music.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0145.733] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0145.733] ReadFile (in: hFile=0x188, lpBuffer=0x1255d000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1255d000*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0145.734] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/11_All_Pictures.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0145.734] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0145.735] ReadFile (in: hFile=0x150, lpBuffer=0x1255d100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1255d100*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0145.736] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/12_All_Video.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0145.736] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0145.736] ReadFile (in: hFile=0x98, lpBuffer=0x1255d200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x1255d200*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0145.738] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.738] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.738] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0145.738] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1 [0145.738] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1 [0145.738] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1 [0145.738] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1 [0145.739] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1 [0145.739] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0145.739] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1 [0145.739] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/09_Music_played_the_most.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1 [0145.739] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/10_All_Music.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1 [0145.739] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/11_All_Pictures.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1 [0145.739] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/12_All_Video.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1 [0145.739] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.739] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.739] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.739] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.739] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.739] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/00010C6E/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0145.740] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0145.740] CloseHandle (hObject=0x100) returned 1 [0145.740] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.740] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.740] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.740] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.740] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0145.740] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Media Player/Sync Playlists/en-US/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0145.740] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0145.740] CloseHandle (hObject=0x100) returned 1 [0145.741] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.741] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.741] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0145.742] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0145.742] WriteFile (in: hFile=0x100, lpBuffer=0x12491300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12491300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0145.743] CloseHandle (hObject=0x100) returned 1 [0145.743] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt")) returned 0x2020 [0145.743] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0145.743] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.743] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x82b8cb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x82b8cb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x82b8cb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x82b8cb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x82b8cb0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x82b8cb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x82bdad0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeold.xml", cAlternateFileName="")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7b05332, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2e234eb, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1 [0145.744] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.744] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.744] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.744] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.744] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.745] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.745] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.745] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0145.745] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0145.746] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0145.747] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/WindowsMail.MSMessageStore" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0145.747] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.747] ReadFile (in: hFile=0x100, lpBuffer=0x1255d900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255d900*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.749] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0145.749] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.749] ReadFile (in: hFile=0x13c, lpBuffer=0x1255da00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255da00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.751] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0145.752] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.752] ReadFile (in: hFile=0x11c, lpBuffer=0x1255db00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255db00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.753] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0145.754] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.754] ReadFile (in: hFile=0x170, lpBuffer=0x1255dc00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255dc00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.755] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174 [0145.755] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.755] ReadFile (in: hFile=0x174, lpBuffer=0x1255dd00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255dd00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.757] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/edb.chk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf4 [0145.757] GetConsoleMode (in: hConsoleHandle=0xf4, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.757] ReadFile (in: hFile=0xf4, lpBuffer=0x1255df00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x1255df00*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.759] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/edb.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x14c [0145.759] GetConsoleMode (in: hConsoleHandle=0x14c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.759] ReadFile (in: hFile=0x14c, lpBuffer=0x124b6100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b6100*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.761] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x140 [0145.761] GetConsoleMode (in: hConsoleHandle=0x140, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.762] ReadFile (in: hFile=0x140, lpBuffer=0x124b6200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b6200*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.763] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/edbres00001.jrs" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0145.763] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.764] ReadFile (in: hFile=0x108, lpBuffer=0x124b6300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b6300*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.766] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/edbres00002.jrs" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0145.766] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.766] ReadFile (in: hFile=0xdc, lpBuffer=0x124b6400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b6400*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.768] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0145.784] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0145.790] ReadFile (in: hFile=0x17c, lpBuffer=0x124b6600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b6600*, lpNumberOfBytesRead=0x12429a88*=0x100, lpOverlapped=0x0) returned 1 [0145.791] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/WindowsMail.MSMessageStore" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7b05332, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x204000)) returned 1 [0145.791] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2e234eb, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0145.791] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0145.791] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0145.792] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442840 | out: pbBuffer=0x12442840) returned 1 [0145.792] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446600 | out: pbBuffer=0x12446600) returned 1 [0145.792] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6702 | out: pbBuffer=0x124b6702) returned 1 [0145.792] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b6702 | out: pbBuffer=0x124b6702) returned 1 [0145.794] SetEvent (hEvent=0xa8) returned 1 [0145.794] ReadFile (in: hFile=0x138, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x4000, lpOverlapped=0x0) returned 1 [0145.794] GetFileType (hFile=0x138) returned 0x1 [0145.794] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0145.794] WriteFile (in: hFile=0x138, lpBuffer=0x12452000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x12429950, lpOverlapped=0x1242995c | out: lpBuffer=0x12452000*, lpNumberOfBytesWritten=0x12429950*=0x4000, lpOverlapped=0x1242995c) returned 1 [0145.794] GetFileType (hFile=0x138) returned 0x1 [0145.794] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x12429934 | out: lpNewFilePointer=0x0) returned 1 [0145.795] ReadFile (in: hFile=0x138, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242996c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242996c*=0x0, lpOverlapped=0x0) returned 1 [0145.795] CloseHandle (hObject=0x138) returned 1 [0145.795] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0145.795] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0145.795] WriteFile (in: hFile=0x138, lpBuffer=0x1249cd80*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429960, lpOverlapped=0x0 | out: lpBuffer=0x1249cd80*, lpNumberOfBytesWritten=0x12429960*=0x108, lpOverlapped=0x0) returned 1 [0145.795] CloseHandle (hObject=0x138) returned 1 [0145.795] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d8b60*, nNumberOfCharsToWrite=0x63, lpNumberOfCharsWritten=0x12429624, lpReserved=0x0 | out: lpBuffer=0x124d8b60*, lpNumberOfCharsWritten=0x12429624*=0x63) returned 1 [0145.796] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4)) returned 1 [0145.796] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0145.796] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1 [0145.796] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/edb.chk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0145.796] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/edb.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0145.796] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/edb.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0145.796] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x1242995c | out: lpMode=0x1242995c) returned 0 [0145.797] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0145.798] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0145.798] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124b6002 | out: pbBuffer=0x124b6002) returned 1 [0145.798] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b6083 | out: pbBuffer=0x124b6083) returned 1 [0145.798] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124b6099 | out: pbBuffer=0x124b6099) returned 1 [0145.799] CloseHandle (hObject=0x140) returned 1 [0145.799] CloseHandle (hObject=0x14c) returned 1 [0145.799] CloseHandle (hObject=0xf4) returned 1 [0145.799] CloseHandle (hObject=0x174) returned 1 [0145.799] CloseHandle (hObject=0x170) returned 1 [0145.799] CloseHandle (hObject=0x11c) returned 1 [0145.799] CloseHandle (hObject=0x13c) returned 1 [0145.799] CloseHandle (hObject=0x100) returned 1 [0145.799] CloseHandle (hObject=0x98) returned 1 [0145.799] CloseHandle (hObject=0x150) returned 1 [0145.799] CloseHandle (hObject=0x188) returned 1 [0145.799] CloseHandle (hObject=0x130) returned 1 [0145.799] CloseHandle (hObject=0x160) returned 1 [0145.799] CloseHandle (hObject=0xbc) returned 1 [0145.800] CloseHandle (hObject=0xf8) returned 1 [0145.800] CloseHandle (hObject=0xe8) returned 1 [0145.800] CloseHandle (hObject=0x164) returned 1 [0145.800] CloseHandle (hObject=0x178) returned 1 [0145.800] CloseHandle (hObject=0x158) returned 1 [0145.800] CloseHandle (hObject=0x1b0) returned 1 [0145.800] CloseHandle (hObject=0x114) returned 1 [0145.800] CloseHandle (hObject=0x134) returned 1 [0145.800] CloseHandle (hObject=0x17c) returned 1 [0145.800] CloseHandle (hObject=0xdc) returned 1 [0145.800] CloseHandle (hObject=0x108) returned 1 [0145.800] SwitchToThread () returned 1 [0145.801] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.813] SetEvent (hEvent=0x7c) returned 1 [0145.813] SetEvent (hEvent=0xa0) returned 1 [0145.813] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.909] SetEvent (hEvent=0x7c) returned 1 [0145.909] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.909] SetEvent (hEvent=0x7c) returned 1 [0145.909] SetEvent (hEvent=0xa0) returned 1 [0145.910] SwitchToThread () returned 1 [0145.910] SetEvent (hEvent=0x7c) returned 1 [0145.910] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.930] SetEvent (hEvent=0xa0) returned 1 [0145.931] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0145.948] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.948] SetEvent (hEvent=0xa0) returned 1 [0145.948] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0145.949] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.949] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.974] SetEvent (hEvent=0xa0) returned 1 [0145.974] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.974] SetEvent (hEvent=0xa0) returned 1 [0145.974] SetEvent (hEvent=0xa8) returned 1 [0145.974] CloseHandle (hObject=0xdc) returned 1 [0145.975] CloseHandle (hObject=0x108) returned 1 [0145.975] CloseHandle (hObject=0x138) returned 1 [0145.975] SwitchToThread () returned 1 [0145.977] SetEvent (hEvent=0x7c) returned 1 [0145.977] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0145.993] SetEvent (hEvent=0xa8) returned 1 [0145.993] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0146.015] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.015] SetEvent (hEvent=0xa8) returned 1 [0146.015] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.015] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.016] SetEvent (hEvent=0xa8) returned 1 [0146.027] GetFileType (hFile=0x17c) returned 0x1 [0146.028] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0146.028] WriteFile (in: hFile=0x17c, lpBuffer=0x1300a000*, nNumberOfBytesToWrite=0x200000, lpNumberOfBytesWritten=0x12429800, lpOverlapped=0x1242980c | out: lpBuffer=0x1300a000*, lpNumberOfBytesWritten=0x12429800*=0x200000, lpOverlapped=0x1242980c) returned 1 [0146.035] GetFileType (hFile=0x17c) returned 0x1 [0146.035] SetFilePointerEx (in: hFile=0x17c, liDistanceToMove=0x200000, lpNewFilePointer=0x0, dwMoveMethod=0x124297e4 | out: lpNewFilePointer=0x0) returned 1 [0146.035] ReadFile (in: hFile=0x17c, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x1242981c, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x1242981c*=0x0, lpOverlapped=0x0) returned 1 [0146.035] CloseHandle (hObject=0x17c) returned 1 [0146.036] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.036] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x1242980c | out: lpMode=0x1242980c) returned 0 [0146.037] WriteFile (in: hFile=0x17c, lpBuffer=0x12466240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429810, lpOverlapped=0x0 | out: lpBuffer=0x12466240*, lpNumberOfBytesWritten=0x12429810*=0x108, lpOverlapped=0x0) returned 1 [0146.053] CloseHandle (hObject=0x17c) returned 1 [0146.053] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124b6000*, nNumberOfCharsToWrite=0x6b, lpNumberOfCharsWritten=0x124294d4, lpReserved=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfCharsWritten=0x124294d4*=0x6b) returned 1 [0146.054] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.054] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.054] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.054] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.054] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.054] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Backup/new/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.054] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0146.055] CloseHandle (hObject=0x17c) returned 1 [0146.055] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.055] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.055] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.056] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0146.056] WriteFile (in: hFile=0x17c, lpBuffer=0x12471900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12471900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0146.057] CloseHandle (hObject=0x17c) returned 1 [0146.057] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.058] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.058] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.058] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x85a5540, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x85a5540, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x85a5540, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x85a5540, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x85a5540, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x85a5540, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x85a7c50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="GREENB~1.HTM")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="GREENB~1.JPG")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="HANDPR~1.HTM")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="HANDPR~1.JPG")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="ORANGE~1.HTM")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="ORANGE~1.JPG")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0146.058] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0146.059] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0146.059] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="SHADES~1.HTM")) returned 1 [0146.059] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="SHADES~1.JPG")) returned 1 [0146.059] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="SOFTBL~1.HTM")) returned 1 [0146.059] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0146.059] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0146.059] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0146.059] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.059] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.059] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.059] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.059] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.059] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.060] ReadFile (in: hFile=0x17c, lpBuffer=0x124d8500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d8500*, lpNumberOfBytesRead=0x124299e0*=0xff, lpOverlapped=0x0) returned 1 [0146.061] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0146.061] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.061] ReadFile (in: hFile=0x138, lpBuffer=0x124d8600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d8600*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.062] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0146.063] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.063] ReadFile (in: hFile=0x108, lpBuffer=0x124d8700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d8700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.064] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0146.064] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.064] ReadFile (in: hFile=0xdc, lpBuffer=0x124d8800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d8800*, lpNumberOfBytesRead=0x124299e0*=0xe7, lpOverlapped=0x0) returned 1 [0146.065] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0146.066] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.066] ReadFile (in: hFile=0x134, lpBuffer=0x124d8900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d8900*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.068] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Green Bubbles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.068] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.068] ReadFile (in: hFile=0x114, lpBuffer=0x124d8a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d8a00*, lpNumberOfBytesRead=0x124299e0*=0xed, lpOverlapped=0x0) returned 1 [0146.069] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0146.070] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.070] ReadFile (in: hFile=0x1b0, lpBuffer=0x124d8b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d8b00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.071] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Hand Prints.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0146.072] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.072] ReadFile (in: hFile=0x158, lpBuffer=0x124d8c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d8c00*, lpNumberOfBytesRead=0x124299e0*=0xeb, lpOverlapped=0x0) returned 1 [0146.073] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0146.073] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.073] ReadFile (in: hFile=0x178, lpBuffer=0x124d8d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d8d00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.075] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Orange Circles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0146.075] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.076] ReadFile (in: hFile=0x164, lpBuffer=0x124d8e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d8e00*, lpNumberOfBytesRead=0x124299e0*=0xed, lpOverlapped=0x0) returned 1 [0146.077] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0146.077] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.077] ReadFile (in: hFile=0xe8, lpBuffer=0x124d8f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d8f00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.079] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0146.079] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.079] ReadFile (in: hFile=0xf8, lpBuffer=0x124d9000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9000*, lpNumberOfBytesRead=0x124299e0*=0xe8, lpOverlapped=0x0) returned 1 [0146.080] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0146.080] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.081] ReadFile (in: hFile=0xbc, lpBuffer=0x124d9100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9100*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.083] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0146.083] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.083] ReadFile (in: hFile=0x160, lpBuffer=0x124d9200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9200*, lpNumberOfBytesRead=0x124299e0*=0xe9, lpOverlapped=0x0) returned 1 [0146.084] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0146.084] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.084] ReadFile (in: hFile=0x130, lpBuffer=0x124d9300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9300*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.086] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Shades of Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0146.086] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.086] ReadFile (in: hFile=0x188, lpBuffer=0x124d9400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9400*, lpNumberOfBytesRead=0x124299e0*=0xed, lpOverlapped=0x0) returned 1 [0146.087] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x150 [0146.087] GetConsoleMode (in: hConsoleHandle=0x150, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.087] ReadFile (in: hFile=0x150, lpBuffer=0x124d9500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9500*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.089] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Soft Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0146.090] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.090] ReadFile (in: hFile=0x98, lpBuffer=0x124d9600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9600*, lpNumberOfBytesRead=0x124299e0*=0xe8, lpOverlapped=0x0) returned 1 [0146.091] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100 [0146.091] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.091] ReadFile (in: hFile=0x100, lpBuffer=0x124d9700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.093] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x13c [0146.094] GetConsoleMode (in: hConsoleHandle=0x13c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.094] ReadFile (in: hFile=0x13c, lpBuffer=0x124d9800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9800*, lpNumberOfBytesRead=0x124299e0*=0xe6, lpOverlapped=0x0) returned 1 [0146.095] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c [0146.095] GetConsoleMode (in: hConsoleHandle=0x11c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.095] ReadFile (in: hFile=0x11c, lpBuffer=0x124d9900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124d9900*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.097] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1 [0146.097] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.097] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.097] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442320 | out: pbBuffer=0x12442320) returned 1 [0146.098] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124462f0 | out: pbBuffer=0x124462f0) returned 1 [0146.098] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d9a02 | out: pbBuffer=0x124d9a02) returned 1 [0146.098] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d9a48 | out: pbBuffer=0x124d9a48) returned 1 [0146.098] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d9a71 | out: pbBuffer=0x124d9a71) returned 1 [0146.099] SetEvent (hEvent=0x7c) returned 1 [0146.100] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0xff, lpOverlapped=0x0) returned 1 [0146.100] GetFileType (hFile=0x170) returned 0x1 [0146.100] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.100] WriteFile (in: hFile=0x170, lpBuffer=0x124d9c00*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124d9c00*, lpNumberOfBytesWritten=0x124298a8*=0xff, lpOverlapped=0x124298b4) returned 1 [0146.100] GetFileType (hFile=0x170) returned 0x1 [0146.100] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.100] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.100] CloseHandle (hObject=0x170) returned 1 [0146.100] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.101] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.101] WriteFile (in: hFile=0x170, lpBuffer=0x12466fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x12466fc0*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.101] CloseHandle (hObject=0x170) returned 1 [0146.101] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c21a0*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124c21a0*, lpNumberOfCharsWritten=0x1242957c*=0x68) returned 1 [0146.102] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0146.102] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.102] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.102] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.103] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x124d8002 | out: pbBuffer=0x124d8002) returned 1 [0146.103] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x124d800d | out: pbBuffer=0x124d800d) returned 1 [0146.105] CloseHandle (hObject=0x100) returned 1 [0146.105] CloseHandle (hObject=0x98) returned 1 [0146.105] CloseHandle (hObject=0x150) returned 1 [0146.105] CloseHandle (hObject=0x188) returned 1 [0146.105] CloseHandle (hObject=0x130) returned 1 [0146.105] CloseHandle (hObject=0x160) returned 1 [0146.105] CloseHandle (hObject=0xbc) returned 1 [0146.105] CloseHandle (hObject=0xf8) returned 1 [0146.105] CloseHandle (hObject=0xe8) returned 1 [0146.105] CloseHandle (hObject=0x164) returned 1 [0146.105] CloseHandle (hObject=0x178) returned 1 [0146.105] CloseHandle (hObject=0x158) returned 1 [0146.105] CloseHandle (hObject=0x1b0) returned 1 [0146.105] CloseHandle (hObject=0x114) returned 1 [0146.105] CloseHandle (hObject=0x134) returned 1 [0146.105] CloseHandle (hObject=0xdc) returned 1 [0146.105] CloseHandle (hObject=0x108) returned 1 [0146.105] CloseHandle (hObject=0x138) returned 1 [0146.105] CloseHandle (hObject=0x17c) returned 1 [0146.125] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.127] SetEvent (hEvent=0xa8) returned 1 [0146.127] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.128] SetEvent (hEvent=0xa8) returned 1 [0146.128] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.130] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.130] SetEvent (hEvent=0xa8) returned 1 [0146.130] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0xe7, lpOverlapped=0x0) returned 1 [0146.131] GetFileType (hFile=0x170) returned 0x1 [0146.131] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.131] WriteFile (in: hFile=0x170, lpBuffer=0x124d8000*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124d8000*, lpNumberOfBytesWritten=0x124298a8*=0xe7, lpOverlapped=0x124298b4) returned 1 [0146.131] GetFileType (hFile=0x170) returned 0x1 [0146.131] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xe7, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.131] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.131] CloseHandle (hObject=0x170) returned 1 [0146.131] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.131] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.132] WriteFile (in: hFile=0x170, lpBuffer=0x125786c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x125786c0*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.132] CloseHandle (hObject=0x170) returned 1 [0146.132] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d2000*, nNumberOfCharsToWrite=0x69, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124d2000*, lpNumberOfCharsWritten=0x1242957c*=0x69) returned 1 [0146.132] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f)) returned 1 [0146.132] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.132] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.133] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.133] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.133] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c09c | out: pbBuffer=0x1248c09c) returned 1 [0146.134] SwitchToThread () returned 1 [0146.135] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.137] SetEvent (hEvent=0x7c) returned 1 [0146.137] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.139] SetEvent (hEvent=0x7c) returned 1 [0146.139] SwitchToThread () returned 1 [0146.139] SetEvent (hEvent=0x7c) returned 1 [0146.139] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.141] SetEvent (hEvent=0xa8) returned 1 [0146.141] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.142] SetEvent (hEvent=0xa8) returned 1 [0146.142] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0146.144] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.144] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0146.145] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.145] SetEvent (hEvent=0xac) returned 1 [0146.145] SetEvent (hEvent=0xa8) returned 1 [0146.145] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x1906, lpOverlapped=0x0) returned 1 [0146.145] GetFileType (hFile=0x170) returned 0x1 [0146.145] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.145] WriteFile (in: hFile=0x170, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x1906, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x124298a8*=0x1906, lpOverlapped=0x124298b4) returned 1 [0146.145] GetFileType (hFile=0x170) returned 0x1 [0146.145] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1906, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.145] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.145] CloseHandle (hObject=0x170) returned 1 [0146.146] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.146] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.146] WriteFile (in: hFile=0x170, lpBuffer=0x12578240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x12578240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.146] CloseHandle (hObject=0x170) returned 1 [0146.146] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d20e0*, nNumberOfCharsToWrite=0x6f, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124d20e0*, lpNumberOfCharsWritten=0x1242957c*=0x6f) returned 1 [0146.147] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Hand Prints.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0146.147] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Hand Prints.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.147] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.147] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.148] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0146.148] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.148] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.148] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c051 | out: pbBuffer=0x1248c051) returned 1 [0146.149] SwitchToThread () returned 1 [0146.149] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.151] SetEvent (hEvent=0x7c) returned 1 [0146.151] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.154] SetEvent (hEvent=0x7c) returned 1 [0146.154] SwitchToThread () returned 1 [0146.154] SetEvent (hEvent=0x7c) returned 1 [0146.154] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.155] SetEvent (hEvent=0xa8) returned 1 [0146.155] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.156] SetEvent (hEvent=0xa8) returned 1 [0146.156] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.159] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.159] SetEvent (hEvent=0xa8) returned 1 [0146.159] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0xed, lpOverlapped=0x0) returned 1 [0146.159] GetFileType (hFile=0x170) returned 0x1 [0146.159] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.159] WriteFile (in: hFile=0x170, lpBuffer=0x124d8000*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124d8000*, lpNumberOfBytesWritten=0x124298a8*=0xed, lpOverlapped=0x124298b4) returned 1 [0146.159] GetFileType (hFile=0x170) returned 0x1 [0146.159] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xed, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.159] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.159] CloseHandle (hObject=0x170) returned 1 [0146.160] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Orange Circles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.160] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.160] WriteFile (in: hFile=0x170, lpBuffer=0x125786c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x125786c0*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.160] CloseHandle (hObject=0x170) returned 1 [0146.160] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d81e0*, nNumberOfCharsToWrite=0x71, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124d81e0*, lpNumberOfCharsWritten=0x1242957c*=0x71) returned 1 [0146.161] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed)) returned 1 [0146.161] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.161] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.161] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.162] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446074 | out: pbBuffer=0x12446074) returned 1 [0146.162] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.162] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c032 | out: pbBuffer=0x1248c032) returned 1 [0146.163] SwitchToThread () returned 1 [0146.164] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.166] SetEvent (hEvent=0x7c) returned 1 [0146.166] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.169] SetEvent (hEvent=0x7c) returned 1 [0146.169] SwitchToThread () returned 1 [0146.169] SetEvent (hEvent=0x7c) returned 1 [0146.169] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.170] SetEvent (hEvent=0xa8) returned 1 [0146.170] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.171] SetEvent (hEvent=0xa8) returned 1 [0146.171] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.173] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.173] SetEvent (hEvent=0xa8) returned 1 [0146.173] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x13fb, lpOverlapped=0x0) returned 1 [0146.174] GetFileType (hFile=0x170) returned 0x1 [0146.174] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.174] WriteFile (in: hFile=0x170, lpBuffer=0x124c0000*, nNumberOfBytesToWrite=0x13fb, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124c0000*, lpNumberOfBytesWritten=0x124298a8*=0x13fb, lpOverlapped=0x124298b4) returned 1 [0146.174] GetFileType (hFile=0x170) returned 0x1 [0146.174] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x13fb, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.174] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.174] CloseHandle (hObject=0x170) returned 1 [0146.174] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.174] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.174] WriteFile (in: hFile=0x170, lpBuffer=0x12578240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x12578240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.175] CloseHandle (hObject=0x170) returned 1 [0146.175] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d20e0*, nNumberOfCharsToWrite=0x6a, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124d20e0*, lpNumberOfCharsWritten=0x1242957c*=0x6a) returned 1 [0146.175] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1 [0146.175] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Roses.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.175] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.175] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.176] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x12446114 | out: pbBuffer=0x12446114) returned 1 [0146.176] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.176] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x1, pbBuffer=0x1248c01f | out: pbBuffer=0x1248c01f) returned 1 [0146.177] SwitchToThread () returned 1 [0146.177] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.179] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.180] SetEvent (hEvent=0x7c) returned 1 [0146.180] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.182] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.437] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.447] SetEvent (hEvent=0xa8) returned 1 [0146.448] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.461] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.479] SetEvent (hEvent=0x7c) returned 1 [0146.479] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.487] SetEvent (hEvent=0x7c) returned 1 [0146.487] SwitchToThread () returned 1 [0146.495] SetEvent (hEvent=0x7c) returned 1 [0146.495] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.513] SetEvent (hEvent=0xa8) returned 1 [0146.513] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.529] SetEvent (hEvent=0xa8) returned 1 [0146.529] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.544] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x0 [0146.545] SetEvent (hEvent=0xac) returned 1 [0146.545] SetEvent (hEvent=0xa8) returned 1 [0146.545] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0xe8, lpOverlapped=0x0) returned 1 [0146.546] GetFileType (hFile=0x170) returned 0x1 [0146.546] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.546] WriteFile (in: hFile=0x170, lpBuffer=0x124c0000*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124c0000*, lpNumberOfBytesWritten=0x124298a8*=0xe8, lpOverlapped=0x124298b4) returned 1 [0146.546] GetFileType (hFile=0x170) returned 0x1 [0146.546] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.546] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.546] CloseHandle (hObject=0x170) returned 1 [0146.547] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Soft Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.547] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.553] WriteFile (in: hFile=0x170, lpBuffer=0x125786c0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x125786c0*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.553] CloseHandle (hObject=0x170) returned 1 [0146.553] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124d8000*, nNumberOfCharsToWrite=0x6c, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124d8000*, lpNumberOfCharsWritten=0x1242957c*=0x6c) returned 1 [0146.567] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949)) returned 1 [0146.567] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.567] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.570] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x12442000 | out: pbBuffer=0x12442000) returned 1 [0146.574] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1248c002 | out: pbBuffer=0x1248c002) returned 1 [0146.575] SwitchToThread () returned 1 [0146.583] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.598] SetEvent (hEvent=0x7c) returned 1 [0146.598] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.616] SetEvent (hEvent=0x7c) returned 1 [0146.616] SwitchToThread () returned 1 [0146.620] SetEvent (hEvent=0x7c) returned 1 [0146.620] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.625] SetEvent (hEvent=0xa8) returned 1 [0146.625] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0146.666] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.666] SetEvent (hEvent=0xa8) returned 1 [0146.666] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0146.684] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.684] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0146.686] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0146.686] SetEvent (hEvent=0xac) returned 1 [0146.686] SetEvent (hEvent=0xa8) returned 1 [0146.686] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x1d51, lpOverlapped=0x0) returned 1 [0146.687] GetFileType (hFile=0x170) returned 0x1 [0146.687] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.687] WriteFile (in: hFile=0x170, lpBuffer=0x127fe000*, nNumberOfBytesToWrite=0x1d51, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x127fe000*, lpNumberOfBytesWritten=0x124298a8*=0x1d51, lpOverlapped=0x124298b4) returned 1 [0146.687] GetFileType (hFile=0x170) returned 0x1 [0146.687] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x1d51, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.687] ReadFile (in: hFile=0x170, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.687] CloseHandle (hObject=0x170) returned 1 [0146.687] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.688] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.691] WriteFile (in: hFile=0x170, lpBuffer=0x12578240*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x12578240*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.691] CloseHandle (hObject=0x170) returned 1 [0146.691] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c20d0*, nNumberOfCharsToWrite=0x68, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124c20d0*, lpNumberOfCharsWritten=0x1242957c*=0x68) returned 1 [0146.710] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.710] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.710] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.710] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.711] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.711] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Mail/Stationery/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.711] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0146.721] CloseHandle (hObject=0x170) returned 1 [0146.721] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.721] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.721] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.721] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0146.724] WriteFile (in: hFile=0x170, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0146.724] CloseHandle (hObject=0x170) returned 1 [0146.725] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.725] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.725] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.725] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8bf29c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8bf29c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.725] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8bf29c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8bf29c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.725] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1 [0146.725] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8bf29c0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8bf29c0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8bfc600, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.725] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.725] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.725] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.725] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.726] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.726] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.726] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.726] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.726] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.726] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.726] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0146.739] WriteFile (in: hFile=0x170, lpBuffer=0x12773300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12773300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0146.740] CloseHandle (hObject=0x170) returned 1 [0146.740] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.740] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.740] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.740] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8bfed10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8bfed10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.740] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8bfed10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8bfed10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.740] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8bfed10, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8bfed10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c20ff0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.740] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.DTD", cAlternateFileName="")) returned 1 [0146.741] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 1 [0146.741] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.741] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.741] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.741] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.741] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0/WMSDKNS.DTD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.741] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.742] ReadFile (in: hFile=0x170, lpBuffer=0x1255a700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1255a700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.743] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0/WMSDKNS.XML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.743] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.743] ReadFile (in: hFile=0x17c, lpBuffer=0x1255a800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x1255a800*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.745] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0/WMSDKNS.DTD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2)) returned 1 [0146.745] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0/WMSDKNS.DTD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0146.745] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.746] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1249e180 | out: pbBuffer=0x1249e180) returned 1 [0146.746] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x1255a902 | out: pbBuffer=0x1255a902) returned 1 [0146.748] SetEvent (hEvent=0x7c) returned 1 [0146.748] ReadFile (in: hFile=0x138, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x1f2, lpOverlapped=0x0) returned 1 [0146.748] GetFileType (hFile=0x138) returned 0x1 [0146.748] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.748] WriteFile (in: hFile=0x138, lpBuffer=0x124b6e00*, nNumberOfBytesToWrite=0x1f2, lpNumberOfBytesWritten=0x124298a8, lpOverlapped=0x124298b4 | out: lpBuffer=0x124b6e00*, lpNumberOfBytesWritten=0x124298a8*=0x1f2, lpOverlapped=0x124298b4) returned 1 [0146.748] GetFileType (hFile=0x138) returned 0x1 [0146.748] SetFilePointerEx (in: hFile=0x138, liDistanceToMove=0x1f2, lpNewFilePointer=0x0, dwMoveMethod=0x1242988c | out: lpNewFilePointer=0x0) returned 1 [0146.749] ReadFile (in: hFile=0x138, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x124298c4, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x124298c4*=0x0, lpOverlapped=0x0) returned 1 [0146.749] CloseHandle (hObject=0x138) returned 1 [0146.749] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0/WMSDKNS.DTD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0146.749] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124298b4 | out: lpMode=0x124298b4) returned 0 [0146.749] WriteFile (in: hFile=0x138, lpBuffer=0x12578fc0*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124298b8, lpOverlapped=0x0 | out: lpBuffer=0x12578fc0*, lpNumberOfBytesWritten=0x124298b8*=0x108, lpOverlapped=0x0) returned 1 [0146.749] CloseHandle (hObject=0x138) returned 1 [0146.750] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x124c2000*, nNumberOfCharsToWrite=0x65, lpNumberOfCharsWritten=0x1242957c, lpReserved=0x0 | out: lpBuffer=0x124c2000*, lpNumberOfCharsWritten=0x1242957c*=0x65) returned 1 [0146.750] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0/WMSDKNS.XML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf)) returned 1 [0146.750] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.750] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.750] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.751] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.751] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.751] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/12.0/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0146.751] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0146.751] CloseHandle (hObject=0x138) returned 1 [0146.751] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.752] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.752] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.752] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.752] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.752] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Media/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0146.752] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0146.752] CloseHandle (hObject=0x138) returned 1 [0146.752] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.752] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.752] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0146.753] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0146.753] WriteFile (in: hFile=0x138, lpBuffer=0x12472c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12472c00*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0146.754] CloseHandle (hObject=0x138) returned 1 [0146.754] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.754] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.754] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.754] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8c40bc0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c40bc0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.754] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8c40bc0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c40bc0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.755] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8c40bc0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8c40bc0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c432d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.755] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0146.755] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1 [0146.755] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.755] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.755] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.755] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.755] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.755] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.755] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.755] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Settings.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0146.756] GetConsoleMode (in: hConsoleHandle=0x138, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0146.756] ReadFile (in: hFile=0x138, lpBuffer=0x124b8200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x124b8200*, lpNumberOfBytesRead=0x12429a88*=0x54, lpOverlapped=0x0) returned 1 [0146.757] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Settings.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54)) returned 1 [0146.757] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.757] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.757] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.757] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.757] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.757] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.757] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0146.757] CloseHandle (hObject=0x170) returned 1 [0146.757] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.758] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.758] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.758] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0146.758] WriteFile (in: hFile=0x170, lpBuffer=0x124d1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x124d1300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0146.759] CloseHandle (hObject=0x170) returned 1 [0146.759] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.759] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.759] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.759] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8c4cf10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c4cf10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.760] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8c4cf10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c4cf10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.760] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8c4cf10, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8c4cf10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c4f620, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.760] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.760] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.760] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.760] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.760] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.760] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.760] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.760] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.760] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.760] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Microsoft/Windows Sidebar/Gadgets/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.760] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0146.761] CloseHandle (hObject=0x170) returned 1 [0146.761] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.761] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Temp\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.761] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.761] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0146.761] WriteFile (in: hFile=0x170, lpBuffer=0x124d3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x124d3900*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0146.762] CloseHandle (hObject=0x170) returned 1 [0146.762] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Temp\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.762] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Temp\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.763] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temp" (normalized: "c:\\users\\default\\appdata\\local\\temp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.763] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Temp\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8c54440, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c54440, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.763] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8c54440, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c54440, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.763] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8c54440, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8c54440, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c59260, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.763] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0146.763] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.763] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.763] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.763] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.763] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temp/FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170 [0146.763] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x12429b20 | out: lpMode=0x12429b20) returned 0 [0146.764] ReadFile (in: hFile=0x170, lpBuffer=0x124b8800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429b30, lpOverlapped=0x0 | out: lpBuffer=0x124b8800*, lpNumberOfBytesRead=0x12429b30*=0x0, lpOverlapped=0x0) returned 1 [0146.764] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.764] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.764] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.764] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.764] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.764] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temp/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.764] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0146.764] CloseHandle (hObject=0x17c) returned 1 [0146.764] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temp/FXSAPIDebugLogFile.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.765] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Temp/FXSAPIDebugLogFile.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.765] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temp/FXSAPIDebugLogFile.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.765] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Temp/FXSAPIDebugLogFile.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.765] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Temp/FXSAPIDebugLogFile.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.765] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temp/FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.765] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0146.765] CloseHandle (hObject=0x17c) returned 1 [0146.765] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.767] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.768] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.768] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0146.769] WriteFile (in: hFile=0x17c, lpBuffer=0x12491300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12491300*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0146.770] CloseHandle (hObject=0x17c) returned 1 [0146.770] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.770] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Local/Temporary Internet Files\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.770] CreateFileW (lpFileName="C:/Users/Default/AppData/Local/Temporary Internet Files" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.770] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Local/Temporary Internet Files\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.770] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.770] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.770] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.771] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0146.771] WriteFile (in: hFile=0x17c, lpBuffer=0x12492600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12492600*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0146.772] CloseHandle (hObject=0x17c) returned 1 [0146.772] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.772] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.772] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow" (normalized: "c:\\users\\default\\appdata\\locallow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.772] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8c6cae0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c6cae0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.772] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8c6cae0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c6cae0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.772] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8c6cae0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8c6cae0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c6f1f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.772] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0146.772] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.772] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.772] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.772] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.773] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.773] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.773] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.773] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.773] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.773] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.773] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.773] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.773] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.773] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0146.774] CloseHandle (hObject=0x17c) returned 1 [0146.774] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.774] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.774] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.774] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0146.774] WriteFile (in: hFile=0x17c, lpBuffer=0x12494c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x12494c00*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0146.775] CloseHandle (hObject=0x17c) returned 1 [0146.775] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.775] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.776] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.776] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8c74010, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c74010, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.776] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8c74010, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c74010, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.776] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8c74010, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8c74010, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c76720, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.776] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0146.776] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.776] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.776] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.776] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.776] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.776] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.776] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.777] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.777] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.777] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.777] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.777] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.777] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.777] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0146.777] CloseHandle (hObject=0x17c) returned 1 [0146.777] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.777] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.777] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.778] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0146.778] WriteFile (in: hFile=0x17c, lpBuffer=0x1255b300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1255b300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0146.779] CloseHandle (hObject=0x17c) returned 1 [0146.852] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.852] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.852] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.852] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8c7dc50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c7dc50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.852] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8c7dc50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c7dc50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.852] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8c7dc50, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8c7dc50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8c80360, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.852] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0146.852] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0146.852] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.852] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.852] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.853] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.853] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.853] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.853] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.853] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.853] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.853] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.853] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.853] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.854] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.854] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.854] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.854] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.854] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0146.854] CloseHandle (hObject=0x17c) returned 1 [0146.854] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.854] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.854] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.856] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0146.857] WriteFile (in: hFile=0x17c, lpBuffer=0x1255d900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1255d900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0146.857] CloseHandle (hObject=0x17c) returned 1 [0146.858] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.858] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.858] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.858] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d3c330, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d3c330, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.858] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d3c330, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d3c330, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.858] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0146.858] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0146.858] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8d39c20, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8d39c20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d41150, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.858] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.858] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.858] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c [0146.859] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.859] ReadFile (in: hFile=0x17c, lpBuffer=0x124b9700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124b9700*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.860] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108 [0146.860] GetConsoleMode (in: hConsoleHandle=0x108, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.860] ReadFile (in: hFile=0x108, lpBuffer=0x124b9800, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124b9800*, lpNumberOfBytesRead=0x124299e0*=0x0, lpOverlapped=0x0) returned 1 [0146.860] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.860] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.861] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0146.861] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/94308059B57B3142E455B38A6EB92015\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.861] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/94308059B57B3142E455B38A6EB92015\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.861] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/94308059B57B3142E455B38A6EB92015\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.861] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/94308059B57B3142E455B38A6EB92015\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.861] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/94308059B57B3142E455B38A6EB92015\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.861] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0146.861] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0146.861] CloseHandle (hObject=0xdc) returned 1 [0146.861] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.861] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.862] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.862] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.862] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.862] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/Content/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0146.862] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0146.862] CloseHandle (hObject=0xdc) returned 1 [0146.862] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.862] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.862] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0146.864] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0146.864] WriteFile (in: hFile=0xdc, lpBuffer=0x1257d300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1257d300*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0146.865] CloseHandle (hObject=0xdc) returned 1 [0146.865] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.865] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.865] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.865] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d4fbb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d4fbb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.865] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d4fbb0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d4fbb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.865] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0146.865] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0146.866] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8d4d4a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8d4d4a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d522c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.866] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.866] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.866] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xdc [0146.866] GetConsoleMode (in: hConsoleHandle=0xdc, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.866] ReadFile (in: hFile=0xdc, lpBuffer=0x124b9900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124b9900*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.867] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0146.867] GetConsoleMode (in: hConsoleHandle=0x134, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.867] ReadFile (in: hFile=0x134, lpBuffer=0x124b9a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x124b9a00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.868] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.868] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.868] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0146.868] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0146.869] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.869] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.869] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.869] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.869] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.869] CreateFileW (lpFileName="C:/Users/Default/AppData/LocalLow/Microsoft/CryptnetUrlCache/MetaData/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.869] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0146.869] CloseHandle (hObject=0x114) returned 1 [0146.869] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.869] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.869] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.870] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0146.870] WriteFile (in: hFile=0x114, lpBuffer=0x1257f900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x1257f900*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0146.871] CloseHandle (hObject=0x114) returned 1 [0146.871] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.871] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.871] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming" (normalized: "c:\\users\\default\\appdata\\roaming"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.871] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8d5e610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d5e610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.871] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8d5e610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d5e610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.871] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8d5e610, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8d5e610, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d60d20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.871] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0146.871] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0146.871] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.872] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.872] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.872] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.872] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities" (normalized: "c:\\users\\default\\appdata\\roaming\\identities"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.872] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Identities\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.872] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.872] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.872] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.873] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.874] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.874] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.874] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.874] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124298f8 | out: lpFindFileData=0x124298f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.874] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.875] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.875] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429afc | out: lpMode=0x12429afc) returned 0 [0146.875] CloseHandle (hObject=0x114) returned 1 [0146.875] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.875] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Identities\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.875] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.875] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0146.876] WriteFile (in: hFile=0x114, lpBuffer=0x1258a000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x1258a000*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0146.877] CloseHandle (hObject=0x114) returned 1 [0146.877] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Identities\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.877] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Identities\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.877] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities" (normalized: "c:\\users\\default\\appdata\\roaming\\identities"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.877] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Identities\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d6a960, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d6a960, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.877] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d6a960, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d6a960, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.877] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8d6a960, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8d6a960, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d6f780, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.877] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0146.877] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.877] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.877] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.877] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.877] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.878] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.878] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.878] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.878] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.878] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.878] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.878] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.878] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.878] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0146.878] CloseHandle (hObject=0x114) returned 1 [0146.878] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.879] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.879] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.879] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0146.879] WriteFile (in: hFile=0x114, lpBuffer=0x1258c600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1258c600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0146.880] CloseHandle (hObject=0x114) returned 1 [0146.880] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.880] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.880] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.880] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d745a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d745a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.881] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d745a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d745a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.881] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8d745a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8d745a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d76cb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.881] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.881] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.881] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.881] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.881] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.881] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.881] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.881] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.881] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.881] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Identities/{31810C36-5D23-4CCE-A3B4-316DED195C38}/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.881] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0146.882] CloseHandle (hObject=0x114) returned 1 [0146.882] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.882] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.883] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.883] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429bc0 | out: lpMode=0x12429bc0) returned 0 [0146.883] WriteFile (in: hFile=0x114, lpBuffer=0x1258ec00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429bc4, lpOverlapped=0x0 | out: lpBuffer=0x1258ec00*, lpNumberOfBytesWritten=0x12429bc4*=0x1033, lpOverlapped=0x0) returned 1 [0146.884] CloseHandle (hObject=0x114) returned 1 [0146.884] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.884] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.885] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.885] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft\\*", lpFindFileData=0x12429834 | out: lpFindFileData=0x12429834*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8d7e1e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d7e1e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.885] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8d7e1e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d7e1e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.885] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8d7e1e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8d7e1e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d808f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.885] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0146.885] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0146.885] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0146.885] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0146.885] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0146.885] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0146.885] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124298b0 | out: lpFindFileData=0x124298b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.885] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.885] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.885] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.885] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.886] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.886] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.886] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.886] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.886] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.886] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.886] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.886] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.886] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.887] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.887] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.887] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.887] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.887] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.887] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Windows" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.887] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Windows\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.889] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.890] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.890] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.890] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.890] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429850 | out: lpFindFileData=0x12429850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.890] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.890] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.890] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429a54 | out: lpMode=0x12429a54) returned 0 [0146.891] CloseHandle (hObject=0x114) returned 1 [0146.891] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.891] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.891] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.891] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0146.891] WriteFile (in: hFile=0x114, lpBuffer=0x12459300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12459300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0146.892] CloseHandle (hObject=0x114) returned 1 [0146.892] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.892] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.893] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.893] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d91a60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d91a60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.893] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d91a60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d91a60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.893] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8d91a60, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8d91a60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d94170, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.893] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.893] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.893] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.893] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.893] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.893] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.893] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.893] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.893] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.894] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Credentials/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.894] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0146.894] CloseHandle (hObject=0x114) returned 1 [0146.894] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.894] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.894] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.894] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0146.895] WriteFile (in: hFile=0x114, lpBuffer=0x1245b900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x1245b900*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0146.895] CloseHandle (hObject=0x114) returned 1 [0146.896] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.896] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.896] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.896] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d98f90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d98f90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.896] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d98f90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d98f90, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.896] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8d98f90, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8d98f90, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8d9ddb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.896] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0146.896] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.896] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.896] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.896] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.896] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.897] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.897] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.897] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.897] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.897] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.897] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.897] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.897] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.897] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0146.897] CloseHandle (hObject=0x114) returned 1 [0146.897] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.898] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.898] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.898] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0146.898] WriteFile (in: hFile=0x114, lpBuffer=0x1256e000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x1256e000*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0146.899] CloseHandle (hObject=0x114) returned 1 [0146.899] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.899] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.899] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.899] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8da2bd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8da2bd0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.900] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8da2bd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8da2bd0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.900] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8da2bd0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8da2bd0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8da52e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.900] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.900] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.900] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.900] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.900] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.900] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.900] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.900] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.900] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.900] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Crypto/RSA/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.900] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0146.901] CloseHandle (hObject=0x114) returned 1 [0146.901] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.901] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.901] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.901] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0146.901] WriteFile (in: hFile=0x114, lpBuffer=0x12570600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x12570600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0146.902] CloseHandle (hObject=0x114) returned 1 [0146.902] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt")) returned 0x20 [0146.902] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0146.903] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.903] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8daa100, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8daa100, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.903] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8daa100, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8daa100, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.903] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8daa100, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8daa100, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8daef20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.903] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0146.903] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.903] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.903] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.903] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.903] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.903] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.905] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.905] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.905] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.906] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.906] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.906] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.906] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.906] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0146.906] CloseHandle (hObject=0x114) returned 1 [0146.906] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.907] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.907] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.907] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0146.907] WriteFile (in: hFile=0x114, lpBuffer=0x12572c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x12572c00*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0146.908] CloseHandle (hObject=0x114) returned 1 [0146.908] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt")) returned 0x20 [0146.909] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0146.909] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.909] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8db8b60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8db8b60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8db8b60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8db8b60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8db8b60, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8db8b60, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8dbd980, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0146.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1 [0146.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0146.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0146.909] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.909] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.909] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.909] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.909] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114 [0146.910] GetConsoleMode (in: hConsoleHandle=0x114, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.910] ReadFile (in: hFile=0x114, lpBuffer=0x12456b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12456b00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.911] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.911] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.911] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.911] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0146.911] GetConsoleMode (in: hConsoleHandle=0x1b0, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.911] ReadFile (in: hFile=0x1b0, lpBuffer=0x12456c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12456c00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.912] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x158 [0146.913] GetConsoleMode (in: hConsoleHandle=0x158, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.913] ReadFile (in: hFile=0x158, lpBuffer=0x12456d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12456d00*, lpNumberOfBytesRead=0x124299e0*=0x92, lpOverlapped=0x0) returned 1 [0146.914] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0146.914] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0146.914] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92)) returned 1 [0146.914] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.914] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.914] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.914] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.914] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.914] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0146.914] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0146.915] CloseHandle (hObject=0x178) returned 1 [0146.915] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.915] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.915] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0146.916] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0146.917] WriteFile (in: hFile=0x178, lpBuffer=0x127b1300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x127b1300*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0146.918] CloseHandle (hObject=0x178) returned 1 [0146.918] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt")) returned 0x20 [0146.918] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0146.918] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.918] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8dceaf0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8dceaf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.918] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8dceaf0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8dceaf0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.918] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8dcc3e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8dcc3e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8dd3910, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.918] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0146.918] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0146.918] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.918] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.918] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.919] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.919] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.919] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.919] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.919] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.919] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.921] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.921] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.921] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.921] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.921] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.922] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.922] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0146.922] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0146.922] CloseHandle (hObject=0x178) returned 1 [0146.922] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.922] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.922] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0146.922] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0146.923] WriteFile (in: hFile=0x178, lpBuffer=0x127b3900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x127b3900*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0146.924] CloseHandle (hObject=0x178) returned 1 [0146.924] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt")) returned 0x20 [0146.924] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0146.924] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.924] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8ddd550, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8ddd550, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.924] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8ddd550, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8ddd550, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.924] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8ddd550, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8ddd550, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8de2370, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.924] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.924] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.924] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.924] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.924] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.925] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.925] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.925] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.925] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.925] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/ImplicitAppShortcuts/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0146.925] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0146.925] CloseHandle (hObject=0x178) returned 1 [0146.925] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.926] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.926] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0146.926] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429920 | out: lpMode=0x12429920) returned 0 [0146.927] WriteFile (in: hFile=0x178, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429924, lpOverlapped=0x0 | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x12429924*=0x1033, lpOverlapped=0x0) returned 1 [0146.928] CloseHandle (hObject=0x178) returned 1 [0146.928] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt")) returned 0x20 [0146.928] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0146.928] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.928] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar\\*", lpFindFileData=0x12429594 | out: lpFindFileData=0x12429594*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8de7190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8de7190, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.928] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8de7190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8de7190, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.928] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8de7190, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8de7190, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8debfb0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.928] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0146.928] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0146.928] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0146.928] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0146.928] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429610 | out: lpFindFileData=0x12429610*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.928] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.928] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.928] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.929] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x178 [0146.929] GetConsoleMode (in: hConsoleHandle=0x178, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0146.929] ReadFile (in: hFile=0x178, lpBuffer=0x12457400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12457400*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0146.931] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0146.931] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0146.931] ReadFile (in: hFile=0x164, lpBuffer=0x12457500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12457500*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0146.932] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe8 [0146.933] GetConsoleMode (in: hConsoleHandle=0xe8, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0146.933] ReadFile (in: hFile=0xe8, lpBuffer=0x12457600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12457600*, lpNumberOfBytesRead=0x12429890*=0x100, lpOverlapped=0x0) returned 1 [0146.934] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf8 [0146.934] GetConsoleMode (in: hConsoleHandle=0xf8, lpMode=0x12429880 | out: lpMode=0x12429880) returned 0 [0146.935] ReadFile (in: hFile=0xf8, lpBuffer=0x12457700, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429890, lpOverlapped=0x0 | out: lpBuffer=0x12457700*, lpNumberOfBytesRead=0x12429890*=0xd3, lpOverlapped=0x0) returned 1 [0146.935] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9)) returned 1 [0146.936] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc)) returned 1 [0146.936] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b)) returned 1 [0146.936] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429668 | out: lpFileInformation=0x12429668*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3)) returned 1 [0146.936] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.936] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b8 | out: lpFindFileData=0x124295b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.936] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.936] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124295b0 | out: lpFindFileData=0x124295b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.936] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.936] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/User Pinned/TaskBar/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0146.936] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x124297b4 | out: lpMode=0x124297b4) returned 0 [0146.936] CloseHandle (hObject=0xbc) returned 1 [0146.937] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.937] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.937] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0146.937] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0146.937] WriteFile (in: hFile=0xbc, lpBuffer=0x127d0600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x127d0600*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0146.938] CloseHandle (hObject=0xbc) returned 1 [0146.938] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.938] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.939] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.939] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e01f40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e01f40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e01f40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e01f40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8e01f40, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e01f40, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e04650, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0146.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0146.939] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.939] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.939] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.939] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.939] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/CREDHIST" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\credhist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbc [0146.939] GetConsoleMode (in: hConsoleHandle=0xbc, lpMode=0x12429a78 | out: lpMode=0x12429a78) returned 0 [0146.940] ReadFile (in: hFile=0xbc, lpBuffer=0x12457900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429a88, lpOverlapped=0x0 | out: lpBuffer=0x12457900*, lpNumberOfBytesRead=0x12429a88*=0x18, lpOverlapped=0x0) returned 1 [0146.940] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.940] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.942] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.943] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/CREDHIST" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\credhist"), fInfoLevelId=0x0, lpFileInformation=0x12429860 | out: lpFileInformation=0x12429860*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0146.943] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.943] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.943] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.943] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.943] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.943] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0146.943] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0146.943] CloseHandle (hObject=0x160) returned 1 [0146.943] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.944] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.944] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0146.944] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0146.945] WriteFile (in: hFile=0x160, lpBuffer=0x127d2c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x127d2c00*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0146.946] CloseHandle (hObject=0x160) returned 1 [0146.946] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.946] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.946] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.946] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e130b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e130b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.946] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e130b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e130b0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.946] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8e130b0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e130b0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e17ed0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.946] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1 [0146.946] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0146.946] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.946] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.946] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.946] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.946] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/Preferred" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0146.947] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.947] ReadFile (in: hFile=0x160, lpBuffer=0x12457e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12457e00*, lpNumberOfBytesRead=0x124299e0*=0x18, lpOverlapped=0x0) returned 1 [0146.948] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130 [0146.948] GetConsoleMode (in: hConsoleHandle=0x130, lpMode=0x124299d0 | out: lpMode=0x124299d0) returned 0 [0146.948] ReadFile (in: hFile=0x130, lpBuffer=0x12457f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x124299e0, lpOverlapped=0x0 | out: lpBuffer=0x12457f00*, lpNumberOfBytesRead=0x124299e0*=0x100, lpOverlapped=0x0) returned 1 [0146.949] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/Preferred" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0146.949] GetFileAttributesExW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), fInfoLevelId=0x0, lpFileInformation=0x124297b8 | out: lpFileInformation=0x124297b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0146.949] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.949] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.950] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.950] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.950] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.950] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/Protect/S-1-5-21-3111613574-2524581245-2586426736-500/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0146.950] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0146.950] CloseHandle (hObject=0x188) returned 1 [0146.950] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.950] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429858 | out: lpFindFileData=0x12429858*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.950] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0146.951] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12429b18 | out: lpMode=0x12429b18) returned 0 [0146.951] WriteFile (in: hFile=0x188, lpBuffer=0x127db300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429b1c, lpOverlapped=0x0 | out: lpBuffer=0x127db300*, lpNumberOfBytesWritten=0x12429b1c*=0x1033, lpOverlapped=0x0) returned 1 [0146.952] CloseHandle (hObject=0x188) returned 1 [0146.952] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.952] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.952] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.952] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates\\*", lpFindFileData=0x1242978c | out: lpFindFileData=0x1242978c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e24220, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e24220, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.952] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e24220, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e24220, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.952] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8e24220, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e24220, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e26930, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.952] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0146.952] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429808 | out: lpFindFileData=0x12429808*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.952] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.952] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.952] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.953] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.953] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.953] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.953] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.953] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.953] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.953] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297a8 | out: lpFindFileData=0x124297a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.953] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.953] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0146.953] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x124299ac | out: lpMode=0x124299ac) returned 0 [0146.954] CloseHandle (hObject=0x188) returned 1 [0146.954] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.954] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124297b0 | out: lpFindFileData=0x124297b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.954] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0146.954] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12429a70 | out: lpMode=0x12429a70) returned 0 [0146.954] WriteFile (in: hFile=0x188, lpBuffer=0x127dd900*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429a74, lpOverlapped=0x0 | out: lpBuffer=0x127dd900*, lpNumberOfBytesWritten=0x12429a74*=0x1033, lpOverlapped=0x0) returned 1 [0146.955] CloseHandle (hObject=0x188) returned 1 [0146.955] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.955] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.956] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.956] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My\\*", lpFindFileData=0x124296e4 | out: lpFindFileData=0x124296e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e2b750, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e2b750, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.956] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e2b750, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e2b750, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.956] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8e2b750, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e2b750, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e30570, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.956] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0146.956] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1 [0146.956] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1 [0146.956] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429760 | out: lpFindFileData=0x12429760*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.956] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.956] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.956] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.956] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.956] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.957] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.957] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.957] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.958] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.958] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.958] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.958] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.958] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.958] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.958] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.958] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429700 | out: lpFindFileData=0x12429700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.958] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.958] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0146.958] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x12429904 | out: lpMode=0x12429904) returned 0 [0146.958] CloseHandle (hObject=0x188) returned 1 [0146.959] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.959] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.959] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0146.959] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0146.959] WriteFile (in: hFile=0x188, lpBuffer=0x124a8000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124a8000*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0146.960] CloseHandle (hObject=0x188) returned 1 [0146.960] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.960] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.964] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.965] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e37aa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e37aa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.965] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e37aa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e37aa0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.965] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8e37aa0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e37aa0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e3c8c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.965] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.965] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.965] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.965] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.965] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.965] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.965] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.965] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.965] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.965] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CRLs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0146.966] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0146.966] CloseHandle (hObject=0x188) returned 1 [0146.966] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.966] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.966] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0146.966] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0146.967] WriteFile (in: hFile=0x188, lpBuffer=0x124aa600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124aa600*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0146.967] CloseHandle (hObject=0x188) returned 1 [0146.968] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.968] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.968] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.968] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e48c10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e48c10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.968] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e48c10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e48c10, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.968] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8e48c10, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e48c10, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e4da30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.968] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.968] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.968] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.968] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.968] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.969] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.969] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.969] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.969] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.969] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/CTLs/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0146.969] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0146.969] CloseHandle (hObject=0x188) returned 1 [0146.969] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.969] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429708 | out: lpFindFileData=0x12429708*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.969] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0146.970] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x124299c8 | out: lpMode=0x124299c8) returned 0 [0146.970] WriteFile (in: hFile=0x188, lpBuffer=0x124acc00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x124299cc, lpOverlapped=0x0 | out: lpBuffer=0x124acc00*, lpNumberOfBytesWritten=0x124299cc*=0x1033, lpOverlapped=0x0) returned 1 [0146.971] CloseHandle (hObject=0x188) returned 1 [0146.971] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.971] SetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.971] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.971] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates\\*", lpFindFileData=0x1242963c | out: lpFindFileData=0x1242963c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e52850, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e52850, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0146.971] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e52850, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e52850, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.971] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x2021, ftCreationTime.dwLowDateTime=0x8e52850, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e52850, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e54f60, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.971] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x124296b8 | out: lpFindFileData=0x124296b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.971] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.972] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.972] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.972] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.972] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429660 | out: lpFindFileData=0x12429660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.972] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.972] FindFirstFileW (in: lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429658 | out: lpFindFileData=0x12429658*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.972] GetFileAttributesW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0146.972] CreateFileW (lpFileName="C:/Users/Default/AppData/Roaming/Microsoft/SystemCertificates/My/Certificates/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188 [0146.972] GetConsoleMode (in: hConsoleHandle=0x188, lpMode=0x1242985c | out: lpMode=0x1242985c) returned 0 [0146.972] CloseHandle (hObject=0x188) returned 1 [0146.973] CreateFileW (lpFileName="C:/Users/Default/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\application data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.973] FindFirstFileW (in: lpFileName="C:/Users/Default/Application Data\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.973] CreateFileW (lpFileName="C:/Users/Default/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\application data\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.973] FindFirstFileW (in: lpFileName="C:/Users/Default/Application Data\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.973] GetFileAttributesW (lpFileName="C:/Users/Default/Application Data\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\application data\\@_read_to_recover_files_@.txt")) returned 0x2021 [0146.973] SetFileAttributesW (lpFileName="C:/Users/Default/Application Data\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.973] CreateFileW (lpFileName="C:/Users/Default/Application Data" (normalized: "c:\\users\\default\\application data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.973] FindFirstFileW (in: lpFileName="C:/Users/Default/Application Data\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.973] CreateFileW (lpFileName="C:/Users/Default/Contacts\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\contacts\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0146.973] FindFirstFileW (in: lpFileName="C:/Users/Default/Contacts\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0146.975] SetFileAttributesW (lpFileName="C:/Users/Default/Contacts\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0146.976] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8e5c490, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e5c490, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.976] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8e5c490, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e5c490, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e5eba0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.976] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0146.976] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0146.976] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.976] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.983] GetConsoleMode (in: hConsoleHandle=0x98, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0146.983] WriteFile (in: hFile=0x98, lpBuffer=0x127eec00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x127eec00*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0146.984] CloseHandle (hObject=0x98) returned 1 [0146.984] GetFileAttributesW (lpFileName="C:/Users/Default/Cookies\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\default\\cookies\\@_read_to_recover_files_@.txt")) returned 0x2020 [0146.985] SetFileAttributesW (lpFileName="C:/Users/Default/Cookies\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0146.986] SetFileAttributesW (lpFileName="C:/Users/Default/Desktop\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0146.986] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8e77240, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e77240, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.987] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8e77240, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e77240, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e79950, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.987] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0146.987] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.987] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.990] SetFileAttributesW (lpFileName="C:/Users/Default/Documents\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0146.990] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8e80e80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e80e80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.990] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8e80e80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e80e80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e83590, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.990] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0146.990] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0146.990] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0146.990] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0146.990] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.991] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0146.994] SetFileAttributesW (lpFileName="C:/Users/Default/Documents/My Music\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0146.995] SetFileAttributesW (lpFileName="C:/Users/Default/Documents/My Pictures\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0146.997] SetFileAttributesW (lpFileName="C:/Users/Default/Documents/My Videos\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0146.998] SetFileAttributesW (lpFileName="C:/Users/Default/Downloads\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0146.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8e94700, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e94700, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8e94700, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e94700, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e99520, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0146.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0146.999] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.999] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.002] SetFileAttributesW (lpFileName="C:/Users/Default/Favorites\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.003] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8e9e340, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e9e340, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.003] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8e9e340, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e9e340, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8ea0a50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.003] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.003] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0147.003] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0147.003] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0147.003] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0147.003] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.003] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.012] SetFileAttributesW (lpFileName="C:/Users/Default/Favorites/Links\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.013] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8eb69e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8eb69e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.013] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8eb69e0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8eb69e0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8ebb800, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.013] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.013] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0147.013] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.013] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.017] SetFileAttributesW (lpFileName="C:/Users/Default/Favorites/MSN Websites\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.018] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8ec2d30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8ec2d30, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.018] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8ec2d30, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8ec2d30, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8ec5440, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.018] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0147.018] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0147.018] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0147.018] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0147.018] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0147.018] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0147.018] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.018] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.027] SetFileAttributesW (lpFileName="C:/Users/Default/Favorites/Microsoft Websites\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8edb3d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8edb3d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8edb3d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8edb3d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8eddae0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0147.027] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0147.028] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0147.028] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0147.028] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0147.028] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.028] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.035] SetFileAttributesW (lpFileName="C:/Users/Default/Favorites/Windows Live\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.036] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8eeec50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8eeec50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.036] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8eeec50, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8eeec50, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8ef1360, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.036] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0147.036] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0147.036] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0147.036] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0147.036] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.036] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.044] SetFileAttributesW (lpFileName="C:/Users/Default/Links\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.044] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8f024d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f024d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.044] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8f024d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8f024d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f072f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.044] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.044] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0147.044] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0147.044] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0147.044] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.044] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.050] SetFileAttributesW (lpFileName="C:/Users/Default/Local Settings\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0147.050] SetFileAttributesW (lpFileName="C:/Users/Default/Music\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.050] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8e8aac0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e8aac0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.050] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8e8aac0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e8aac0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e8d1d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.050] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.050] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.050] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.052] SetFileAttributesW (lpFileName="C:/Users/Default/My Documents\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.054] SetFileAttributesW (lpFileName="C:/Users/Default/NetHood\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0147.054] SetFileAttributesW (lpFileName="C:/Users/Default/Pictures\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.054] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8e8d1d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e8d1d0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.054] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8e8d1d0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e8d1d0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e8f8e0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.054] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.054] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.054] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.057] SetFileAttributesW (lpFileName="C:/Users/Default/PrintHood\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0147.061] SetFileAttributesW (lpFileName="C:/Users/Default/Recent\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.062] SetFileAttributesW (lpFileName="C:/Users/Default/Saved Games\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.063] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8f30b00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f30b00, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.063] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8f30b00, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8f30b00, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f33210, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.063] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.063] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.063] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.066] SetFileAttributesW (lpFileName="C:/Users/Default/Searches\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.066] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8f3a740, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f3a740, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.066] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8f3a740, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8f3a740, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f3ce50, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.066] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.066] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0147.066] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0147.067] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.067] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.073] SetFileAttributesW (lpFileName="C:/Users/Default/SendTo\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0147.074] SetFileAttributesW (lpFileName="C:/Users/Default/Start Menu\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.076] SetFileAttributesW (lpFileName="C:/Users/Default/Templates\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x2021) returned 1 [0147.077] SetFileAttributesW (lpFileName="C:/Users/Default/Videos\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.077] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8e91ff0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e91ff0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.077] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8e91ff0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8e91ff0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8e94700, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.077] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.077] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.077] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.079] SetFileAttributesW (lpFileName="C:/Users/Default User\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.081] SetFileAttributesW (lpFileName="C:/Users/Public\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8f5ca20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f5ca20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8f5ca20, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8f5ca20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f61840, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x524b550, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x524b550, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0147.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5252a80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5252a80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0147.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0147.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52578a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52578a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0147.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0147.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0147.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0147.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1 [0147.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0147.081] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429aa8 | out: lpFindFileData=0x12429aa8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.081] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.081] CreateFileW (lpFileName="C:/Users/Public/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.081] FindFirstFileW (in: lpFileName="C:/Users/Public/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.082] CreateFileW (lpFileName="C:/Users/Public/Desktop" (normalized: "c:\\users\\public\\desktop"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.082] FindFirstFileW (in: lpFileName="C:/Users/Public/Desktop\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x524b550, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x524b550, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.082] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.082] CreateFileW (lpFileName="C:/Users/Public/Documents" (normalized: "c:\\users\\public\\documents"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.082] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5252a80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5252a80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.082] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.082] CreateFileW (lpFileName="C:/Users/Public/Downloads" (normalized: "c:\\users\\public\\downloads"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.082] FindFirstFileW (in: lpFileName="C:/Users/Public/Downloads\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.082] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.082] CreateFileW (lpFileName="C:/Users/Public/Favorites" (normalized: "c:\\users\\public\\favorites"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.082] FindFirstFileW (in: lpFileName="C:/Users/Public/Favorites\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52578a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52578a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.083] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.083] CreateFileW (lpFileName="C:/Users/Public/Libraries" (normalized: "c:\\users\\public\\libraries"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.083] FindFirstFileW (in: lpFileName="C:/Users/Public/Libraries\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.083] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.083] CreateFileW (lpFileName="C:/Users/Public/Music" (normalized: "c:\\users\\public\\music"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.083] FindFirstFileW (in: lpFileName="C:/Users/Public/Music\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.083] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.083] CreateFileW (lpFileName="C:/Users/Public/Pictures" (normalized: "c:\\users\\public\\pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.084] FindFirstFileW (in: lpFileName="C:/Users/Public/Pictures\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.084] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.084] CreateFileW (lpFileName="C:/Users/Public/Recorded TV" (normalized: "c:\\users\\public\\recorded tv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.084] FindFirstFileW (in: lpFileName="C:/Users/Public/Recorded TV\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.084] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.084] CreateFileW (lpFileName="C:/Users/Public/Videos" (normalized: "c:\\users\\public\\videos"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.084] FindFirstFileW (in: lpFileName="C:/Users/Public/Videos\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.084] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.084] CreateFileW (lpFileName="C:/Users/Public/desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x190 [0147.085] GetConsoleMode (in: hConsoleHandle=0x190, lpMode=0x12429d18 | out: lpMode=0x12429d18) returned 0 [0147.085] ReadFile (in: hFile=0x190, lpBuffer=0x12782900, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429d28, lpOverlapped=0x0 | out: lpBuffer=0x12782900*, lpNumberOfBytesRead=0x12429d28*=0xae, lpOverlapped=0x0) returned 1 [0147.086] GetFileAttributesExW (in: lpFileName="C:/Users/Public/desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429b00 | out: lpFileInformation=0x12429b00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0147.086] CreateFileW (lpFileName="C:/Users/Public/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.086] FindFirstFileW (in: lpFileName="C:/Users/Public/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.086] CreateFileW (lpFileName="C:/Users/Public/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.086] FindFirstFileW (in: lpFileName="C:/Users/Public/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.086] GetFileAttributesW (lpFileName="C:/Users/Public/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0147.086] CreateFileW (lpFileName="C:/Users/Public/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0147.086] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429c4c | out: lpMode=0x12429c4c) returned 0 [0147.086] CloseHandle (hObject=0x154) returned 1 [0147.087] CreateFileW (lpFileName="C:/Users/Public/Desktop\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\desktop\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.087] FindFirstFileW (in: lpFileName="C:/Users/Public/Desktop\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.087] CreateFileW (lpFileName="C:/Users/Public/Desktop\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\desktop\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.087] FindFirstFileW (in: lpFileName="C:/Users/Public/Desktop\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.087] GetFileAttributesW (lpFileName="C:/Users/Public/Desktop\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\desktop\\@_read_to_recover_files_@.txt")) returned 0x21 [0147.087] SetFileAttributesW (lpFileName="C:/Users/Public/Desktop\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.088] CreateFileW (lpFileName="C:/Users/Public/Desktop" (normalized: "c:\\users\\public\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.088] FindFirstFileW (in: lpFileName="C:/Users/Public/Desktop\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x524b550, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x524b550, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.088] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x524b550, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x524b550, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.088] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x524b550, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x524b550, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5250370, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.088] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0147.088] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.088] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0147.088] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0147.088] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.088] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.088] CreateFileW (lpFileName="C:/Users/Public/Desktop/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\desktop\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.088] FindFirstFileW (in: lpFileName="C:/Users/Public/Desktop/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.088] CreateFileW (lpFileName="C:/Users/Public/Desktop/Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0147.089] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0147.089] ReadFile (in: hFile=0x154, lpBuffer=0x12782a00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12782a00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0147.089] CreateFileW (lpFileName="C:/Users/Public/Desktop/Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104 [0147.090] GetConsoleMode (in: hConsoleHandle=0x104, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0147.090] ReadFile (in: hFile=0x104, lpBuffer=0x12782b00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12782b00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0147.090] CreateFileW (lpFileName="C:/Users/Public/Desktop/Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xf0 [0147.091] GetConsoleMode (in: hConsoleHandle=0xf0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0147.091] ReadFile (in: hFile=0xf0, lpBuffer=0x12782c00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12782c00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0147.091] CreateFileW (lpFileName="C:/Users/Public/Desktop/desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd8 [0147.092] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0147.092] ReadFile (in: hFile=0xd8, lpBuffer=0x12782d00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12782d00*, lpNumberOfBytesRead=0x12429c80*=0xae, lpOverlapped=0x0) returned 1 [0147.092] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Desktop/Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9)) returned 1 [0147.092] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Desktop/Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1)) returned 1 [0147.092] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Desktop/Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485)) returned 1 [0147.092] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Desktop/desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0147.092] CreateFileW (lpFileName="C:/Users/Public/Desktop/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\desktop\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.092] FindFirstFileW (in: lpFileName="C:/Users/Public/Desktop/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.092] CreateFileW (lpFileName="C:/Users/Public/Desktop/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\desktop\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.092] FindFirstFileW (in: lpFileName="C:/Users/Public/Desktop/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.093] GetFileAttributesW (lpFileName="C:/Users/Public/Desktop/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\desktop\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0147.093] CreateFileW (lpFileName="C:/Users/Public/Desktop/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\desktop\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0147.093] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0147.093] CloseHandle (hObject=0xcc) returned 1 [0147.093] CreateFileW (lpFileName="C:/Users/Public/Documents\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.093] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.093] CreateFileW (lpFileName="C:/Users/Public/Documents\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.093] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.093] GetFileAttributesW (lpFileName="C:/Users/Public/Documents\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\@_read_to_recover_files_@.txt")) returned 0x21 [0147.093] SetFileAttributesW (lpFileName="C:/Users/Public/Documents\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.093] CreateFileW (lpFileName="C:/Users/Public/Documents" (normalized: "c:\\users\\public\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.094] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5252a80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5252a80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.094] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5252a80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5252a80, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.094] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x5252a80, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x5252a80, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x5255190, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.094] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.094] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0147.094] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0147.094] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0147.094] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.094] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.094] CreateFileW (lpFileName="C:/Users/Public/Documents/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.094] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.094] CreateFileW (lpFileName="C:/Users/Public/Documents/My Music" (normalized: "c:\\users\\public\\documents\\my music"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.094] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents/My Music\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.094] CreateFileW (lpFileName="C:/Users/Public/Documents/My Pictures" (normalized: "c:\\users\\public\\documents\\my pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.094] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents/My Pictures\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.094] CreateFileW (lpFileName="C:/Users/Public/Documents/My Videos" (normalized: "c:\\users\\public\\documents\\my videos"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.095] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents/My Videos\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.095] CreateFileW (lpFileName="C:/Users/Public/Documents/desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xcc [0147.095] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0147.095] ReadFile (in: hFile=0xcc, lpBuffer=0x12782e00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12782e00*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0147.096] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Documents/desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1 [0147.096] CreateFileW (lpFileName="C:/Users/Public/Documents/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.096] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.096] CreateFileW (lpFileName="C:/Users/Public/Documents/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.096] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.096] GetFileAttributesW (lpFileName="C:/Users/Public/Documents/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0147.096] CreateFileW (lpFileName="C:/Users/Public/Documents/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0147.096] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0147.096] CloseHandle (hObject=0xe0) returned 1 [0147.096] CreateFileW (lpFileName="C:/Users/Public/Documents/My Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\my music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.096] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents/My Music\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.097] CreateFileW (lpFileName="C:/Users/Public/Documents/My Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\my music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0147.097] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0147.097] WriteFile (in: hFile=0xe0, lpBuffer=0x12536c00*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12536c00*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0147.098] CloseHandle (hObject=0xe0) returned 1 [0147.098] GetFileAttributesW (lpFileName="C:/Users/Public/Documents/My Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\my music\\@_read_to_recover_files_@.txt")) returned 0x20 [0147.098] SetFileAttributesW (lpFileName="C:/Users/Public/Documents/My Music\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.098] CreateFileW (lpFileName="C:/Users/Public/Documents/My Music" (normalized: "c:\\users\\public\\documents\\my music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.099] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents/My Music\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.099] CreateFileW (lpFileName="C:/Users/Public/Documents/My Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\my pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.099] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents/My Pictures\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.099] CreateFileW (lpFileName="C:/Users/Public/Documents/My Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\my pictures\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0147.099] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0147.099] WriteFile (in: hFile=0xe0, lpBuffer=0x12542000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12542000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0147.100] CloseHandle (hObject=0xe0) returned 1 [0147.100] GetFileAttributesW (lpFileName="C:/Users/Public/Documents/My Pictures\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\my pictures\\@_read_to_recover_files_@.txt")) returned 0x20 [0147.100] SetFileAttributesW (lpFileName="C:/Users/Public/Documents/My Pictures\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.101] CreateFileW (lpFileName="C:/Users/Public/Documents/My Pictures" (normalized: "c:\\users\\public\\documents\\my pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.101] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents/My Pictures\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.101] CreateFileW (lpFileName="C:/Users/Public/Documents/My Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\my videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.101] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents/My Videos\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.101] CreateFileW (lpFileName="C:/Users/Public/Documents/My Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\my videos\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0147.101] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0147.101] WriteFile (in: hFile=0xe0, lpBuffer=0x12543300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x12543300*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0147.102] CloseHandle (hObject=0xe0) returned 1 [0147.102] GetFileAttributesW (lpFileName="C:/Users/Public/Documents/My Videos\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\documents\\my videos\\@_read_to_recover_files_@.txt")) returned 0x20 [0147.103] SetFileAttributesW (lpFileName="C:/Users/Public/Documents/My Videos\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.103] CreateFileW (lpFileName="C:/Users/Public/Documents/My Videos" (normalized: "c:\\users\\public\\documents\\my videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.103] FindFirstFileW (in: lpFileName="C:/Users/Public/Documents/My Videos\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.103] CreateFileW (lpFileName="C:/Users/Public/Downloads\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\downloads\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.103] FindFirstFileW (in: lpFileName="C:/Users/Public/Downloads\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.103] CreateFileW (lpFileName="C:/Users/Public/Downloads\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\downloads\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0147.104] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0147.104] WriteFile (in: hFile=0xe0, lpBuffer=0x12544600*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12544600*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0147.105] CloseHandle (hObject=0xe0) returned 1 [0147.105] GetFileAttributesW (lpFileName="C:/Users/Public/Downloads\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\downloads\\@_read_to_recover_files_@.txt")) returned 0x20 [0147.105] SetFileAttributesW (lpFileName="C:/Users/Public/Downloads\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.105] CreateFileW (lpFileName="C:/Users/Public/Downloads" (normalized: "c:\\users\\public\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.105] FindFirstFileW (in: lpFileName="C:/Users/Public/Downloads\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8f973a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f973a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.105] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8f973a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f973a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.105] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8f973a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8f973a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f9c1c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.105] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.105] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.105] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.105] CreateFileW (lpFileName="C:/Users/Public/Downloads/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\downloads\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.105] FindFirstFileW (in: lpFileName="C:/Users/Public/Downloads/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.106] CreateFileW (lpFileName="C:/Users/Public/Downloads/desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xe0 [0147.106] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0147.106] ReadFile (in: hFile=0xe0, lpBuffer=0x12782f00, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12782f00*, lpNumberOfBytesRead=0x12429c80*=0xae, lpOverlapped=0x0) returned 1 [0147.107] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Downloads/desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0147.107] CreateFileW (lpFileName="C:/Users/Public/Downloads/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\downloads\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.107] FindFirstFileW (in: lpFileName="C:/Users/Public/Downloads/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.107] CreateFileW (lpFileName="C:/Users/Public/Downloads/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\downloads\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.107] FindFirstFileW (in: lpFileName="C:/Users/Public/Downloads/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.107] GetFileAttributesW (lpFileName="C:/Users/Public/Downloads/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\downloads\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0147.107] CreateFileW (lpFileName="C:/Users/Public/Downloads/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\downloads\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0147.108] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0147.108] CloseHandle (hObject=0xec) returned 1 [0147.108] CreateFileW (lpFileName="C:/Users/Public/Favorites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\favorites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.108] FindFirstFileW (in: lpFileName="C:/Users/Public/Favorites\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.108] CreateFileW (lpFileName="C:/Users/Public/Favorites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\favorites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.108] FindFirstFileW (in: lpFileName="C:/Users/Public/Favorites\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.108] GetFileAttributesW (lpFileName="C:/Users/Public/Favorites\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\favorites\\@_read_to_recover_files_@.txt")) returned 0x21 [0147.108] SetFileAttributesW (lpFileName="C:/Users/Public/Favorites\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.108] CreateFileW (lpFileName="C:/Users/Public/Favorites" (normalized: "c:\\users\\public\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.108] FindFirstFileW (in: lpFileName="C:/Users/Public/Favorites\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52578a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52578a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.108] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x52578a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x52578a0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.109] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x52578a0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x52578a0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x525c6c0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.109] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.109] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.109] CreateFileW (lpFileName="C:/Users/Public/Favorites/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\favorites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.109] FindFirstFileW (in: lpFileName="C:/Users/Public/Favorites/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.109] CreateFileW (lpFileName="C:/Users/Public/Favorites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\favorites\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.109] FindFirstFileW (in: lpFileName="C:/Users/Public/Favorites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.109] CreateFileW (lpFileName="C:/Users/Public/Favorites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\favorites\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.109] FindFirstFileW (in: lpFileName="C:/Users/Public/Favorites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.109] GetFileAttributesW (lpFileName="C:/Users/Public/Favorites/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\favorites\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0147.109] CreateFileW (lpFileName="C:/Users/Public/Favorites/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\favorites\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0147.109] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0147.109] CloseHandle (hObject=0xec) returned 1 [0147.110] CreateFileW (lpFileName="C:/Users/Public/Libraries\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\libraries\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.110] FindFirstFileW (in: lpFileName="C:/Users/Public/Libraries\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.110] CreateFileW (lpFileName="C:/Users/Public/Libraries\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\libraries\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0147.111] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429d10 | out: lpMode=0x12429d10) returned 0 [0147.112] WriteFile (in: hFile=0xec, lpBuffer=0x12551300*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429d14, lpOverlapped=0x0 | out: lpBuffer=0x12551300*, lpNumberOfBytesWritten=0x12429d14*=0x1033, lpOverlapped=0x0) returned 1 [0147.113] CloseHandle (hObject=0xec) returned 1 [0147.113] GetFileAttributesW (lpFileName="C:/Users/Public/Libraries\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\libraries\\@_read_to_recover_files_@.txt")) returned 0x20 [0147.113] SetFileAttributesW (lpFileName="C:/Users/Public/Libraries\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.113] CreateFileW (lpFileName="C:/Users/Public/Libraries" (normalized: "c:\\users\\public\\libraries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.113] FindFirstFileW (in: lpFileName="C:/Users/Public/Libraries\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8faac20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8faac20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.113] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8faac20, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8faac20, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.113] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8fa8510, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8fa8510, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8fafa40, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.113] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.113] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0147.113] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.113] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.113] CreateFileW (lpFileName="C:/Users/Public/Libraries/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\libraries\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.113] FindFirstFileW (in: lpFileName="C:/Users/Public/Libraries/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.113] CreateFileW (lpFileName="C:/Users/Public/Libraries/RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0147.114] GetConsoleMode (in: hConsoleHandle=0xec, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0147.114] ReadFile (in: hFile=0xec, lpBuffer=0x12783000, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12783000*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0147.115] CreateFileW (lpFileName="C:/Users/Public/Libraries/desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184 [0147.116] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0147.116] ReadFile (in: hFile=0x184, lpBuffer=0x12783100, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12783100*, lpNumberOfBytesRead=0x12429c80*=0x58, lpOverlapped=0x0) returned 1 [0147.117] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Libraries/RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c)) returned 1 [0147.117] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Libraries/desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58)) returned 1 [0147.117] CreateFileW (lpFileName="C:/Users/Public/Libraries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\libraries\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.117] FindFirstFileW (in: lpFileName="C:/Users/Public/Libraries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.117] CreateFileW (lpFileName="C:/Users/Public/Libraries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\libraries\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.117] FindFirstFileW (in: lpFileName="C:/Users/Public/Libraries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.117] GetFileAttributesW (lpFileName="C:/Users/Public/Libraries/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\libraries\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0147.117] CreateFileW (lpFileName="C:/Users/Public/Libraries/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\libraries\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x194 [0147.117] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0147.118] CloseHandle (hObject=0x194) returned 1 [0147.118] CreateFileW (lpFileName="C:/Users/Public/Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.118] FindFirstFileW (in: lpFileName="C:/Users/Public/Music\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a50 | out: lpFindFileData=0x12429a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.118] CreateFileW (lpFileName="C:/Users/Public/Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.118] FindFirstFileW (in: lpFileName="C:/Users/Public/Music\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429a48 | out: lpFindFileData=0x12429a48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.118] GetFileAttributesW (lpFileName="C:/Users/Public/Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\@_read_to_recover_files_@.txt")) returned 0x21 [0147.118] SetFileAttributesW (lpFileName="C:/Users/Public/Music\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.118] CreateFileW (lpFileName="C:/Users/Public/Music" (normalized: "c:\\users\\public\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.118] FindFirstFileW (in: lpFileName="C:/Users/Public/Music\\*", lpFindFileData=0x12429984 | out: lpFindFileData=0x12429984*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8f88940, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f88940, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.118] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8f88940, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f88940, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.118] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8f88940, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8f88940, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8f8b050, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.118] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.118] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1 [0147.118] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429a00 | out: lpFindFileData=0x12429a00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.119] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.119] CreateFileW (lpFileName="C:/Users/Public/Music/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.119] FindFirstFileW (in: lpFileName="C:/Users/Public/Music/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.119] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music" (normalized: "c:\\users\\public\\music\\sample music"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.119] FindFirstFileW (in: lpFileName="C:/Users/Public/Music/Sample Music\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.120] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.121] CreateFileW (lpFileName="C:/Users/Public/Music/desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x194 [0147.121] GetConsoleMode (in: hConsoleHandle=0x194, lpMode=0x12429c70 | out: lpMode=0x12429c70) returned 0 [0147.121] ReadFile (in: hFile=0x194, lpBuffer=0x12783200, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429c80, lpOverlapped=0x0 | out: lpBuffer=0x12783200*, lpNumberOfBytesRead=0x12429c80*=0x100, lpOverlapped=0x0) returned 1 [0147.122] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Music/desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429a58 | out: lpFileInformation=0x12429a58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0147.122] CreateFileW (lpFileName="C:/Users/Public/Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.122] FindFirstFileW (in: lpFileName="C:/Users/Public/Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.122] CreateFileW (lpFileName="C:/Users/Public/Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.123] FindFirstFileW (in: lpFileName="C:/Users/Public/Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a0 | out: lpFindFileData=0x124299a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.123] GetFileAttributesW (lpFileName="C:/Users/Public/Music/@_READ_TO_RECOVER_FILES_@.txt\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\@_read_to_recover_files_@.txt\\@_read_to_recover_files_@.txt")) returned 0xffffffff [0147.123] CreateFileW (lpFileName="C:/Users/Public/Music/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a0 [0147.123] GetConsoleMode (in: hConsoleHandle=0x1a0, lpMode=0x12429ba4 | out: lpMode=0x12429ba4) returned 0 [0147.123] CloseHandle (hObject=0x1a0) returned 1 [0147.123] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\sample music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.124] FindFirstFileW (in: lpFileName="C:/Users/Public/Music/Sample Music\\@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x124299a8 | out: lpFindFileData=0x124299a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.124] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\sample music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a0 [0147.124] GetConsoleMode (in: hConsoleHandle=0x1a0, lpMode=0x12429c68 | out: lpMode=0x12429c68) returned 0 [0147.124] WriteFile (in: hFile=0x1a0, lpBuffer=0x124fa000*, nNumberOfBytesToWrite=0x1033, lpNumberOfBytesWritten=0x12429c6c, lpOverlapped=0x0 | out: lpBuffer=0x124fa000*, lpNumberOfBytesWritten=0x12429c6c*=0x1033, lpOverlapped=0x0) returned 1 [0147.125] CloseHandle (hObject=0x1a0) returned 1 [0147.125] GetFileAttributesW (lpFileName="C:/Users/Public/Music/Sample Music\\@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\sample music\\@_read_to_recover_files_@.txt")) returned 0x20 [0147.126] SetFileAttributesW (lpFileName="C:/Users/Public/Music/Sample Music\\@_READ_TO_RECOVER_FILES_@.txt", dwFileAttributes=0x21) returned 1 [0147.126] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music" (normalized: "c:\\users\\public\\music\\sample music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.126] FindFirstFileW (in: lpFileName="C:/Users/Public/Music/Sample Music\\*", lpFindFileData=0x124298dc | out: lpFindFileData=0x124298dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8fca7f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8fca7f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x747c28 [0147.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8fca7f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8fca7f0, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x8fca7f0, ftCreationTime.dwHighDateTime=0x1d5793f, ftLastAccessTime.dwLowDateTime=0x8fca7f0, ftLastAccessTime.dwHighDateTime=0x1d5793f, ftLastWriteTime.dwLowDateTime=0x8fcf610, ftLastWriteTime.dwHighDateTime=0x1d5793f, nFileSizeHigh=0x0, nFileSizeLow=0x1033, dwReserved0=0x0, dwReserved1=0x0, cFileName="@_READ_TO_RECOVER_FILES_@.txt", cAlternateFileName="@_READ~1.TXT")) returned 1 [0147.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0147.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1 [0147.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1 [0147.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1 [0147.126] FindNextFileW (in: hFindFile=0x747c28, lpFindFileData=0x12429958 | out: lpFindFileData=0x12429958*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.126] FindClose (in: hFindFile=0x747c28 | out: hFindFile=0x747c28) returned 1 [0147.126] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music/@_READ_TO_RECOVER_FILES_@.txt" (normalized: "c:\\users\\public\\music\\sample music\\@_read_to_recover_files_@.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.126] FindFirstFileW (in: lpFileName="C:/Users/Public/Music/Sample Music/@_READ_TO_RECOVER_FILES_@.txt\\*", lpFindFileData=0x12429900 | out: lpFindFileData=0x12429900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0147.126] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music/Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a0 [0147.127] GetConsoleMode (in: hConsoleHandle=0x1a0, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0147.127] ReadFile (in: hFile=0x1a0, lpBuffer=0x12783300, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12783300*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0147.130] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music/Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0147.130] GetConsoleMode (in: hConsoleHandle=0x1a4, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0147.131] ReadFile (in: hFile=0x1a4, lpBuffer=0x12783400, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12783400*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0147.133] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music/Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a8 [0147.133] GetConsoleMode (in: hConsoleHandle=0x1a8, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0147.134] ReadFile (in: hFile=0x1a8, lpBuffer=0x12783500, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12783500*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0147.136] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music/desktop.ini" (normalized: "c:\\users\\public\\music\\sample music\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0147.136] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0x12429bc8 | out: lpMode=0x12429bc8) returned 0 [0147.137] ReadFile (in: hFile=0x1ac, lpBuffer=0x12783600, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x12429bd8, lpOverlapped=0x0 | out: lpBuffer=0x12783600*, lpNumberOfBytesRead=0x12429bd8*=0x100, lpOverlapped=0x0) returned 1 [0147.138] GetFileAttributesExW (in: lpFileName="C:/Users/Public/Music/Sample Music/Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124299b0 | out: lpFileInformation=0x124299b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1)) returned 1 [0147.138] CreateFileW (lpFileName="C:/Users/Public/Music/Sample Music/Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0147.138] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x12429aac | out: lpMode=0x12429aac) returned 0 [0147.138] CryptGenRandom (in: hProv=0x7473e8, dwLen=0x20, pbBuffer=0x1240eb40 | out: pbBuffer=0x1240eb40) returned 1 [0147.139] CryptGenRandom (in: hProv=0x7473e8, dwLen=0xdd, pbBuffer=0x12783702 | out: pbBuffer=0x12783702) returned 1 [0147.141] SetEvent (hEvent=0xa8) returned 1 [0147.141] ReadFile (in: hFile=0x1b4, lpBuffer=0x1280a000, nNumberOfBytesToRead=0x800000, lpNumberOfBytesRead=0x12429abc, lpOverlapped=0x0 | out: lpBuffer=0x1280a000*, lpNumberOfBytesRead=0x12429abc*=0x800000, lpOverlapped=0x0) returned 1 [0147.312] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0147.317] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0147.511] SetEvent (hEvent=0xa0) returned 1 [0147.512] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0147.608] SetEvent (hEvent=0xa0) returned 1 [0147.608] SwitchToThread () returned 1 [0147.712] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0148.263] SetEvent (hEvent=0xa0) returned 1 [0148.264] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0148.479] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0148.479] SetEvent (hEvent=0xa0) returned 1 [0148.479] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0148.531] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0148.531] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0148.814] SetEvent (hEvent=0xa0) returned 1 [0148.814] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0148.826] SetEvent (hEvent=0xa0) returned 1 [0148.826] SwitchToThread () returned 1 [0148.864] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0148.937] SetEvent (hEvent=0xa0) returned 1 [0148.938] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0148.953] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0148.953] SetEvent (hEvent=0xa0) returned 1 [0148.953] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0x1) returned 0x102 [0148.954] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0148.954] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0151.357] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) Process: id = "2" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x4e771000" os_pid = "0x9b0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x980" cmd_line = "cmd.exe /C tasklist.exe /FO CSV" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 6 os_tid = 0x9b4 [0030.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x32fc68 | out: lpSystemTimeAsFileTime=0x32fc68*(dwLowDateTime=0xca74c080, dwHighDateTime=0x1d5793e)) [0030.978] GetCurrentProcessId () returned 0x9b0 [0030.978] GetCurrentThreadId () returned 0x9b4 [0030.978] GetTickCount () returned 0x1142f3b [0030.978] QueryPerformanceCounter (in: lpPerformanceCount=0x32fc60 | out: lpPerformanceCount=0x32fc60*=15126233474) returned 1 [0030.979] GetModuleHandleA (lpModuleName=0x0) returned 0x4a5c0000 [0030.979] __set_app_type (_Type=0x1) [0030.979] __p__fmode () returned 0x74eb31f4 [0030.980] __p__commode () returned 0x74eb31fc [0030.980] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a5e21a6) returned 0x0 [0030.980] __getmainargs (in: _Argc=0x4a5e4238, _Argv=0x4a5e4240, _Env=0x4a5e423c, _DoWildCard=0, _StartInfo=0x4a5e4140 | out: _Argc=0x4a5e4238, _Argv=0x4a5e4240, _Env=0x4a5e423c) returned 0 [0030.980] GetCurrentThreadId () returned 0x9b4 [0030.980] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x9b4) returned 0x60 [0030.980] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0030.980] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f [0030.980] SetThreadUILanguage (LangId=0x0) returned 0x409 [0030.981] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0030.981] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x32fbf8 | out: phkResult=0x32fbf8*=0x0) returned 0x2 [0030.981] VirtualQuery (in: lpAddress=0x32fc2f, lpBuffer=0x32fbc8, dwLength=0x1c | out: lpBuffer=0x32fbc8*(BaseAddress=0x32f000, AllocationBase=0x230000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0030.981] VirtualQuery (in: lpAddress=0x230000, lpBuffer=0x32fbc8, dwLength=0x1c | out: lpBuffer=0x32fbc8*(BaseAddress=0x230000, AllocationBase=0x230000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0030.981] VirtualQuery (in: lpAddress=0x231000, lpBuffer=0x32fbc8, dwLength=0x1c | out: lpBuffer=0x32fbc8*(BaseAddress=0x231000, AllocationBase=0x230000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0030.981] VirtualQuery (in: lpAddress=0x233000, lpBuffer=0x32fbc8, dwLength=0x1c | out: lpBuffer=0x32fbc8*(BaseAddress=0x233000, AllocationBase=0x230000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0030.981] VirtualQuery (in: lpAddress=0x330000, lpBuffer=0x32fbc8, dwLength=0x1c | out: lpBuffer=0x32fbc8*(BaseAddress=0x330000, AllocationBase=0x330000, AllocationProtect=0x4, RegionSize=0x13000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0030.981] GetConsoleOutputCP () returned 0x1b5 [0030.981] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a5e4260 | out: lpCPInfo=0x4a5e4260) returned 1 [0030.981] SetConsoleCtrlHandler (HandlerRoutine=0x4a5de72a, Add=1) returned 1 [0030.982] _get_osfhandle (_FileHandle=1) returned 0xc8 [0030.982] SetConsoleMode (hConsoleHandle=0xc8, dwMode=0x0) returned 0 [0030.982] _get_osfhandle (_FileHandle=1) returned 0xc8 [0030.982] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a5e41ac | out: lpMode=0x4a5e41ac) returned 0 [0030.982] _get_osfhandle (_FileHandle=0) returned 0xc4 [0030.982] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a5e41b0 | out: lpMode=0x4a5e41b0) returned 0 [0030.982] GetEnvironmentStringsW () returned 0x342868* [0030.982] GetProcessHeap () returned 0x330000 [0030.982] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xaca) returned 0x343340 [0030.982] FreeEnvironmentStringsW (penv=0x342868) returned 1 [0030.982] GetProcessHeap () returned 0x330000 [0030.983] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x4) returned 0x340bf8 [0030.983] GetEnvironmentStringsW () returned 0x342868* [0030.983] GetProcessHeap () returned 0x330000 [0030.983] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xaca) returned 0x343e18 [0030.983] FreeEnvironmentStringsW (penv=0x342868) returned 1 [0030.983] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x32eb68 | out: phkResult=0x32eb68*=0x68) returned 0x0 [0030.983] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x32eb70, lpData=0x32eb74, lpcbData=0x32eb6c*=0x1000 | out: lpType=0x32eb70*=0x0, lpData=0x32eb74*=0x32, lpcbData=0x32eb6c*=0x1000) returned 0x2 [0030.983] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x32eb70, lpData=0x32eb74, lpcbData=0x32eb6c*=0x1000 | out: lpType=0x32eb70*=0x4, lpData=0x32eb74*=0x1, lpcbData=0x32eb6c*=0x4) returned 0x0 [0030.983] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x32eb70, lpData=0x32eb74, lpcbData=0x32eb6c*=0x1000 | out: lpType=0x32eb70*=0x0, lpData=0x32eb74*=0x1, lpcbData=0x32eb6c*=0x1000) returned 0x2 [0030.983] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x32eb70, lpData=0x32eb74, lpcbData=0x32eb6c*=0x1000 | out: lpType=0x32eb70*=0x4, lpData=0x32eb74*=0x0, lpcbData=0x32eb6c*=0x4) returned 0x0 [0030.983] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x32eb70, lpData=0x32eb74, lpcbData=0x32eb6c*=0x1000 | out: lpType=0x32eb70*=0x4, lpData=0x32eb74*=0x40, lpcbData=0x32eb6c*=0x4) returned 0x0 [0030.983] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x32eb70, lpData=0x32eb74, lpcbData=0x32eb6c*=0x1000 | out: lpType=0x32eb70*=0x4, lpData=0x32eb74*=0x40, lpcbData=0x32eb6c*=0x4) returned 0x0 [0030.983] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x32eb70, lpData=0x32eb74, lpcbData=0x32eb6c*=0x1000 | out: lpType=0x32eb70*=0x0, lpData=0x32eb74*=0x40, lpcbData=0x32eb6c*=0x1000) returned 0x2 [0030.983] RegCloseKey (hKey=0x68) returned 0x0 [0030.983] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x32eb68 | out: phkResult=0x32eb68*=0x68) returned 0x0 [0030.984] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x32eb70, lpData=0x32eb74, lpcbData=0x32eb6c*=0x1000 | out: lpType=0x32eb70*=0x0, lpData=0x32eb74*=0x40, lpcbData=0x32eb6c*=0x1000) returned 0x2 [0030.984] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x32eb70, lpData=0x32eb74, lpcbData=0x32eb6c*=0x1000 | out: lpType=0x32eb70*=0x4, lpData=0x32eb74*=0x1, lpcbData=0x32eb6c*=0x4) returned 0x0 [0030.984] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x32eb70, lpData=0x32eb74, lpcbData=0x32eb6c*=0x1000 | out: lpType=0x32eb70*=0x0, lpData=0x32eb74*=0x1, lpcbData=0x32eb6c*=0x1000) returned 0x2 [0030.984] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x32eb70, lpData=0x32eb74, lpcbData=0x32eb6c*=0x1000 | out: lpType=0x32eb70*=0x4, lpData=0x32eb74*=0x0, lpcbData=0x32eb6c*=0x4) returned 0x0 [0030.984] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x32eb70, lpData=0x32eb74, lpcbData=0x32eb6c*=0x1000 | out: lpType=0x32eb70*=0x4, lpData=0x32eb74*=0x9, lpcbData=0x32eb6c*=0x4) returned 0x0 [0030.984] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x32eb70, lpData=0x32eb74, lpcbData=0x32eb6c*=0x1000 | out: lpType=0x32eb70*=0x4, lpData=0x32eb74*=0x9, lpcbData=0x32eb6c*=0x4) returned 0x0 [0030.984] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x32eb70, lpData=0x32eb74, lpcbData=0x32eb6c*=0x1000 | out: lpType=0x32eb70*=0x0, lpData=0x32eb74*=0x9, lpcbData=0x32eb6c*=0x1000) returned 0x2 [0030.984] RegCloseKey (hKey=0x68) returned 0x0 [0030.984] time (in: timer=0x0 | out: timer=0x0) returned 0x5d94d0ca [0030.984] srand (_Seed=0x5d94d0ca) [0030.984] GetCommandLineW () returned="cmd.exe /C tasklist.exe /FO CSV" [0030.984] GetCommandLineW () returned="cmd.exe /C tasklist.exe /FO CSV" [0030.985] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a5e5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0030.985] GetProcessHeap () returned 0x330000 [0030.985] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x210) returned 0x3448f0 [0030.985] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3448f8, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0030.986] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0030.986] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0030.986] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0030.986] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0030.986] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0030.986] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0030.986] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0030.986] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0030.986] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0030.986] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0030.986] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0030.987] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0030.987] GetProcessHeap () returned 0x330000 [0030.987] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x343340 | out: hHeap=0x330000) returned 1 [0030.987] GetEnvironmentStringsW () returned 0x342868* [0030.988] GetProcessHeap () returned 0x330000 [0030.988] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xae2) returned 0x3455f8 [0030.988] FreeEnvironmentStringsW (penv=0x342868) returned 1 [0030.988] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0030.988] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0030.988] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0030.988] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0030.988] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0030.988] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0030.988] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0030.988] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0030.988] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0030.988] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0030.988] GetProcessHeap () returned 0x330000 [0030.988] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x54) returned 0x341aa0 [0030.988] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x32f934 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0030.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x32f934, lpFilePart=0x32f930 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x32f930*="Desktop") returned 0x25 [0030.988] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0030.988] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x32f6b0 | out: lpFindFileData=0x32f6b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x341b00 [0030.988] FindClose (in: hFindFile=0x341b00 | out: hFindFile=0x341b00) returned 1 [0030.989] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x32f6b0 | out: lpFindFileData=0x32f6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x341b00 [0030.989] FindClose (in: hFindFile=0x341b00 | out: hFindFile=0x341b00) returned 1 [0030.989] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20 [0030.989] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x32f6b0 | out: lpFindFileData=0x32f6b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc46c41e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xc46c41e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x341b00 [0030.989] FindClose (in: hFindFile=0x341b00 | out: hFindFile=0x341b00) returned 1 [0030.989] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0030.989] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0030.989] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0030.989] GetProcessHeap () returned 0x330000 [0030.989] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x3455f8 | out: hHeap=0x330000) returned 1 [0030.989] GetEnvironmentStringsW () returned 0x342868* [0030.989] GetProcessHeap () returned 0x330000 [0030.989] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xb36) returned 0x344b08 [0030.989] FreeEnvironmentStringsW (penv=0x342868) returned 1 [0030.989] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a5e5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0030.989] GetProcessHeap () returned 0x330000 [0030.989] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x341aa0 | out: hHeap=0x330000) returned 1 [0030.990] GetProcessHeap () returned 0x330000 [0030.990] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x400e) returned 0x346c28 [0030.991] GetProcessHeap () returned 0x330000 [0030.991] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x36) returned 0x3419f8 [0030.991] GetProcessHeap () returned 0x330000 [0030.991] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x346c28 | out: hHeap=0x330000) returned 1 [0030.991] GetConsoleOutputCP () returned 0x1b5 [0030.991] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a5e4260 | out: lpCPInfo=0x4a5e4260) returned 1 [0030.991] GetUserDefaultLCID () returned 0x409 [0030.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a5e4950, cchData=8 | out: lpLCData=":") returned 2 [0030.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x32fa74, cchData=128 | out: lpLCData="0") returned 2 [0030.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x32fa74, cchData=128 | out: lpLCData="0") returned 2 [0030.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x32fa74, cchData=128 | out: lpLCData="1") returned 2 [0030.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a5e4940, cchData=8 | out: lpLCData="/") returned 2 [0030.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a5e4d80, cchData=32 | out: lpLCData="Mon") returned 4 [0030.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a5e4d40, cchData=32 | out: lpLCData="Tue") returned 4 [0030.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a5e4d00, cchData=32 | out: lpLCData="Wed") returned 4 [0030.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a5e4cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0030.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a5e4c80, cchData=32 | out: lpLCData="Fri") returned 4 [0030.992] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a5e4c40, cchData=32 | out: lpLCData="Sat") returned 4 [0030.993] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a5e4c00, cchData=32 | out: lpLCData="Sun") returned 4 [0030.993] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a5e4930, cchData=8 | out: lpLCData=".") returned 2 [0030.993] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a5e4920, cchData=8 | out: lpLCData=",") returned 2 [0030.993] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0030.994] GetProcessHeap () returned 0x330000 [0030.994] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x0, Size=0x20c) returned 0x345648 [0030.994] GetConsoleTitleW (in: lpConsoleTitle=0x345648, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0030.994] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0030.994] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92 [0030.994] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0030.994] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d [0030.995] GetProcessHeap () returned 0x330000 [0030.995] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x400a) returned 0x346c28 [0030.995] GetProcessHeap () returned 0x330000 [0030.995] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x346c28 | out: hHeap=0x330000) returned 1 [0030.996] _wcsicmp (_String1="tasklist.exe", _String2=")") returned 75 [0030.996] _wcsicmp (_String1="FOR", _String2="tasklist.exe") returned -14 [0030.996] _wcsicmp (_String1="FOR/?", _String2="tasklist.exe") returned -14 [0030.996] _wcsicmp (_String1="IF", _String2="tasklist.exe") returned -11 [0030.996] _wcsicmp (_String1="IF/?", _String2="tasklist.exe") returned -11 [0030.996] _wcsicmp (_String1="REM", _String2="tasklist.exe") returned -2 [0030.996] _wcsicmp (_String1="REM/?", _String2="tasklist.exe") returned -2 [0030.996] GetProcessHeap () returned 0x330000 [0030.996] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x58) returned 0x341ad8 [0030.996] GetProcessHeap () returned 0x330000 [0030.996] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x22) returned 0x345860 [0030.997] GetProcessHeap () returned 0x330000 [0030.997] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x1a) returned 0x341bb0 [0030.997] GetConsoleTitleW (in: lpConsoleTitle=0x32f76c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0030.998] GetFileAttributesW (lpFileName="tasklist.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tasklist.exe")) returned 0xffffffff [0030.998] _wcsicmp (_String1="tasklist", _String2="DIR") returned 16 [0030.998] _wcsicmp (_String1="tasklist", _String2="ERASE") returned 15 [0030.998] _wcsicmp (_String1="tasklist", _String2="DEL") returned 16 [0030.998] _wcsicmp (_String1="tasklist", _String2="TYPE") returned -24 [0030.998] _wcsicmp (_String1="tasklist", _String2="COPY") returned 17 [0030.998] _wcsicmp (_String1="tasklist", _String2="CD") returned 17 [0030.998] _wcsicmp (_String1="tasklist", _String2="CHDIR") returned 17 [0030.998] _wcsicmp (_String1="tasklist", _String2="RENAME") returned 2 [0030.998] _wcsicmp (_String1="tasklist", _String2="REN") returned 2 [0030.998] _wcsicmp (_String1="tasklist", _String2="ECHO") returned 15 [0030.998] _wcsicmp (_String1="tasklist", _String2="SET") returned 1 [0030.998] _wcsicmp (_String1="tasklist", _String2="PAUSE") returned 4 [0030.998] _wcsicmp (_String1="tasklist", _String2="DATE") returned 16 [0030.999] _wcsicmp (_String1="tasklist", _String2="TIME") returned -8 [0030.999] _wcsicmp (_String1="tasklist", _String2="PROMPT") returned 4 [0030.999] _wcsicmp (_String1="tasklist", _String2="MD") returned 7 [0030.999] _wcsicmp (_String1="tasklist", _String2="MKDIR") returned 7 [0030.999] _wcsicmp (_String1="tasklist", _String2="RD") returned 2 [0030.999] _wcsicmp (_String1="tasklist", _String2="RMDIR") returned 2 [0030.999] _wcsicmp (_String1="tasklist", _String2="PATH") returned 4 [0030.999] _wcsicmp (_String1="tasklist", _String2="GOTO") returned 13 [0030.999] _wcsicmp (_String1="tasklist", _String2="SHIFT") returned 1 [0030.999] _wcsicmp (_String1="tasklist", _String2="CLS") returned 17 [0030.999] _wcsicmp (_String1="tasklist", _String2="CALL") returned 17 [0030.999] _wcsicmp (_String1="tasklist", _String2="VERIFY") returned -2 [0030.999] _wcsicmp (_String1="tasklist", _String2="VER") returned -2 [0030.999] _wcsicmp (_String1="tasklist", _String2="VOL") returned -2 [0030.999] _wcsicmp (_String1="tasklist", _String2="EXIT") returned 15 [0030.999] _wcsicmp (_String1="tasklist", _String2="SETLOCAL") returned 1 [0030.999] _wcsicmp (_String1="tasklist", _String2="ENDLOCAL") returned 15 [0030.999] _wcsicmp (_String1="tasklist", _String2="TITLE") returned -8 [0030.999] _wcsicmp (_String1="tasklist", _String2="START") returned 1 [0030.999] _wcsicmp (_String1="tasklist", _String2="DPATH") returned 16 [0030.999] _wcsicmp (_String1="tasklist", _String2="KEYS") returned 9 [0030.999] _wcsicmp (_String1="tasklist", _String2="MOVE") returned 7 [0030.999] _wcsicmp (_String1="tasklist", _String2="PUSHD") returned 4 [0030.999] _wcsicmp (_String1="tasklist", _String2="POPD") returned 4 [0030.999] _wcsicmp (_String1="tasklist", _String2="ASSOC") returned 19 [0030.999] _wcsicmp (_String1="tasklist", _String2="FTYPE") returned 14 [0030.999] _wcsicmp (_String1="tasklist", _String2="BREAK") returned 18 [0030.999] _wcsicmp (_String1="tasklist", _String2="COLOR") returned 17 [0030.999] _wcsicmp (_String1="tasklist", _String2="MKLINK") returned 7 [0030.999] _wcsicmp (_String1="tasklist", _String2="DIR") returned 16 [0030.999] _wcsicmp (_String1="tasklist", _String2="ERASE") returned 15 [0030.999] _wcsicmp (_String1="tasklist", _String2="DEL") returned 16 [0030.999] _wcsicmp (_String1="tasklist", _String2="TYPE") returned -24 [0030.999] _wcsicmp (_String1="tasklist", _String2="COPY") returned 17 [0031.000] _wcsicmp (_String1="tasklist", _String2="CD") returned 17 [0031.000] _wcsicmp (_String1="tasklist", _String2="CHDIR") returned 17 [0031.000] _wcsicmp (_String1="tasklist", _String2="RENAME") returned 2 [0031.000] _wcsicmp (_String1="tasklist", _String2="REN") returned 2 [0031.000] _wcsicmp (_String1="tasklist", _String2="ECHO") returned 15 [0031.000] _wcsicmp (_String1="tasklist", _String2="SET") returned 1 [0031.000] _wcsicmp (_String1="tasklist", _String2="PAUSE") returned 4 [0031.000] _wcsicmp (_String1="tasklist", _String2="DATE") returned 16 [0031.000] _wcsicmp (_String1="tasklist", _String2="TIME") returned -8 [0031.000] _wcsicmp (_String1="tasklist", _String2="PROMPT") returned 4 [0031.000] _wcsicmp (_String1="tasklist", _String2="MD") returned 7 [0031.000] _wcsicmp (_String1="tasklist", _String2="MKDIR") returned 7 [0031.000] _wcsicmp (_String1="tasklist", _String2="RD") returned 2 [0031.000] _wcsicmp (_String1="tasklist", _String2="RMDIR") returned 2 [0031.000] _wcsicmp (_String1="tasklist", _String2="PATH") returned 4 [0031.000] _wcsicmp (_String1="tasklist", _String2="GOTO") returned 13 [0031.000] _wcsicmp (_String1="tasklist", _String2="SHIFT") returned 1 [0031.000] _wcsicmp (_String1="tasklist", _String2="CLS") returned 17 [0031.000] _wcsicmp (_String1="tasklist", _String2="CALL") returned 17 [0031.000] _wcsicmp (_String1="tasklist", _String2="VERIFY") returned -2 [0031.000] _wcsicmp (_String1="tasklist", _String2="VER") returned -2 [0031.000] _wcsicmp (_String1="tasklist", _String2="VOL") returned -2 [0031.000] _wcsicmp (_String1="tasklist", _String2="EXIT") returned 15 [0031.000] _wcsicmp (_String1="tasklist", _String2="SETLOCAL") returned 1 [0031.000] _wcsicmp (_String1="tasklist", _String2="ENDLOCAL") returned 15 [0031.000] _wcsicmp (_String1="tasklist", _String2="TITLE") returned -8 [0031.000] _wcsicmp (_String1="tasklist", _String2="START") returned 1 [0031.000] _wcsicmp (_String1="tasklist", _String2="DPATH") returned 16 [0031.000] _wcsicmp (_String1="tasklist", _String2="KEYS") returned 9 [0031.000] _wcsicmp (_String1="tasklist", _String2="MOVE") returned 7 [0031.000] _wcsicmp (_String1="tasklist", _String2="PUSHD") returned 4 [0031.000] _wcsicmp (_String1="tasklist", _String2="POPD") returned 4 [0031.000] _wcsicmp (_String1="tasklist", _String2="ASSOC") returned 19 [0031.000] _wcsicmp (_String1="tasklist", _String2="FTYPE") returned 14 [0031.001] _wcsicmp (_String1="tasklist", _String2="BREAK") returned 18 [0031.001] _wcsicmp (_String1="tasklist", _String2="COLOR") returned 17 [0031.001] _wcsicmp (_String1="tasklist", _String2="MKLINK") returned 7 [0031.001] _wcsicmp (_String1="tasklist", _String2="FOR") returned 14 [0031.001] _wcsicmp (_String1="tasklist", _String2="IF") returned 11 [0031.001] _wcsicmp (_String1="tasklist", _String2="REM") returned 2 [0031.001] GetProcessHeap () returned 0x330000 [0031.001] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x210) returned 0x345890 [0031.001] GetProcessHeap () returned 0x330000 [0031.001] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x34) returned 0x345aa8 [0031.001] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17 [0031.002] GetProcessHeap () returned 0x330000 [0031.002] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x418) returned 0x345ae8 [0031.002] SetErrorMode (uMode=0x0) returned 0x8003 [0031.002] SetErrorMode (uMode=0x1) returned 0x0 [0031.002] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x345af0, lpFilePart=0x32f28c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x32f28c*="Desktop") returned 0x25 [0031.002] SetErrorMode (uMode=0x8003) returned 0x1 [0031.002] GetProcessHeap () returned 0x330000 [0031.002] RtlReAllocateHeap (Heap=0x330000, Flags=0x0, Ptr=0x345ae8, Size=0x6e) returned 0x345ae8 [0031.002] GetProcessHeap () returned 0x330000 [0031.002] RtlSizeHeap (HeapHandle=0x330000, Flags=0x0, MemoryPointer=0x345ae8) returned 0x6e [0031.002] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0031.002] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0031.002] GetProcessHeap () returned 0x330000 [0031.002] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x120) returned 0x345b60 [0031.002] GetProcessHeap () returned 0x330000 [0031.002] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x238) returned 0x345c88 [0031.010] GetProcessHeap () returned 0x330000 [0031.010] RtlReAllocateHeap (Heap=0x330000, Flags=0x0, Ptr=0x345c88, Size=0x122) returned 0x345c88 [0031.010] GetProcessHeap () returned 0x330000 [0031.010] RtlSizeHeap (HeapHandle=0x330000, Flags=0x0, MemoryPointer=0x345c88) returned 0x122 [0031.010] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a5f0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0031.010] GetProcessHeap () returned 0x330000 [0031.010] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xe0) returned 0x345db8 [0031.010] GetProcessHeap () returned 0x330000 [0031.010] RtlReAllocateHeap (Heap=0x330000, Flags=0x0, Ptr=0x345db8, Size=0x76) returned 0x345db8 [0031.010] GetProcessHeap () returned 0x330000 [0031.010] RtlSizeHeap (HeapHandle=0x330000, Flags=0x0, MemoryPointer=0x345db8) returned 0x76 [0031.012] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0031.012] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tasklist.exe", fInfoLevelId=0x1, lpFindFileData=0x32f028, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32f028) returned 0xffffffff [0031.012] GetLastError () returned 0x2 [0031.012] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tasklist.exe.*", fInfoLevelId=0x1, lpFindFileData=0x32f008, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32f008) returned 0xffffffff [0031.012] GetLastError () returned 0x2 [0031.012] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\tasklist.exe", fInfoLevelId=0x1, lpFindFileData=0x32f008, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32f008) returned 0xffffffff [0031.012] GetLastError () returned 0x2 [0031.012] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0031.013] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\tasklist.exe", fInfoLevelId=0x1, lpFindFileData=0x32f028, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32f028) returned 0x345e38 [0031.013] GetProcessHeap () returned 0x330000 [0031.013] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x0, Size=0x14) returned 0x345e78 [0031.013] FindClose (in: hFindFile=0x345e38 | out: hFindFile=0x345e38) returned 1 [0031.013] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0031.013] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0031.013] GetConsoleTitleW (in: lpConsoleTitle=0x32f500, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0031.013] InitializeProcThreadAttributeList (in: lpAttributeList=0x32f388, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x32f450 | out: lpAttributeList=0x32f388, lpSize=0x32f450) returned 1 [0031.013] UpdateProcThreadAttribute (in: lpAttributeList=0x32f388, dwFlags=0x0, Attribute=0x60001, lpValue=0x32f448, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x32f388, lpPreviousValue=0x0) returned 1 [0031.013] GetStartupInfoW (in: lpStartupInfo=0x32f344 | out: lpStartupInfo=0x32f344*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc4, hStdOutput=0xc8, hStdError=0xcc)) [0031.013] GetProcessHeap () returned 0x330000 [0031.013] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0x18) returned 0x345e38 [0031.013] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0031.013] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0031.013] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0031.013] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0031.013] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0031.013] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0031.014] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0031.014] GetProcessHeap () returned 0x330000 [0031.015] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x345e38 | out: hHeap=0x330000) returned 1 [0031.015] GetProcessHeap () returned 0x330000 [0031.015] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xa) returned 0x33fe98 [0031.015] lstrcmpW (lpString1="\\tasklist.exe", lpString2="\\XCOPY.EXE") returned -1 [0031.016] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\tasklist.exe", lpCommandLine="tasklist.exe /FO CSV", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x32f3e4*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="tasklist.exe /FO CSV", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x32f430 | out: lpCommandLine="tasklist.exe /FO CSV", lpProcessInformation=0x32f430*(hProcess=0x78, hThread=0x74, dwProcessId=0x9b8, dwThreadId=0x9bc)) returned 1 [0031.027] CloseHandle (hObject=0x74) returned 1 [0031.027] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0031.027] GetProcessHeap () returned 0x330000 [0031.027] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x344b08 | out: hHeap=0x330000) returned 1 [0031.027] GetEnvironmentStringsW () returned 0x344b08* [0031.027] GetProcessHeap () returned 0x330000 [0031.027] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xb36) returned 0x342868 [0031.027] FreeEnvironmentStringsW (penv=0x344b08) returned 1 [0031.027] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0 [0035.597] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x32f324 | out: lpExitCode=0x32f324*=0x0) returned 1 [0035.597] CloseHandle (hObject=0x78) returned 1 [0035.597] _vsnwprintf (in: _Buffer=0x32f46c, _BufferCount=0x13, _Format="%08X", _ArgList=0x32f330 | out: _Buffer="00000000") returned 8 [0035.597] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0035.597] GetProcessHeap () returned 0x330000 [0035.597] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x342868 | out: hHeap=0x330000) returned 1 [0035.597] GetEnvironmentStringsW () returned 0x342868* [0035.597] GetProcessHeap () returned 0x330000 [0035.597] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xb5c) returned 0x349790 [0035.597] FreeEnvironmentStringsW (penv=0x342868) returned 1 [0035.597] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0035.597] GetProcessHeap () returned 0x330000 [0035.597] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x349790 | out: hHeap=0x330000) returned 1 [0035.597] GetEnvironmentStringsW () returned 0x342868* [0035.597] GetProcessHeap () returned 0x330000 [0035.597] RtlAllocateHeap (HeapHandle=0x330000, Flags=0x8, Size=0xb5c) returned 0x349790 [0035.597] FreeEnvironmentStringsW (penv=0x342868) returned 1 [0035.597] GetProcessHeap () returned 0x330000 [0035.597] HeapFree (in: hHeap=0x330000, dwFlags=0x0, lpMem=0x33fe98 | out: hHeap=0x330000) returned 1 [0035.597] DeleteProcThreadAttributeList (in: lpAttributeList=0x32f388 | out: lpAttributeList=0x32f388) [0035.598] _get_osfhandle (_FileHandle=1) returned 0xc8 [0035.598] SetConsoleMode (hConsoleHandle=0xc8, dwMode=0x0) returned 0 [0035.598] _get_osfhandle (_FileHandle=1) returned 0xc8 [0035.598] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a5e41ac | out: lpMode=0x4a5e41ac) returned 0 [0035.598] _get_osfhandle (_FileHandle=0) returned 0xc4 [0035.598] GetConsoleMode (in: hConsoleHandle=0xc4, lpMode=0x4a5e41b0 | out: lpMode=0x4a5e41b0) returned 0 [0035.598] GetConsoleOutputCP () returned 0x1b5 [0035.598] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a5e4260 | out: lpCPInfo=0x4a5e4260) returned 1 [0035.598] SetThreadUILanguage (LangId=0x0) returned 0x409 [0035.598] exit (_Code=0) Process: id = "3" image_name = "tasklist.exe" filename = "c:\\windows\\syswow64\\tasklist.exe" page_root = "0x4fd97000" os_pid = "0x9b8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x9b0" cmd_line = "tasklist.exe /FO CSV" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 7 os_tid = 0x9bc Thread: id = 8 os_tid = 0x9c0 Thread: id = 9 os_tid = 0x9c4 Thread: id = 10 os_tid = 0x9c8 Thread: id = 11 os_tid = 0x9cc Process: id = "4" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x230f4000" os_pid = "0x36c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "3" os_parent_pid = "0x9b8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cedf" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 12 os_tid = 0x844 Thread: id = 13 os_tid = 0x330 Thread: id = 14 os_tid = 0x7f8 Thread: id = 15 os_tid = 0x430 Thread: id = 16 os_tid = 0x268 Thread: id = 17 os_tid = 0x768 Thread: id = 18 os_tid = 0x764 Thread: id = 19 os_tid = 0x760 Thread: id = 20 os_tid = 0x75c Thread: id = 21 os_tid = 0x70c Thread: id = 22 os_tid = 0x6e8 Thread: id = 23 os_tid = 0x6d8 Thread: id = 24 os_tid = 0x6d4 Thread: id = 25 os_tid = 0x6c8 Thread: id = 26 os_tid = 0x6c0 Thread: id = 27 os_tid = 0x6b8 Thread: id = 28 os_tid = 0x6a4 Thread: id = 29 os_tid = 0x6a0 Thread: id = 30 os_tid = 0x690 Thread: id = 31 os_tid = 0x67c Thread: id = 32 os_tid = 0x490 Thread: id = 33 os_tid = 0x454 Thread: id = 34 os_tid = 0x450 Thread: id = 35 os_tid = 0x428 Thread: id = 36 os_tid = 0x424 Thread: id = 37 os_tid = 0x420 Thread: id = 38 os_tid = 0x404 Thread: id = 39 os_tid = 0x18c Thread: id = 40 os_tid = 0xf0 Thread: id = 41 os_tid = 0xc8 Thread: id = 42 os_tid = 0x3f0 Thread: id = 43 os_tid = 0x3e4 Thread: id = 44 os_tid = 0x398 Thread: id = 45 os_tid = 0x394 Thread: id = 46 os_tid = 0x390 Thread: id = 47 os_tid = 0x38c Thread: id = 48 os_tid = 0x378 Thread: id = 49 os_tid = 0x370 Thread: id = 50 os_tid = 0x9d0 Thread: id = 51 os_tid = 0x9d4 Thread: id = 52 os_tid = 0x9d8 Thread: id = 53 os_tid = 0x9dc Thread: id = 139 os_tid = 0xbd4 Thread: id = 140 os_tid = 0xbd8 Thread: id = 141 os_tid = 0xbdc Thread: id = 142 os_tid = 0xbe0 Thread: id = 143 os_tid = 0xbe4 Thread: id = 144 os_tid = 0xbe8 Thread: id = 145 os_tid = 0xbec Thread: id = 146 os_tid = 0xbf0 Thread: id = 147 os_tid = 0xbf4 Thread: id = 148 os_tid = 0xbf8 Thread: id = 152 os_tid = 0x128 Thread: id = 153 os_tid = 0x534 Thread: id = 156 os_tid = 0x328 Thread: id = 157 os_tid = 0x240 Thread: id = 158 os_tid = 0x210 Thread: id = 159 os_tid = 0x310 Thread: id = 160 os_tid = 0x318 Thread: id = 161 os_tid = 0x774 Thread: id = 162 os_tid = 0x7e4 Thread: id = 163 os_tid = 0x32c Thread: id = 164 os_tid = 0x324 Thread: id = 167 os_tid = 0x838 Thread: id = 171 os_tid = 0x95c Thread: id = 172 os_tid = 0x904 Thread: id = 179 os_tid = 0x99c Thread: id = 201 os_tid = 0x3d0 Thread: id = 202 os_tid = 0x33c Thread: id = 203 os_tid = 0xa04 Thread: id = 204 os_tid = 0x9c8 Thread: id = 205 os_tid = 0x9cc Thread: id = 212 os_tid = 0xa3c Thread: id = 213 os_tid = 0xa34 Thread: id = 214 os_tid = 0xa20 Thread: id = 215 os_tid = 0xa30 Thread: id = 216 os_tid = 0xa1c Thread: id = 217 os_tid = 0xa70 Thread: id = 227 os_tid = 0x978 Thread: id = 228 os_tid = 0x94c Process: id = "5" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x4fb14000" os_pid = "0x9e0" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0x36c" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:00077b43" [0xc000000f] Thread: id = 54 os_tid = 0x9fc Thread: id = 55 os_tid = 0x9f8 Thread: id = 56 os_tid = 0x9f4 Thread: id = 57 os_tid = 0x9f0 Thread: id = 58 os_tid = 0x9ec Thread: id = 59 os_tid = 0x9e8 Thread: id = 60 os_tid = 0x9e4 Thread: id = 61 os_tid = 0xa00 Thread: id = 150 os_tid = 0x4f0 Thread: id = 166 os_tid = 0x858 Process: id = "6" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x4d868000" os_pid = "0xa08" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x980" cmd_line = "C:\\Windows\\system32\\cmd.exe /C wmic shadowcopy delete" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 62 os_tid = 0xa0c [0036.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2df980 | out: lpSystemTimeAsFileTime=0x2df980*(dwLowDateTime=0xcbc8bf90, dwHighDateTime=0x1d5793e)) [0036.515] GetCurrentProcessId () returned 0xa08 [0036.515] GetCurrentThreadId () returned 0xa0c [0036.515] GetTickCount () returned 0x11437f2 [0036.516] QueryPerformanceCounter (in: lpPerformanceCount=0x2df978 | out: lpPerformanceCount=0x2df978*=15680015029) returned 1 [0036.516] GetModuleHandleA (lpModuleName=0x0) returned 0x4a210000 [0036.517] __set_app_type (_Type=0x1) [0036.517] __p__fmode () returned 0x74eb31f4 [0036.517] __p__commode () returned 0x74eb31fc [0036.517] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a2321a6) returned 0x0 [0036.517] __getmainargs (in: _Argc=0x4a234238, _Argv=0x4a234240, _Env=0x4a23423c, _DoWildCard=0, _StartInfo=0x4a234140 | out: _Argc=0x4a234238, _Argv=0x4a234240, _Env=0x4a23423c) returned 0 [0036.517] GetCurrentThreadId () returned 0xa0c [0036.517] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xa0c) returned 0x60 [0036.517] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0036.517] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f [0036.517] SetThreadUILanguage (LangId=0x0) returned 0x409 [0036.518] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0036.518] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2df910 | out: phkResult=0x2df910*=0x0) returned 0x2 [0036.518] VirtualQuery (in: lpAddress=0x2df947, lpBuffer=0x2df8e0, dwLength=0x1c | out: lpBuffer=0x2df8e0*(BaseAddress=0x2df000, AllocationBase=0x1e0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0036.518] VirtualQuery (in: lpAddress=0x1e0000, lpBuffer=0x2df8e0, dwLength=0x1c | out: lpBuffer=0x2df8e0*(BaseAddress=0x1e0000, AllocationBase=0x1e0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0036.518] VirtualQuery (in: lpAddress=0x1e1000, lpBuffer=0x2df8e0, dwLength=0x1c | out: lpBuffer=0x2df8e0*(BaseAddress=0x1e1000, AllocationBase=0x1e0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0036.518] VirtualQuery (in: lpAddress=0x1e3000, lpBuffer=0x2df8e0, dwLength=0x1c | out: lpBuffer=0x2df8e0*(BaseAddress=0x1e3000, AllocationBase=0x1e0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0036.518] VirtualQuery (in: lpAddress=0x2e0000, lpBuffer=0x2df8e0, dwLength=0x1c | out: lpBuffer=0x2df8e0*(BaseAddress=0x2e0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x130000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0036.518] GetConsoleOutputCP () returned 0x1b5 [0036.518] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0036.518] SetConsoleCtrlHandler (HandlerRoutine=0x4a22e72a, Add=1) returned 1 [0036.518] _get_osfhandle (_FileHandle=1) returned 0x7 [0036.518] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0036.519] _get_osfhandle (_FileHandle=1) returned 0x7 [0036.519] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a2341ac | out: lpMode=0x4a2341ac) returned 1 [0036.519] _get_osfhandle (_FileHandle=1) returned 0x7 [0036.519] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0036.519] _get_osfhandle (_FileHandle=0) returned 0x3 [0036.519] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a2341b0 | out: lpMode=0x4a2341b0) returned 1 [0036.520] _get_osfhandle (_FileHandle=0) returned 0x3 [0036.520] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0036.520] GetEnvironmentStringsW () returned 0x6f2030* [0036.520] GetProcessHeap () returned 0x6e0000 [0036.520] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xaca) returned 0x6f2b08 [0036.520] FreeEnvironmentStringsW (penv=0x6f2030) returned 1 [0036.520] GetProcessHeap () returned 0x6e0000 [0036.520] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x4) returned 0x6f0c60 [0036.520] GetEnvironmentStringsW () returned 0x6f2030* [0036.520] GetProcessHeap () returned 0x6e0000 [0036.520] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xaca) returned 0x6f35e0 [0036.521] FreeEnvironmentStringsW (penv=0x6f2030) returned 1 [0036.521] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2de880 | out: phkResult=0x2de880*=0x68) returned 0x0 [0036.521] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2de888, lpData=0x2de88c, lpcbData=0x2de884*=0x1000 | out: lpType=0x2de888*=0x0, lpData=0x2de88c*=0x0, lpcbData=0x2de884*=0x1000) returned 0x2 [0036.521] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2de888, lpData=0x2de88c, lpcbData=0x2de884*=0x1000 | out: lpType=0x2de888*=0x4, lpData=0x2de88c*=0x1, lpcbData=0x2de884*=0x4) returned 0x0 [0036.521] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2de888, lpData=0x2de88c, lpcbData=0x2de884*=0x1000 | out: lpType=0x2de888*=0x0, lpData=0x2de88c*=0x1, lpcbData=0x2de884*=0x1000) returned 0x2 [0036.521] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2de888, lpData=0x2de88c, lpcbData=0x2de884*=0x1000 | out: lpType=0x2de888*=0x4, lpData=0x2de88c*=0x0, lpcbData=0x2de884*=0x4) returned 0x0 [0036.521] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2de888, lpData=0x2de88c, lpcbData=0x2de884*=0x1000 | out: lpType=0x2de888*=0x4, lpData=0x2de88c*=0x40, lpcbData=0x2de884*=0x4) returned 0x0 [0036.521] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2de888, lpData=0x2de88c, lpcbData=0x2de884*=0x1000 | out: lpType=0x2de888*=0x4, lpData=0x2de88c*=0x40, lpcbData=0x2de884*=0x4) returned 0x0 [0036.521] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2de888, lpData=0x2de88c, lpcbData=0x2de884*=0x1000 | out: lpType=0x2de888*=0x0, lpData=0x2de88c*=0x40, lpcbData=0x2de884*=0x1000) returned 0x2 [0036.521] RegCloseKey (hKey=0x68) returned 0x0 [0036.521] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2de880 | out: phkResult=0x2de880*=0x68) returned 0x0 [0036.521] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2de888, lpData=0x2de88c, lpcbData=0x2de884*=0x1000 | out: lpType=0x2de888*=0x0, lpData=0x2de88c*=0x40, lpcbData=0x2de884*=0x1000) returned 0x2 [0036.521] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2de888, lpData=0x2de88c, lpcbData=0x2de884*=0x1000 | out: lpType=0x2de888*=0x4, lpData=0x2de88c*=0x1, lpcbData=0x2de884*=0x4) returned 0x0 [0036.521] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2de888, lpData=0x2de88c, lpcbData=0x2de884*=0x1000 | out: lpType=0x2de888*=0x0, lpData=0x2de88c*=0x1, lpcbData=0x2de884*=0x1000) returned 0x2 [0036.521] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2de888, lpData=0x2de88c, lpcbData=0x2de884*=0x1000 | out: lpType=0x2de888*=0x4, lpData=0x2de88c*=0x0, lpcbData=0x2de884*=0x4) returned 0x0 [0036.521] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2de888, lpData=0x2de88c, lpcbData=0x2de884*=0x1000 | out: lpType=0x2de888*=0x4, lpData=0x2de88c*=0x9, lpcbData=0x2de884*=0x4) returned 0x0 [0036.521] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2de888, lpData=0x2de88c, lpcbData=0x2de884*=0x1000 | out: lpType=0x2de888*=0x4, lpData=0x2de88c*=0x9, lpcbData=0x2de884*=0x4) returned 0x0 [0036.522] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2de888, lpData=0x2de88c, lpcbData=0x2de884*=0x1000 | out: lpType=0x2de888*=0x0, lpData=0x2de88c*=0x9, lpcbData=0x2de884*=0x1000) returned 0x2 [0036.522] RegCloseKey (hKey=0x68) returned 0x0 [0036.522] time (in: timer=0x0 | out: timer=0x0) returned 0x5d94d0cd [0036.522] srand (_Seed=0x5d94d0cd) [0036.522] GetCommandLineW () returned="C:\\Windows\\system32\\cmd.exe /C wmic shadowcopy delete" [0036.522] GetCommandLineW () returned="C:\\Windows\\system32\\cmd.exe /C wmic shadowcopy delete" [0036.522] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a235260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0036.522] GetProcessHeap () returned 0x6e0000 [0036.522] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x210) returned 0x6f2030 [0036.522] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6f2038, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0036.522] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0036.522] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0036.522] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0036.522] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0036.522] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0036.522] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0036.522] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0036.522] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0036.522] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0036.522] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0036.522] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0036.523] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0036.523] GetProcessHeap () returned 0x6e0000 [0036.523] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6f2b08 | out: hHeap=0x6e0000) returned 1 [0036.523] GetEnvironmentStringsW () returned 0x6f2248* [0036.523] GetProcessHeap () returned 0x6e0000 [0036.523] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xae2) returned 0x6f4ba8 [0036.523] FreeEnvironmentStringsW (penv=0x6f2248) returned 1 [0036.523] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0036.523] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0036.523] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0036.523] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0036.523] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0036.523] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0036.523] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0036.529] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0036.529] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0036.529] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0036.529] GetProcessHeap () returned 0x6e0000 [0036.529] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x54) returned 0x6f5698 [0036.529] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x2df64c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0036.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x2df64c, lpFilePart=0x2df648 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2df648*="Desktop") returned 0x25 [0036.529] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0036.529] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x2df3c8 | out: lpFindFileData=0x2df3c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x6f1eb0 [0036.529] FindClose (in: hFindFile=0x6f1eb0 | out: hFindFile=0x6f1eb0) returned 1 [0036.530] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x2df3c8 | out: lpFindFileData=0x2df3c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x6f1eb0 [0036.530] FindClose (in: hFindFile=0x6f1eb0 | out: hFindFile=0x6f1eb0) returned 1 [0036.530] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20 [0036.530] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x2df3c8 | out: lpFindFileData=0x2df3c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc46c41e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xc46c41e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x6f1eb0 [0036.530] FindClose (in: hFindFile=0x6f1eb0 | out: hFindFile=0x6f1eb0) returned 1 [0036.530] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0036.530] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0036.530] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0036.530] GetProcessHeap () returned 0x6e0000 [0036.530] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6f4ba8 | out: hHeap=0x6e0000) returned 1 [0036.530] GetEnvironmentStringsW () returned 0x6f40b8* [0036.530] GetProcessHeap () returned 0x6e0000 [0036.530] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xb36) returned 0x6f5ef8 [0036.530] FreeEnvironmentStringsW (penv=0x6f40b8) returned 1 [0036.530] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a235260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0036.531] GetProcessHeap () returned 0x6e0000 [0036.531] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6f5698 | out: hHeap=0x6e0000) returned 1 [0036.531] GetProcessHeap () returned 0x6e0000 [0036.531] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x400e) returned 0x6f6a38 [0036.531] GetProcessHeap () returned 0x6e0000 [0036.531] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x3a) returned 0x6f1eb0 [0036.531] GetProcessHeap () returned 0x6e0000 [0036.531] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6f6a38 | out: hHeap=0x6e0000) returned 1 [0036.531] GetConsoleOutputCP () returned 0x1b5 [0036.531] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0036.531] GetUserDefaultLCID () returned 0x409 [0036.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a234950, cchData=8 | out: lpLCData=":") returned 2 [0036.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2df78c, cchData=128 | out: lpLCData="0") returned 2 [0036.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2df78c, cchData=128 | out: lpLCData="0") returned 2 [0036.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2df78c, cchData=128 | out: lpLCData="1") returned 2 [0036.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a234940, cchData=8 | out: lpLCData="/") returned 2 [0036.532] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a234d80, cchData=32 | out: lpLCData="Mon") returned 4 [0036.533] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a234d40, cchData=32 | out: lpLCData="Tue") returned 4 [0036.533] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a234d00, cchData=32 | out: lpLCData="Wed") returned 4 [0036.533] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a234cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0036.533] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a234c80, cchData=32 | out: lpLCData="Fri") returned 4 [0036.533] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a234c40, cchData=32 | out: lpLCData="Sat") returned 4 [0036.533] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a234c00, cchData=32 | out: lpLCData="Sun") returned 4 [0036.533] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a234930, cchData=8 | out: lpLCData=".") returned 2 [0036.533] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a234920, cchData=8 | out: lpLCData=",") returned 2 [0036.533] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0036.534] GetProcessHeap () returned 0x6e0000 [0036.534] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x20c) returned 0x6f2dc0 [0036.534] GetConsoleTitleW (in: lpConsoleTitle=0x6f2dc0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0036.534] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0036.534] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92 [0036.534] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0036.535] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d [0036.535] GetProcessHeap () returned 0x6e0000 [0036.535] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x400a) returned 0x6f6a38 [0036.535] GetProcessHeap () returned 0x6e0000 [0036.535] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6f6a38 | out: hHeap=0x6e0000) returned 1 [0036.535] _wcsicmp (_String1="wmic", _String2=")") returned 78 [0036.535] _wcsicmp (_String1="FOR", _String2="wmic") returned -17 [0036.535] _wcsicmp (_String1="FOR/?", _String2="wmic") returned -17 [0036.535] _wcsicmp (_String1="IF", _String2="wmic") returned -14 [0036.535] _wcsicmp (_String1="IF/?", _String2="wmic") returned -14 [0036.535] _wcsicmp (_String1="REM", _String2="wmic") returned -5 [0036.535] _wcsicmp (_String1="REM/?", _String2="wmic") returned -5 [0036.536] GetProcessHeap () returned 0x6e0000 [0036.536] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x58) returned 0x6f2fd8 [0036.536] GetProcessHeap () returned 0x6e0000 [0036.536] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x12) returned 0x6f3038 [0036.536] GetProcessHeap () returned 0x6e0000 [0036.536] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x2e) returned 0x6f3058 [0036.537] GetConsoleTitleW (in: lpConsoleTitle=0x2df484, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0036.537] _wcsicmp (_String1="wmic", _String2="DIR") returned 19 [0036.537] _wcsicmp (_String1="wmic", _String2="ERASE") returned 18 [0036.537] _wcsicmp (_String1="wmic", _String2="DEL") returned 19 [0036.537] _wcsicmp (_String1="wmic", _String2="TYPE") returned 3 [0036.537] _wcsicmp (_String1="wmic", _String2="COPY") returned 20 [0036.537] _wcsicmp (_String1="wmic", _String2="CD") returned 20 [0036.537] _wcsicmp (_String1="wmic", _String2="CHDIR") returned 20 [0036.537] _wcsicmp (_String1="wmic", _String2="RENAME") returned 5 [0036.537] _wcsicmp (_String1="wmic", _String2="REN") returned 5 [0036.537] _wcsicmp (_String1="wmic", _String2="ECHO") returned 18 [0036.537] _wcsicmp (_String1="wmic", _String2="SET") returned 4 [0036.537] _wcsicmp (_String1="wmic", _String2="PAUSE") returned 7 [0036.537] _wcsicmp (_String1="wmic", _String2="DATE") returned 19 [0036.537] _wcsicmp (_String1="wmic", _String2="TIME") returned 3 [0036.537] _wcsicmp (_String1="wmic", _String2="PROMPT") returned 7 [0036.537] _wcsicmp (_String1="wmic", _String2="MD") returned 10 [0036.537] _wcsicmp (_String1="wmic", _String2="MKDIR") returned 10 [0036.537] _wcsicmp (_String1="wmic", _String2="RD") returned 5 [0036.538] _wcsicmp (_String1="wmic", _String2="RMDIR") returned 5 [0036.538] _wcsicmp (_String1="wmic", _String2="PATH") returned 7 [0036.538] _wcsicmp (_String1="wmic", _String2="GOTO") returned 16 [0036.538] _wcsicmp (_String1="wmic", _String2="SHIFT") returned 4 [0036.538] _wcsicmp (_String1="wmic", _String2="CLS") returned 20 [0036.538] _wcsicmp (_String1="wmic", _String2="CALL") returned 20 [0036.538] _wcsicmp (_String1="wmic", _String2="VERIFY") returned 1 [0036.538] _wcsicmp (_String1="wmic", _String2="VER") returned 1 [0036.538] _wcsicmp (_String1="wmic", _String2="VOL") returned 1 [0036.538] _wcsicmp (_String1="wmic", _String2="EXIT") returned 18 [0036.538] _wcsicmp (_String1="wmic", _String2="SETLOCAL") returned 4 [0036.538] _wcsicmp (_String1="wmic", _String2="ENDLOCAL") returned 18 [0036.538] _wcsicmp (_String1="wmic", _String2="TITLE") returned 3 [0036.538] _wcsicmp (_String1="wmic", _String2="START") returned 4 [0036.538] _wcsicmp (_String1="wmic", _String2="DPATH") returned 19 [0036.538] _wcsicmp (_String1="wmic", _String2="KEYS") returned 12 [0036.538] _wcsicmp (_String1="wmic", _String2="MOVE") returned 10 [0036.538] _wcsicmp (_String1="wmic", _String2="PUSHD") returned 7 [0036.538] _wcsicmp (_String1="wmic", _String2="POPD") returned 7 [0036.538] _wcsicmp (_String1="wmic", _String2="ASSOC") returned 22 [0036.538] _wcsicmp (_String1="wmic", _String2="FTYPE") returned 17 [0036.538] _wcsicmp (_String1="wmic", _String2="BREAK") returned 21 [0036.538] _wcsicmp (_String1="wmic", _String2="COLOR") returned 20 [0036.538] _wcsicmp (_String1="wmic", _String2="MKLINK") returned 10 [0036.538] _wcsicmp (_String1="wmic", _String2="DIR") returned 19 [0036.538] _wcsicmp (_String1="wmic", _String2="ERASE") returned 18 [0036.538] _wcsicmp (_String1="wmic", _String2="DEL") returned 19 [0036.538] _wcsicmp (_String1="wmic", _String2="TYPE") returned 3 [0036.538] _wcsicmp (_String1="wmic", _String2="COPY") returned 20 [0036.538] _wcsicmp (_String1="wmic", _String2="CD") returned 20 [0036.538] _wcsicmp (_String1="wmic", _String2="CHDIR") returned 20 [0036.538] _wcsicmp (_String1="wmic", _String2="RENAME") returned 5 [0036.538] _wcsicmp (_String1="wmic", _String2="REN") returned 5 [0036.538] _wcsicmp (_String1="wmic", _String2="ECHO") returned 18 [0036.538] _wcsicmp (_String1="wmic", _String2="SET") returned 4 [0036.539] _wcsicmp (_String1="wmic", _String2="PAUSE") returned 7 [0036.539] _wcsicmp (_String1="wmic", _String2="DATE") returned 19 [0036.539] _wcsicmp (_String1="wmic", _String2="TIME") returned 3 [0036.539] _wcsicmp (_String1="wmic", _String2="PROMPT") returned 7 [0036.539] _wcsicmp (_String1="wmic", _String2="MD") returned 10 [0036.539] _wcsicmp (_String1="wmic", _String2="MKDIR") returned 10 [0036.539] _wcsicmp (_String1="wmic", _String2="RD") returned 5 [0036.539] _wcsicmp (_String1="wmic", _String2="RMDIR") returned 5 [0036.539] _wcsicmp (_String1="wmic", _String2="PATH") returned 7 [0036.539] _wcsicmp (_String1="wmic", _String2="GOTO") returned 16 [0036.539] _wcsicmp (_String1="wmic", _String2="SHIFT") returned 4 [0036.539] _wcsicmp (_String1="wmic", _String2="CLS") returned 20 [0036.539] _wcsicmp (_String1="wmic", _String2="CALL") returned 20 [0036.539] _wcsicmp (_String1="wmic", _String2="VERIFY") returned 1 [0036.539] _wcsicmp (_String1="wmic", _String2="VER") returned 1 [0036.539] _wcsicmp (_String1="wmic", _String2="VOL") returned 1 [0036.539] _wcsicmp (_String1="wmic", _String2="EXIT") returned 18 [0036.539] _wcsicmp (_String1="wmic", _String2="SETLOCAL") returned 4 [0036.539] _wcsicmp (_String1="wmic", _String2="ENDLOCAL") returned 18 [0036.539] _wcsicmp (_String1="wmic", _String2="TITLE") returned 3 [0036.539] _wcsicmp (_String1="wmic", _String2="START") returned 4 [0036.539] _wcsicmp (_String1="wmic", _String2="DPATH") returned 19 [0036.539] _wcsicmp (_String1="wmic", _String2="KEYS") returned 12 [0036.539] _wcsicmp (_String1="wmic", _String2="MOVE") returned 10 [0036.539] _wcsicmp (_String1="wmic", _String2="PUSHD") returned 7 [0036.539] _wcsicmp (_String1="wmic", _String2="POPD") returned 7 [0036.539] _wcsicmp (_String1="wmic", _String2="ASSOC") returned 22 [0036.539] _wcsicmp (_String1="wmic", _String2="FTYPE") returned 17 [0036.539] _wcsicmp (_String1="wmic", _String2="BREAK") returned 21 [0036.539] _wcsicmp (_String1="wmic", _String2="COLOR") returned 20 [0036.539] _wcsicmp (_String1="wmic", _String2="MKLINK") returned 10 [0036.539] _wcsicmp (_String1="wmic", _String2="FOR") returned 17 [0036.539] _wcsicmp (_String1="wmic", _String2="IF") returned 14 [0036.539] _wcsicmp (_String1="wmic", _String2="REM") returned 5 [0036.540] GetProcessHeap () returned 0x6e0000 [0036.540] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x210) returned 0x6f3090 [0036.540] GetProcessHeap () returned 0x6e0000 [0036.540] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x38) returned 0x6f32a8 [0036.540] _wcsnicmp (_String1="wmic", _String2="cmd ", _MaxCount=0x4) returned 20 [0036.540] GetProcessHeap () returned 0x6e0000 [0036.540] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x418) returned 0x6e07f0 [0036.540] SetErrorMode (uMode=0x0) returned 0x8003 [0036.540] SetErrorMode (uMode=0x1) returned 0x0 [0036.540] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6e07f8, lpFilePart=0x2defa4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2defa4*="Desktop") returned 0x25 [0036.540] SetErrorMode (uMode=0x8003) returned 0x1 [0036.540] GetProcessHeap () returned 0x6e0000 [0036.540] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6e07f0, Size=0x5e) returned 0x6e07f0 [0036.540] GetProcessHeap () returned 0x6e0000 [0036.540] RtlSizeHeap (HeapHandle=0x6e0000, Flags=0x0, MemoryPointer=0x6e07f0) returned 0x5e [0036.540] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0036.540] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0036.540] GetProcessHeap () returned 0x6e0000 [0036.540] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x120) returned 0x6f32e8 [0036.540] GetProcessHeap () returned 0x6e0000 [0036.540] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x238) returned 0x6e0858 [0036.547] GetProcessHeap () returned 0x6e0000 [0036.547] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6e0858, Size=0x122) returned 0x6e0858 [0036.547] GetProcessHeap () returned 0x6e0000 [0036.547] RtlSizeHeap (HeapHandle=0x6e0000, Flags=0x0, MemoryPointer=0x6e0858) returned 0x122 [0036.547] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0036.547] GetProcessHeap () returned 0x6e0000 [0036.547] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xe0) returned 0x6f3410 [0036.547] GetProcessHeap () returned 0x6e0000 [0036.547] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6f3410, Size=0x76) returned 0x6f3410 [0036.548] GetProcessHeap () returned 0x6e0000 [0036.548] RtlSizeHeap (HeapHandle=0x6e0000, Flags=0x0, MemoryPointer=0x6f3410) returned 0x76 [0036.548] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0036.548] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wmic.*", fInfoLevelId=0x1, lpFindFileData=0x2ded20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ded20) returned 0xffffffff [0036.549] GetLastError () returned 0x2 [0036.549] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wmic", fInfoLevelId=0x1, lpFindFileData=0x2ded20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ded20) returned 0xffffffff [0036.549] GetLastError () returned 0x2 [0036.549] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0036.549] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\wmic.*", fInfoLevelId=0x1, lpFindFileData=0x2ded20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ded20) returned 0xffffffff [0036.549] GetLastError () returned 0x2 [0036.549] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\wmic", fInfoLevelId=0x1, lpFindFileData=0x2ded20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ded20) returned 0xffffffff [0036.549] GetLastError () returned 0x2 [0036.549] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0036.549] FindFirstFileExW (in: lpFileName="C:\\Windows\\wmic.*", fInfoLevelId=0x1, lpFindFileData=0x2ded20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ded20) returned 0xffffffff [0036.550] GetLastError () returned 0x2 [0036.550] FindFirstFileExW (in: lpFileName="C:\\Windows\\wmic", fInfoLevelId=0x1, lpFindFileData=0x2ded20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ded20) returned 0xffffffff [0036.550] GetLastError () returned 0x2 [0036.550] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0036.550] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\Wbem\\wmic.*", fInfoLevelId=0x1, lpFindFileData=0x2ded20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ded20) returned 0x6f3490 [0036.550] GetProcessHeap () returned 0x6e0000 [0036.550] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x0, Size=0x14) returned 0x6f34d0 [0036.550] FindClose (in: hFindFile=0x6f3490 | out: hFindFile=0x6f3490) returned 1 [0036.550] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\Wbem\\WMIC.COM", fInfoLevelId=0x1, lpFindFileData=0x2ded20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ded20) returned 0xffffffff [0036.551] GetLastError () returned 0x2 [0036.551] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\Wbem\\WMIC.EXE", fInfoLevelId=0x1, lpFindFileData=0x2ded20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ded20) returned 0x6f3490 [0036.551] GetProcessHeap () returned 0x6e0000 [0036.551] RtlReAllocateHeap (Heap=0x6e0000, Flags=0x0, Ptr=0x6f34d0, Size=0x4) returned 0x6f34d0 [0036.551] FindClose (in: hFindFile=0x6f3490 | out: hFindFile=0x6f3490) returned 1 [0036.551] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0036.551] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0036.551] GetConsoleTitleW (in: lpConsoleTitle=0x2df218, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0036.551] InitializeProcThreadAttributeList (in: lpAttributeList=0x2df0a0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2df168 | out: lpAttributeList=0x2df0a0, lpSize=0x2df168) returned 1 [0036.551] UpdateProcThreadAttribute (in: lpAttributeList=0x2df0a0, dwFlags=0x0, Attribute=0x60001, lpValue=0x2df160, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2df0a0, lpPreviousValue=0x0) returned 1 [0036.551] GetStartupInfoW (in: lpStartupInfo=0x2df05c | out: lpStartupInfo=0x2df05c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0036.551] GetProcessHeap () returned 0x6e0000 [0036.551] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0x18) returned 0x6f3490 [0036.551] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0036.551] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0036.551] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0036.551] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0036.551] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0036.552] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0036.553] GetProcessHeap () returned 0x6e0000 [0036.553] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6f3490 | out: hHeap=0x6e0000) returned 1 [0036.553] GetProcessHeap () returned 0x6e0000 [0036.553] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xa) returned 0x6eff00 [0036.553] lstrcmpW (lpString1="\\WMIC.exe", lpString2="\\XCOPY.EXE") returned -1 [0036.554] CreateProcessW (in: lpApplicationName="C:\\Windows\\System32\\Wbem\\WMIC.exe", lpCommandLine="wmic shadowcopy delete", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x2df0fc*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="wmic shadowcopy delete", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2df148 | out: lpCommandLine="wmic shadowcopy delete", lpProcessInformation=0x2df148*(hProcess=0x78, hThread=0x74, dwProcessId=0xa24, dwThreadId=0xa28)) returned 1 [0036.787] CloseHandle (hObject=0x74) returned 1 [0036.787] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0036.787] GetProcessHeap () returned 0x6e0000 [0036.787] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6f5ef8 | out: hHeap=0x6e0000) returned 1 [0036.787] GetEnvironmentStringsW () returned 0x6f5ef8* [0036.787] GetProcessHeap () returned 0x6e0000 [0036.787] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xb36) returned 0x6f40b8 [0036.787] FreeEnvironmentStringsW (penv=0x6f5ef8) returned 1 [0036.787] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0 [0045.098] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x2df03c | out: lpExitCode=0x2df03c*=0x80041014) returned 1 [0045.098] CloseHandle (hObject=0x78) returned 1 [0045.098] _vsnwprintf (in: _Buffer=0x2df184, _BufferCount=0x13, _Format="%08X", _ArgList=0x2df048 | out: _Buffer="80041014") returned 8 [0045.098] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="80041014") returned 1 [0045.098] GetProcessHeap () returned 0x6e0000 [0045.098] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6f40b8 | out: hHeap=0x6e0000) returned 1 [0045.098] GetEnvironmentStringsW () returned 0x6f40b8* [0045.098] GetProcessHeap () returned 0x6e0000 [0045.098] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xb5c) returned 0x6f95a0 [0045.098] FreeEnvironmentStringsW (penv=0x6f40b8) returned 1 [0045.098] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0045.098] GetProcessHeap () returned 0x6e0000 [0045.098] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6f95a0 | out: hHeap=0x6e0000) returned 1 [0045.098] GetEnvironmentStringsW () returned 0x6f40b8* [0045.098] GetProcessHeap () returned 0x6e0000 [0045.098] RtlAllocateHeap (HeapHandle=0x6e0000, Flags=0x8, Size=0xb5c) returned 0x6f95a0 [0045.098] FreeEnvironmentStringsW (penv=0x6f40b8) returned 1 [0045.098] GetProcessHeap () returned 0x6e0000 [0045.098] HeapFree (in: hHeap=0x6e0000, dwFlags=0x0, lpMem=0x6eff00 | out: hHeap=0x6e0000) returned 1 [0045.098] DeleteProcThreadAttributeList (in: lpAttributeList=0x2df0a0 | out: lpAttributeList=0x2df0a0) [0045.098] _get_osfhandle (_FileHandle=1) returned 0x7 [0045.098] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0045.099] _get_osfhandle (_FileHandle=1) returned 0x7 [0045.099] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a2341ac | out: lpMode=0x4a2341ac) returned 1 [0045.099] _get_osfhandle (_FileHandle=0) returned 0x3 [0045.099] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a2341b0 | out: lpMode=0x4a2341b0) returned 1 [0045.099] SetConsoleInputExeNameW () returned 0x1 [0045.099] GetConsoleOutputCP () returned 0x1b5 [0045.099] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0045.099] SetThreadUILanguage (LangId=0x0) returned 0x409 [0045.100] exit (_Code=-2147217388) Process: id = "7" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x4ec7e000" os_pid = "0xa1c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x980" cmd_line = "cmd.exe /C taskkill.exe /F /IM sql*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 63 os_tid = 0xa20 [0036.809] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2df96c | out: lpSystemTimeAsFileTime=0x2df96c*(dwLowDateTime=0xcbd93a50, dwHighDateTime=0x1d5793e)) [0036.809] GetCurrentProcessId () returned 0xa1c [0036.809] GetCurrentThreadId () returned 0xa20 [0036.809] GetTickCount () returned 0x114385f [0036.809] QueryPerformanceCounter (in: lpPerformanceCount=0x2df964 | out: lpPerformanceCount=0x2df964*=15709527339) returned 1 [0036.812] GetModuleHandleA (lpModuleName=0x0) returned 0x4a210000 [0036.812] __set_app_type (_Type=0x1) [0036.812] __p__fmode () returned 0x74eb31f4 [0036.812] __p__commode () returned 0x74eb31fc [0036.812] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a2321a6) returned 0x0 [0036.812] __getmainargs (in: _Argc=0x4a234238, _Argv=0x4a234240, _Env=0x4a23423c, _DoWildCard=0, _StartInfo=0x4a234140 | out: _Argc=0x4a234238, _Argv=0x4a234240, _Env=0x4a23423c) returned 0 [0036.812] GetCurrentThreadId () returned 0xa20 [0036.812] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xa20) returned 0x60 [0036.813] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0036.813] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f [0036.813] SetThreadUILanguage (LangId=0x0) returned 0x409 [0036.813] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0036.813] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2df8fc | out: phkResult=0x2df8fc*=0x0) returned 0x2 [0036.813] VirtualQuery (in: lpAddress=0x2df933, lpBuffer=0x2df8cc, dwLength=0x1c | out: lpBuffer=0x2df8cc*(BaseAddress=0x2df000, AllocationBase=0x1e0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0036.813] VirtualQuery (in: lpAddress=0x1e0000, lpBuffer=0x2df8cc, dwLength=0x1c | out: lpBuffer=0x2df8cc*(BaseAddress=0x1e0000, AllocationBase=0x1e0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0036.813] VirtualQuery (in: lpAddress=0x1e1000, lpBuffer=0x2df8cc, dwLength=0x1c | out: lpBuffer=0x2df8cc*(BaseAddress=0x1e1000, AllocationBase=0x1e0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0036.813] VirtualQuery (in: lpAddress=0x1e3000, lpBuffer=0x2df8cc, dwLength=0x1c | out: lpBuffer=0x2df8cc*(BaseAddress=0x1e3000, AllocationBase=0x1e0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0036.813] VirtualQuery (in: lpAddress=0x2e0000, lpBuffer=0x2df8cc, dwLength=0x1c | out: lpBuffer=0x2df8cc*(BaseAddress=0x2e0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x20000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0036.813] GetConsoleOutputCP () returned 0x1b5 [0036.814] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0036.814] SetConsoleCtrlHandler (HandlerRoutine=0x4a22e72a, Add=1) returned 1 [0036.814] _get_osfhandle (_FileHandle=1) returned 0xcc [0036.814] SetConsoleMode (hConsoleHandle=0xcc, dwMode=0x0) returned 0 [0036.814] _get_osfhandle (_FileHandle=1) returned 0xcc [0036.814] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x4a2341ac | out: lpMode=0x4a2341ac) returned 0 [0036.814] _get_osfhandle (_FileHandle=0) returned 0xc8 [0036.814] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a2341b0 | out: lpMode=0x4a2341b0) returned 0 [0036.814] GetEnvironmentStringsW () returned 0x311ff8* [0036.814] GetProcessHeap () returned 0x300000 [0036.814] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xaca) returned 0x312ad0 [0036.815] FreeEnvironmentStringsW (penv=0x311ff8) returned 1 [0036.815] GetProcessHeap () returned 0x300000 [0036.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x4) returned 0x310c30 [0036.815] GetEnvironmentStringsW () returned 0x311ff8* [0036.815] GetProcessHeap () returned 0x300000 [0036.815] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xaca) returned 0x3135a8 [0036.815] FreeEnvironmentStringsW (penv=0x311ff8) returned 1 [0036.815] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2de86c | out: phkResult=0x2de86c*=0x68) returned 0x0 [0036.815] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2de874, lpData=0x2de878, lpcbData=0x2de870*=0x1000 | out: lpType=0x2de874*=0x0, lpData=0x2de878*=0x0, lpcbData=0x2de870*=0x1000) returned 0x2 [0036.815] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2de874, lpData=0x2de878, lpcbData=0x2de870*=0x1000 | out: lpType=0x2de874*=0x4, lpData=0x2de878*=0x1, lpcbData=0x2de870*=0x4) returned 0x0 [0036.815] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2de874, lpData=0x2de878, lpcbData=0x2de870*=0x1000 | out: lpType=0x2de874*=0x0, lpData=0x2de878*=0x1, lpcbData=0x2de870*=0x1000) returned 0x2 [0036.815] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2de874, lpData=0x2de878, lpcbData=0x2de870*=0x1000 | out: lpType=0x2de874*=0x4, lpData=0x2de878*=0x0, lpcbData=0x2de870*=0x4) returned 0x0 [0036.815] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2de874, lpData=0x2de878, lpcbData=0x2de870*=0x1000 | out: lpType=0x2de874*=0x4, lpData=0x2de878*=0x40, lpcbData=0x2de870*=0x4) returned 0x0 [0036.815] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2de874, lpData=0x2de878, lpcbData=0x2de870*=0x1000 | out: lpType=0x2de874*=0x4, lpData=0x2de878*=0x40, lpcbData=0x2de870*=0x4) returned 0x0 [0036.815] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2de874, lpData=0x2de878, lpcbData=0x2de870*=0x1000 | out: lpType=0x2de874*=0x0, lpData=0x2de878*=0x40, lpcbData=0x2de870*=0x1000) returned 0x2 [0036.815] RegCloseKey (hKey=0x68) returned 0x0 [0036.815] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2de86c | out: phkResult=0x2de86c*=0x68) returned 0x0 [0036.816] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2de874, lpData=0x2de878, lpcbData=0x2de870*=0x1000 | out: lpType=0x2de874*=0x0, lpData=0x2de878*=0x40, lpcbData=0x2de870*=0x1000) returned 0x2 [0036.816] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2de874, lpData=0x2de878, lpcbData=0x2de870*=0x1000 | out: lpType=0x2de874*=0x4, lpData=0x2de878*=0x1, lpcbData=0x2de870*=0x4) returned 0x0 [0036.816] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2de874, lpData=0x2de878, lpcbData=0x2de870*=0x1000 | out: lpType=0x2de874*=0x0, lpData=0x2de878*=0x1, lpcbData=0x2de870*=0x1000) returned 0x2 [0036.816] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2de874, lpData=0x2de878, lpcbData=0x2de870*=0x1000 | out: lpType=0x2de874*=0x4, lpData=0x2de878*=0x0, lpcbData=0x2de870*=0x4) returned 0x0 [0036.816] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2de874, lpData=0x2de878, lpcbData=0x2de870*=0x1000 | out: lpType=0x2de874*=0x4, lpData=0x2de878*=0x9, lpcbData=0x2de870*=0x4) returned 0x0 [0036.816] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2de874, lpData=0x2de878, lpcbData=0x2de870*=0x1000 | out: lpType=0x2de874*=0x4, lpData=0x2de878*=0x9, lpcbData=0x2de870*=0x4) returned 0x0 [0036.816] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2de874, lpData=0x2de878, lpcbData=0x2de870*=0x1000 | out: lpType=0x2de874*=0x0, lpData=0x2de878*=0x9, lpcbData=0x2de870*=0x1000) returned 0x2 [0036.816] RegCloseKey (hKey=0x68) returned 0x0 [0036.816] time (in: timer=0x0 | out: timer=0x0) returned 0x5d94d0cd [0036.816] srand (_Seed=0x5d94d0cd) [0036.816] GetCommandLineW () returned="cmd.exe /C taskkill.exe /F /IM sql*" [0036.816] GetCommandLineW () returned="cmd.exe /C taskkill.exe /F /IM sql*" [0036.816] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a235260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0036.817] GetProcessHeap () returned 0x300000 [0036.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x210) returned 0x311ff8 [0036.817] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x312000, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0036.817] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0036.817] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0036.817] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0036.817] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0036.817] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0036.817] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0036.817] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0036.817] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0036.817] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0036.817] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0036.817] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0036.817] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0036.817] GetProcessHeap () returned 0x300000 [0036.817] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x312ad0 | out: hHeap=0x300000) returned 1 [0036.817] GetEnvironmentStringsW () returned 0x312210* [0036.817] GetProcessHeap () returned 0x300000 [0036.817] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xae2) returned 0x314b70 [0036.818] FreeEnvironmentStringsW (penv=0x312210) returned 1 [0036.818] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0036.818] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0036.818] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0036.818] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0036.818] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0036.818] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0036.818] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0036.818] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0036.818] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0036.818] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0036.818] GetProcessHeap () returned 0x300000 [0036.818] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x54) returned 0x315660 [0036.818] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x2df638 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0036.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x2df638, lpFilePart=0x2df634 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2df634*="Desktop") returned 0x25 [0036.818] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0036.818] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x2df3b4 | out: lpFindFileData=0x2df3b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x311e78 [0036.818] FindClose (in: hFindFile=0x311e78 | out: hFindFile=0x311e78) returned 1 [0036.818] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x2df3b4 | out: lpFindFileData=0x2df3b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x311e78 [0036.818] FindClose (in: hFindFile=0x311e78 | out: hFindFile=0x311e78) returned 1 [0036.819] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20 [0036.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x2df3b4 | out: lpFindFileData=0x2df3b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc46c41e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xc46c41e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x311e78 [0036.819] FindClose (in: hFindFile=0x311e78 | out: hFindFile=0x311e78) returned 1 [0036.819] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0036.819] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0036.819] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0036.819] GetProcessHeap () returned 0x300000 [0036.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x314b70 | out: hHeap=0x300000) returned 1 [0036.819] GetEnvironmentStringsW () returned 0x314080* [0036.819] GetProcessHeap () returned 0x300000 [0036.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xb36) returned 0x315ec0 [0036.819] FreeEnvironmentStringsW (penv=0x314080) returned 1 [0036.819] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a235260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0036.819] GetProcessHeap () returned 0x300000 [0036.819] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x315660 | out: hHeap=0x300000) returned 1 [0036.819] GetProcessHeap () returned 0x300000 [0036.819] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x400e) returned 0x316a00 [0036.820] GetProcessHeap () returned 0x300000 [0036.820] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x3e) returned 0x311e78 [0036.820] GetProcessHeap () returned 0x300000 [0036.820] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x316a00 | out: hHeap=0x300000) returned 1 [0036.820] GetConsoleOutputCP () returned 0x1b5 [0036.820] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0036.820] GetUserDefaultLCID () returned 0x409 [0036.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a234950, cchData=8 | out: lpLCData=":") returned 2 [0036.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2df778, cchData=128 | out: lpLCData="0") returned 2 [0036.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2df778, cchData=128 | out: lpLCData="0") returned 2 [0036.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2df778, cchData=128 | out: lpLCData="1") returned 2 [0036.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a234940, cchData=8 | out: lpLCData="/") returned 2 [0036.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a234d80, cchData=32 | out: lpLCData="Mon") returned 4 [0036.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a234d40, cchData=32 | out: lpLCData="Tue") returned 4 [0036.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a234d00, cchData=32 | out: lpLCData="Wed") returned 4 [0036.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a234cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0036.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a234c80, cchData=32 | out: lpLCData="Fri") returned 4 [0036.857] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a234c40, cchData=32 | out: lpLCData="Sat") returned 4 [0036.857] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a234c00, cchData=32 | out: lpLCData="Sun") returned 4 [0036.857] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a234930, cchData=8 | out: lpLCData=".") returned 2 [0036.857] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a234920, cchData=8 | out: lpLCData=",") returned 2 [0036.857] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0036.858] GetProcessHeap () returned 0x300000 [0036.858] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x20c) returned 0x312d88 [0036.858] GetConsoleTitleW (in: lpConsoleTitle=0x312d88, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0036.858] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0036.858] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92 [0036.858] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0036.858] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d [0036.859] GetProcessHeap () returned 0x300000 [0036.859] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x400a) returned 0x316a00 [0036.859] GetProcessHeap () returned 0x300000 [0036.859] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x316a00 | out: hHeap=0x300000) returned 1 [0036.860] _wcsicmp (_String1="taskkill.exe", _String2=")") returned 75 [0036.860] _wcsicmp (_String1="FOR", _String2="taskkill.exe") returned -14 [0036.860] _wcsicmp (_String1="FOR/?", _String2="taskkill.exe") returned -14 [0036.860] _wcsicmp (_String1="IF", _String2="taskkill.exe") returned -11 [0036.860] _wcsicmp (_String1="IF/?", _String2="taskkill.exe") returned -11 [0036.860] _wcsicmp (_String1="REM", _String2="taskkill.exe") returned -2 [0036.860] _wcsicmp (_String1="REM/?", _String2="taskkill.exe") returned -2 [0036.860] GetProcessHeap () returned 0x300000 [0036.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x58) returned 0x312fa0 [0036.860] GetProcessHeap () returned 0x300000 [0036.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x22) returned 0x313000 [0036.860] GetProcessHeap () returned 0x300000 [0036.860] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x22) returned 0x313030 [0036.861] GetConsoleTitleW (in: lpConsoleTitle=0x2df470, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0036.861] GetFileAttributesW (lpFileName="taskkill.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\taskkill.exe")) returned 0xffffffff [0036.862] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16 [0036.862] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15 [0036.862] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16 [0036.862] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24 [0036.862] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17 [0036.862] _wcsicmp (_String1="taskkill", _String2="CD") returned 17 [0036.862] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17 [0036.862] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2 [0036.862] _wcsicmp (_String1="taskkill", _String2="REN") returned 2 [0036.862] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15 [0036.862] _wcsicmp (_String1="taskkill", _String2="SET") returned 1 [0036.862] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4 [0036.862] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16 [0036.862] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8 [0036.862] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4 [0036.862] _wcsicmp (_String1="taskkill", _String2="MD") returned 7 [0036.862] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7 [0036.862] _wcsicmp (_String1="taskkill", _String2="RD") returned 2 [0036.862] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2 [0036.862] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4 [0036.862] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13 [0036.862] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1 [0036.862] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17 [0036.862] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17 [0036.862] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2 [0036.862] _wcsicmp (_String1="taskkill", _String2="VER") returned -2 [0036.862] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2 [0036.862] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15 [0036.862] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1 [0036.862] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15 [0036.862] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8 [0036.862] _wcsicmp (_String1="taskkill", _String2="START") returned 1 [0036.863] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16 [0036.863] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9 [0036.863] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7 [0036.863] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4 [0036.863] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4 [0036.863] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19 [0036.863] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14 [0036.863] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18 [0036.863] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17 [0036.863] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7 [0036.863] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16 [0036.863] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15 [0036.863] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16 [0036.863] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24 [0036.863] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17 [0036.863] _wcsicmp (_String1="taskkill", _String2="CD") returned 17 [0036.863] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17 [0036.863] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2 [0036.863] _wcsicmp (_String1="taskkill", _String2="REN") returned 2 [0036.863] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15 [0036.863] _wcsicmp (_String1="taskkill", _String2="SET") returned 1 [0036.863] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4 [0036.863] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16 [0036.863] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8 [0036.863] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4 [0036.863] _wcsicmp (_String1="taskkill", _String2="MD") returned 7 [0036.863] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7 [0036.863] _wcsicmp (_String1="taskkill", _String2="RD") returned 2 [0036.863] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2 [0036.863] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4 [0036.863] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13 [0036.863] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1 [0036.863] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17 [0036.863] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17 [0036.863] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2 [0036.863] _wcsicmp (_String1="taskkill", _String2="VER") returned -2 [0036.864] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2 [0036.864] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15 [0036.864] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1 [0036.864] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15 [0036.864] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8 [0036.864] _wcsicmp (_String1="taskkill", _String2="START") returned 1 [0036.864] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16 [0036.864] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9 [0036.864] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7 [0036.864] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4 [0036.864] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4 [0036.864] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19 [0036.864] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14 [0036.864] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18 [0036.864] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17 [0036.864] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7 [0036.864] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14 [0036.864] _wcsicmp (_String1="taskkill", _String2="IF") returned 11 [0036.864] _wcsicmp (_String1="taskkill", _String2="REM") returned 2 [0036.865] GetProcessHeap () returned 0x300000 [0036.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x210) returned 0x313060 [0036.865] GetProcessHeap () returned 0x300000 [0036.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x3c) returned 0x313278 [0036.865] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17 [0036.865] GetProcessHeap () returned 0x300000 [0036.865] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x418) returned 0x3007f0 [0036.865] SetErrorMode (uMode=0x0) returned 0x8003 [0036.865] SetErrorMode (uMode=0x1) returned 0x0 [0036.865] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3007f8, lpFilePart=0x2def90 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2def90*="Desktop") returned 0x25 [0036.865] SetErrorMode (uMode=0x8003) returned 0x1 [0036.865] GetProcessHeap () returned 0x300000 [0036.865] RtlReAllocateHeap (Heap=0x300000, Flags=0x0, Ptr=0x3007f0, Size=0x6e) returned 0x3007f0 [0036.865] GetProcessHeap () returned 0x300000 [0036.865] RtlSizeHeap (HeapHandle=0x300000, Flags=0x0, MemoryPointer=0x3007f0) returned 0x6e [0036.865] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0036.866] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0036.866] GetProcessHeap () returned 0x300000 [0036.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x120) returned 0x3132c0 [0036.866] GetProcessHeap () returned 0x300000 [0036.866] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x238) returned 0x300868 [0036.871] GetProcessHeap () returned 0x300000 [0036.871] RtlReAllocateHeap (Heap=0x300000, Flags=0x0, Ptr=0x300868, Size=0x122) returned 0x300868 [0036.871] GetProcessHeap () returned 0x300000 [0036.871] RtlSizeHeap (HeapHandle=0x300000, Flags=0x0, MemoryPointer=0x300868) returned 0x122 [0036.872] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0036.872] GetProcessHeap () returned 0x300000 [0036.872] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xe0) returned 0x3133e8 [0036.872] GetProcessHeap () returned 0x300000 [0036.872] RtlReAllocateHeap (Heap=0x300000, Flags=0x0, Ptr=0x3133e8, Size=0x76) returned 0x3133e8 [0036.872] GetProcessHeap () returned 0x300000 [0036.872] RtlSizeHeap (HeapHandle=0x300000, Flags=0x0, MemoryPointer=0x3133e8) returned 0x76 [0036.872] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0036.873] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.exe", fInfoLevelId=0x1, lpFindFileData=0x2ded2c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ded2c) returned 0xffffffff [0036.873] GetLastError () returned 0x2 [0036.873] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.exe.*", fInfoLevelId=0x1, lpFindFileData=0x2ded0c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ded0c) returned 0xffffffff [0036.873] GetLastError () returned 0x2 [0036.873] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.exe", fInfoLevelId=0x1, lpFindFileData=0x2ded0c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ded0c) returned 0xffffffff [0036.873] GetLastError () returned 0x2 [0036.873] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0036.873] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.exe", fInfoLevelId=0x1, lpFindFileData=0x2ded2c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ded2c) returned 0x313468 [0036.873] GetProcessHeap () returned 0x300000 [0036.873] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x0, Size=0x14) returned 0x3134a8 [0036.873] FindClose (in: hFindFile=0x313468 | out: hFindFile=0x313468) returned 1 [0036.873] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0036.873] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0036.874] GetConsoleTitleW (in: lpConsoleTitle=0x2df204, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0036.874] InitializeProcThreadAttributeList (in: lpAttributeList=0x2df08c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2df154 | out: lpAttributeList=0x2df08c, lpSize=0x2df154) returned 1 [0036.874] UpdateProcThreadAttribute (in: lpAttributeList=0x2df08c, dwFlags=0x0, Attribute=0x60001, lpValue=0x2df14c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2df08c, lpPreviousValue=0x0) returned 1 [0036.874] GetStartupInfoW (in: lpStartupInfo=0x2df048 | out: lpStartupInfo=0x2df048*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xc8, hStdOutput=0xcc, hStdError=0xd0)) [0036.874] GetProcessHeap () returned 0x300000 [0036.874] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0x18) returned 0x313468 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0036.874] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0036.875] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0036.875] GetProcessHeap () returned 0x300000 [0036.875] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x313468 | out: hHeap=0x300000) returned 1 [0036.875] GetProcessHeap () returned 0x300000 [0036.875] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xa) returned 0x30fed0 [0036.875] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1 [0036.877] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill.exe /F /IM sql*", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x2df0e8*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill.exe /F /IM sql*", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2df134 | out: lpCommandLine="taskkill.exe /F /IM sql*", lpProcessInformation=0x2df134*(hProcess=0x78, hThread=0x74, dwProcessId=0xa30, dwThreadId=0xa34)) returned 1 [0036.885] CloseHandle (hObject=0x74) returned 1 [0036.885] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0036.885] GetProcessHeap () returned 0x300000 [0036.885] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x315ec0 | out: hHeap=0x300000) returned 1 [0036.885] GetEnvironmentStringsW () returned 0x315ec0* [0036.885] GetProcessHeap () returned 0x300000 [0036.885] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xb36) returned 0x314080 [0036.885] FreeEnvironmentStringsW (penv=0x315ec0) returned 1 [0036.885] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0 [0037.373] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x2df028 | out: lpExitCode=0x2df028*=0x80) returned 1 [0037.373] CloseHandle (hObject=0x78) returned 1 [0037.373] _vsnwprintf (in: _Buffer=0x2df170, _BufferCount=0x13, _Format="%08X", _ArgList=0x2df034 | out: _Buffer="00000080") returned 8 [0037.373] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1 [0037.373] GetProcessHeap () returned 0x300000 [0037.373] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x314080 | out: hHeap=0x300000) returned 1 [0037.373] GetEnvironmentStringsW () returned 0x314080* [0037.373] GetProcessHeap () returned 0x300000 [0037.373] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xb5c) returned 0x319568 [0037.373] FreeEnvironmentStringsW (penv=0x314080) returned 1 [0037.374] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0037.374] GetProcessHeap () returned 0x300000 [0037.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x319568 | out: hHeap=0x300000) returned 1 [0037.374] GetEnvironmentStringsW () returned 0x314080* [0037.374] GetProcessHeap () returned 0x300000 [0037.374] RtlAllocateHeap (HeapHandle=0x300000, Flags=0x8, Size=0xb5c) returned 0x319568 [0037.374] FreeEnvironmentStringsW (penv=0x314080) returned 1 [0037.374] GetProcessHeap () returned 0x300000 [0037.374] HeapFree (in: hHeap=0x300000, dwFlags=0x0, lpMem=0x30fed0 | out: hHeap=0x300000) returned 1 [0037.374] DeleteProcThreadAttributeList (in: lpAttributeList=0x2df08c | out: lpAttributeList=0x2df08c) [0037.374] _get_osfhandle (_FileHandle=1) returned 0xcc [0037.374] SetConsoleMode (hConsoleHandle=0xcc, dwMode=0x0) returned 0 [0037.374] _get_osfhandle (_FileHandle=1) returned 0xcc [0037.374] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x4a2341ac | out: lpMode=0x4a2341ac) returned 0 [0037.374] _get_osfhandle (_FileHandle=0) returned 0xc8 [0037.374] GetConsoleMode (in: hConsoleHandle=0xc8, lpMode=0x4a2341b0 | out: lpMode=0x4a2341b0) returned 0 [0037.374] GetConsoleOutputCP () returned 0x1b5 [0037.374] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0037.374] SetThreadUILanguage (LangId=0x0) returned 0x409 [0037.375] exit (_Code=128) Process: id = "8" image_name = "wmic.exe" filename = "c:\\windows\\syswow64\\wbem\\wmic.exe" page_root = "0x4f230000" os_pid = "0xa24" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0xa08" cmd_line = "wmic shadowcopy delete" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 64 os_tid = 0xa28 [0037.382] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xdfc20 | out: lpSystemTimeAsFileTime=0xdfc20*(dwLowDateTime=0xcc1c5dd0, dwHighDateTime=0x1d5793e)) [0037.382] GetCurrentProcessId () returned 0xa24 [0037.382] GetCurrentThreadId () returned 0xa28 [0037.382] GetTickCount () returned 0x1143a14 [0037.382] QueryPerformanceCounter (in: lpPerformanceCount=0xdfc18 | out: lpPerformanceCount=0xdfc18*=15766706605) returned 1 [0037.383] GetModuleHandleA (lpModuleName=0x0) returned 0x1a0000 [0037.383] __set_app_type (_Type=0x1) [0037.383] __p__fmode () returned 0x74eb31f4 [0037.383] __p__commode () returned 0x74eb31fc [0037.384] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1ddc15) returned 0x0 [0037.384] __wgetmainargs (in: _Argc=0x1ec5e8, _Argv=0x1ec5f0, _Env=0x1ec5ec, _DoWildCard=0, _StartInfo=0x1ec5fc | out: _Argc=0x1ec5e8, _Argv=0x1ec5f0, _Env=0x1ec5ec) returned 0 [0037.389] ??0CHString@@QAE@XZ () returned 0x1ec28c [0037.389] malloc (_Size=0x18) returned 0x913b8 [0037.390] malloc (_Size=0x38) returned 0x913d8 [0037.390] malloc (_Size=0x28) returned 0x93dc8 [0037.390] malloc (_Size=0x18) returned 0x93df8 [0037.390] malloc (_Size=0x24) returned 0x93e18 [0037.391] malloc (_Size=0x18) returned 0x93e48 [0037.391] malloc (_Size=0x18) returned 0x93e68 [0037.391] ??0CHString@@QAE@XZ () returned 0x1ec594 [0037.391] malloc (_Size=0x18) returned 0x93e88 [0037.391] ?Empty@CHString@@QAEXXZ () returned 0x74ab0504 [0037.391] SetConsoleCtrlHandler (HandlerRoutine=0x1d6b6f, Add=1) returned 1 [0037.391] _onexit (_Func=0x1e2f1f) returned 0x1e2f1f [0037.391] _onexit (_Func=0x1e2f2e) returned 0x1e2f2e [0037.391] _onexit (_Func=0x1e2f42) returned 0x1e2f42 [0037.391] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0037.391] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0037.392] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0037.403] CoCreateInstance (in: rclsid=0x1a6c60*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x1a6b90*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1ec1b0 | out: ppv=0x1ec1b0*=0x2e0828) returned 0x0 [0037.411] GetCurrentProcess () returned 0xffffffff [0037.411] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x28, TokenHandle=0xdfac8 | out: TokenHandle=0xdfac8*=0x108) returned 1 [0037.412] GetTokenInformation (in: TokenHandle=0x108, TokenInformationClass=0x3, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xdfac4 | out: TokenInformation=0x0, ReturnLength=0xdfac4) returned 0 [0037.412] malloc (_Size=0x118) returned 0x92788 [0037.412] GetTokenInformation (in: TokenHandle=0x108, TokenInformationClass=0x3, TokenInformation=0x92788, TokenInformationLength=0x118, ReturnLength=0xdfac4 | out: TokenInformation=0x92788, ReturnLength=0xdfac4) returned 1 [0037.412] AdjustTokenPrivileges (in: TokenHandle=0x108, DisableAllPrivileges=0, NewState=0x92788*(PrivilegesCount=0x17, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x8, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x9, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xa, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xb, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xc, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xd, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xe, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xf, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x13, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x16, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x18, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x19, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x1c, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x1e, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x21, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x22, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x23, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0037.412] free (_Block=0x92788) [0037.412] CloseHandle (hObject=0x108) returned 1 [0037.412] malloc (_Size=0x40) returned 0x92788 [0037.412] malloc (_Size=0x40) returned 0x927d0 [0037.412] malloc (_Size=0x40) returned 0x92818 [0037.412] malloc (_Size=0x20a) returned 0x92860 [0037.412] GetSystemDirectoryW (in: lpBuffer=0x92860, uSize=0x105 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0037.412] free (_Block=0x92860) [0037.413] malloc (_Size=0xc) returned 0x93fb8 [0037.413] malloc (_Size=0xc) returned 0x93fd0 [0037.414] malloc (_Size=0xc) returned 0x92860 [0037.414] SysStringLen (param_1="C:\\Windows\\system32") returned 0x13 [0037.414] SysStringLen (param_1="\\kernel32.dll") returned 0xd [0037.414] free (_Block=0x93fb8) [0037.414] free (_Block=0x93fd0) [0037.414] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\kernel32.dll") returned 0x76c20000 [0037.415] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f [0037.415] SetThreadUILanguage (LangId=0x0) returned 0x409 [0037.415] FreeLibrary (hLibModule=0x76c20000) returned 1 [0037.415] free (_Block=0x92860) [0037.415] _vsnwprintf (in: _Buffer=0x92818, _BufferCount=0x1f, _Format="ms_%x", _ArgList=0xdfa24 | out: _Buffer="ms_409") returned 6 [0037.415] malloc (_Size=0x20) returned 0x93fb8 [0037.415] GetComputerNameW (in: lpBuffer=0x93fb8, nSize=0xdfa7c | out: lpBuffer="XDUWTFONO", nSize=0xdfa7c) returned 1 [0037.415] lstrlenW (lpString="XDUWTFONO") returned 9 [0037.416] malloc (_Size=0x14) returned 0x92860 [0037.416] lstrlenW (lpString="XDUWTFONO") returned 9 [0037.416] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x0, nSize=0xdfab8 | out: lpNameBuffer=0x0, nSize=0xdfab8) returned 0x0 [0037.416] GetLastError () returned 0xea [0037.417] malloc (_Size=0x40) returned 0x92880 [0037.417] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x92880, nSize=0xdfab8 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0xdfab8) returned 0x1 [0037.417] lstrlenW (lpString="") returned 0 [0037.417] lstrlenW (lpString="XDUWTFONO") returned 9 [0037.417] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2="", cchCount2=0) returned 3 [0037.419] lstrlenW (lpString=".") returned 1 [0037.419] lstrlenW (lpString="XDUWTFONO") returned 9 [0037.419] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2=".", cchCount2=1) returned 3 [0037.419] lstrlenW (lpString="LOCALHOST") returned 9 [0037.419] lstrlenW (lpString="XDUWTFONO") returned 9 [0037.419] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2="LOCALHOST", cchCount2=9) returned 3 [0037.419] lstrlenW (lpString="XDUWTFONO") returned 9 [0037.419] lstrlenW (lpString="XDUWTFONO") returned 9 [0037.419] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2="XDUWTFONO", cchCount2=9) returned 2 [0037.419] free (_Block=0x92860) [0037.419] lstrlenW (lpString="XDUWTFONO") returned 9 [0037.419] malloc (_Size=0x14) returned 0x92860 [0037.419] lstrlenW (lpString="XDUWTFONO") returned 9 [0037.419] lstrlenW (lpString="XDUWTFONO") returned 9 [0037.419] malloc (_Size=0x14) returned 0x928c8 [0037.419] lstrlenW (lpString="XDUWTFONO") returned 9 [0037.419] malloc (_Size=0x4) returned 0x928e8 [0037.419] malloc (_Size=0xc) returned 0x928f8 [0037.419] malloc (_Size=0x18) returned 0x92910 [0037.419] malloc (_Size=0xc) returned 0x92930 [0037.419] SysStringLen (param_1="IDENTIFY") returned 0x8 [0037.419] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0037.419] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0037.419] SysStringLen (param_1="IDENTIFY") returned 0x8 [0037.419] malloc (_Size=0x18) returned 0x92948 [0037.419] malloc (_Size=0xc) returned 0x92968 [0037.420] SysStringLen (param_1="IMPERSONATE") returned 0xb [0037.420] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0037.420] SysStringLen (param_1="IMPERSONATE") returned 0xb [0037.420] SysStringLen (param_1="IDENTIFY") returned 0x8 [0037.420] SysStringLen (param_1="IDENTIFY") returned 0x8 [0037.420] SysStringLen (param_1="IMPERSONATE") returned 0xb [0037.420] malloc (_Size=0x18) returned 0x92980 [0037.420] malloc (_Size=0xc) returned 0x929a0 [0037.420] SysStringLen (param_1="DELEGATE") returned 0x8 [0037.420] SysStringLen (param_1="IDENTIFY") returned 0x8 [0037.420] SysStringLen (param_1="DELEGATE") returned 0x8 [0037.420] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0037.420] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0037.420] SysStringLen (param_1="DELEGATE") returned 0x8 [0037.420] malloc (_Size=0x18) returned 0x929b8 [0037.420] malloc (_Size=0xc) returned 0x929d8 [0037.420] malloc (_Size=0x18) returned 0x929f0 [0037.420] malloc (_Size=0xc) returned 0x92a10 [0037.420] SysStringLen (param_1="NONE") returned 0x4 [0037.420] SysStringLen (param_1="DEFAULT") returned 0x7 [0037.420] SysStringLen (param_1="DEFAULT") returned 0x7 [0037.420] SysStringLen (param_1="NONE") returned 0x4 [0037.420] malloc (_Size=0x18) returned 0x92a28 [0037.421] malloc (_Size=0xc) returned 0x92a48 [0037.421] SysStringLen (param_1="CONNECT") returned 0x7 [0037.421] SysStringLen (param_1="DEFAULT") returned 0x7 [0037.421] malloc (_Size=0x18) returned 0x92a60 [0037.421] malloc (_Size=0xc) returned 0x92a80 [0037.422] SysStringLen (param_1="CALL") returned 0x4 [0037.422] SysStringLen (param_1="DEFAULT") returned 0x7 [0037.422] SysStringLen (param_1="CALL") returned 0x4 [0037.422] SysStringLen (param_1="CONNECT") returned 0x7 [0037.422] malloc (_Size=0x18) returned 0x9e868 [0037.422] malloc (_Size=0xc) returned 0x92e98 [0037.422] SysStringLen (param_1="PKT") returned 0x3 [0037.422] SysStringLen (param_1="DEFAULT") returned 0x7 [0037.422] SysStringLen (param_1="PKT") returned 0x3 [0037.422] SysStringLen (param_1="NONE") returned 0x4 [0037.422] SysStringLen (param_1="NONE") returned 0x4 [0037.422] SysStringLen (param_1="PKT") returned 0x3 [0037.422] malloc (_Size=0x18) returned 0x9e888 [0037.422] malloc (_Size=0xc) returned 0x92eb0 [0037.422] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0037.422] SysStringLen (param_1="DEFAULT") returned 0x7 [0037.422] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0037.422] SysStringLen (param_1="NONE") returned 0x4 [0037.422] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0037.422] SysStringLen (param_1="PKT") returned 0x3 [0037.422] SysStringLen (param_1="PKT") returned 0x3 [0037.422] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0037.422] malloc (_Size=0x18) returned 0x9e8a8 [0037.422] malloc (_Size=0xc) returned 0x92ec8 [0037.422] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0037.422] SysStringLen (param_1="DEFAULT") returned 0x7 [0037.423] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0037.423] SysStringLen (param_1="PKT") returned 0x3 [0037.423] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0037.423] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0037.423] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0037.423] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0037.423] malloc (_Size=0x18) returned 0x9e8c8 [0037.423] malloc (_Size=0x40) returned 0x92ee0 [0037.423] malloc (_Size=0x20a) returned 0x92f28 [0037.423] GetSystemDirectoryW (in: lpBuffer=0x92f28, uSize=0x105 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0037.423] free (_Block=0x92f28) [0037.423] malloc (_Size=0xc) returned 0x92f28 [0037.423] malloc (_Size=0xc) returned 0x92f40 [0037.423] malloc (_Size=0xc) returned 0x92f58 [0037.423] SysStringLen (param_1="C:\\Windows\\system32") returned 0x13 [0037.423] SysStringLen (param_1="\\wbem\\") returned 0x6 [0037.423] free (_Block=0x92f28) [0037.423] free (_Block=0x92f40) [0037.423] SysStringByteLen (bstr="C:\\Windows\\system32\\wbem\\") returned 0x32 [0037.423] free (_Block=0x92f58) [0037.423] malloc (_Size=0xc) returned 0x92f28 [0037.423] malloc (_Size=0xc) returned 0x92f40 [0037.423] malloc (_Size=0xc) returned 0x92f58 [0037.423] SysStringLen (param_1="C:\\Windows\\system32\\wbem\\") returned 0x19 [0037.423] SysStringLen (param_1="XSL-Mappings.xml") returned 0x10 [0037.424] free (_Block=0x92f28) [0037.424] free (_Block=0x92f40) [0037.424] GetCurrentThreadId () returned 0xa28 [0037.424] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Wbem\\CIMOM", ulOptions=0x0, samDesired=0x1, phkResult=0xdf5d4 | out: phkResult=0xdf5d4*=0x10c) returned 0x0 [0037.424] RegQueryValueExW (in: hKey=0x10c, lpValueName="Logging", lpReserved=0x0, lpType=0x0, lpData=0xdf5e0, lpcbData=0xdf5dc*=0x400 | out: lpType=0x0, lpData=0xdf5e0*=0x30, lpcbData=0xdf5dc*=0x4) returned 0x0 [0037.424] _wcsicmp (_String1="0", _String2="1") returned -1 [0037.424] _wcsicmp (_String1="0", _String2="2") returned -2 [0037.424] RegQueryValueExW (in: hKey=0x10c, lpValueName="Logging Directory", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0xdf5dc*=0x4 | out: lpType=0x0, lpData=0x0, lpcbData=0xdf5dc*=0x42) returned 0x0 [0037.424] malloc (_Size=0x86) returned 0x92f70 [0037.424] RegQueryValueExW (in: hKey=0x10c, lpValueName="Logging Directory", lpReserved=0x0, lpType=0x0, lpData=0x92f70, lpcbData=0xdf5dc*=0x42 | out: lpType=0x0, lpData=0x92f70*=0x25, lpcbData=0xdf5dc*=0x42) returned 0x0 [0037.424] lstrlenW (lpString="%systemroot%\\system32\\wbem\\Logs\\") returned 32 [0037.424] malloc (_Size=0x42) returned 0x93000 [0037.424] lstrlenW (lpString="%systemroot%\\system32\\wbem\\Logs\\") returned 32 [0037.424] RegQueryValueExW (in: hKey=0x10c, lpValueName="Log File Max Size", lpReserved=0x0, lpType=0x0, lpData=0xdf5e0, lpcbData=0xdf5dc*=0x400 | out: lpType=0x0, lpData=0xdf5e0*=0x36, lpcbData=0xdf5dc*=0xc) returned 0x0 [0037.424] _wtol (_String="65536") returned 65536 [0037.424] free (_Block=0x92f70) [0037.424] RegCloseKey (hKey=0x0) returned 0x6 [0037.424] CoCreateInstance (in: rclsid=0x1a6d40*(Data1=0xf6d90f12, Data2=0x9c73, Data3=0x11d3, Data4=([0]=0xb3, [1]=0x2e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0xb, [7]=0xb4)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x1a6d20*(Data1=0x2933bf95, Data2=0x7b36, Data3=0x11d2, Data4=([0]=0xb2, [1]=0xe, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x98, [6]=0x3e, [7]=0x60)), ppv=0xdfa70 | out: ppv=0xdfa70*=0x2144630) returned 0x0 [0037.923] FreeThreadedDOMDocument:IXMLDOMDocument:load (in: This=0x2144630, xmlSource=0xdf9f4*(varType=0x8, wReserved1=0xffff, wReserved2=0x387a, wReserved3=0x7716, varVal1="C:\\Windows\\system32\\wbem\\XSL-Mappings.xml", varVal2=0x0), isSuccessful=0xdfa58 | out: isSuccessful=0xdfa58*=0xffff) returned 0x0 [0042.969] FreeThreadedDOMDocument:IXMLDOMDocument:get_documentElement (in: This=0x2144630, DOMElement=0xdfa6c | out: DOMElement=0xdfa6c*=0x2148c58) returned 0x0 [0042.969] malloc (_Size=0xc) returned 0x92f28 [0042.969] IXMLDOMElement:getElementsByTagName (in: This=0x2148c58, tagName="XSLFORMAT", resultList=0xdfa68 | out: resultList=0xdfa68*=0x2148e80) returned 0x0 [0042.969] free (_Block=0x92f28) [0042.970] IXMLDOMNodeList:get_length (in: This=0x2148e80, listLength=0xdfa50 | out: listLength=0xdfa50*=21) returned 0x0 [0042.970] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=0, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.970] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="texttable.xsl") returned 0x0 [0042.970] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.970] malloc (_Size=0xc) returned 0x92f28 [0042.970] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.970] free (_Block=0x92f28) [0042.970] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="TABLE", varVal2=0x0)) returned 0x0 [0042.970] malloc (_Size=0xc) returned 0x92f28 [0042.970] malloc (_Size=0xc) returned 0x92f40 [0042.970] malloc (_Size=0x18) returned 0x9e8e8 [0042.971] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.971] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.971] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.971] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=1, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.971] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="textvaluelist.xsl") returned 0x0 [0042.971] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.971] malloc (_Size=0xc) returned 0x93160 [0042.971] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.971] free (_Block=0x93160) [0042.971] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="VALUE", varVal2=0x0)) returned 0x0 [0042.971] malloc (_Size=0xc) returned 0x93160 [0042.971] malloc (_Size=0xc) returned 0x93178 [0042.971] SysStringLen (param_1="VALUE") returned 0x5 [0042.971] SysStringLen (param_1="TABLE") returned 0x5 [0042.971] SysStringLen (param_1="TABLE") returned 0x5 [0042.971] SysStringLen (param_1="VALUE") returned 0x5 [0042.971] malloc (_Size=0x18) returned 0x9e908 [0042.972] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.972] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.972] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.972] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=2, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.972] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="textvaluelist.xsl") returned 0x0 [0042.972] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.972] malloc (_Size=0xc) returned 0x93190 [0042.972] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.972] free (_Block=0x93190) [0042.972] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="LIST", varVal2=0x0)) returned 0x0 [0042.972] malloc (_Size=0xc) returned 0x2962060 [0042.972] malloc (_Size=0xc) returned 0x2962078 [0042.972] SysStringLen (param_1="LIST") returned 0x4 [0042.972] SysStringLen (param_1="TABLE") returned 0x5 [0042.972] malloc (_Size=0x18) returned 0x9e928 [0042.972] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.972] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.972] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.972] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=3, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.973] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="rawxml.xsl") returned 0x0 [0042.973] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.973] malloc (_Size=0xc) returned 0x2962090 [0042.973] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.973] free (_Block=0x2962090) [0042.973] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="RAWXML", varVal2=0x0)) returned 0x0 [0042.973] malloc (_Size=0xc) returned 0x2962090 [0042.973] malloc (_Size=0xc) returned 0x29620a8 [0042.973] SysStringLen (param_1="RAWXML") returned 0x6 [0042.973] SysStringLen (param_1="TABLE") returned 0x5 [0042.973] SysStringLen (param_1="RAWXML") returned 0x6 [0042.973] SysStringLen (param_1="LIST") returned 0x4 [0042.973] SysStringLen (param_1="LIST") returned 0x4 [0042.973] SysStringLen (param_1="RAWXML") returned 0x6 [0042.973] malloc (_Size=0x18) returned 0x9e948 [0042.974] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.974] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.974] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.974] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=4, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.974] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="htable.xsl") returned 0x0 [0042.974] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.974] malloc (_Size=0xc) returned 0x29620c0 [0042.974] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.974] free (_Block=0x29620c0) [0042.974] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="HTABLE", varVal2=0x0)) returned 0x0 [0042.974] malloc (_Size=0xc) returned 0x29620c0 [0042.974] malloc (_Size=0xc) returned 0x29620d8 [0042.974] SysStringLen (param_1="HTABLE") returned 0x6 [0042.974] SysStringLen (param_1="TABLE") returned 0x5 [0042.974] SysStringLen (param_1="HTABLE") returned 0x6 [0042.974] SysStringLen (param_1="LIST") returned 0x4 [0042.974] malloc (_Size=0x18) returned 0x9e968 [0042.974] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.974] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.975] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.975] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=5, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.975] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="hform.xsl") returned 0x0 [0042.975] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.975] malloc (_Size=0xc) returned 0x29620f0 [0042.975] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.975] free (_Block=0x29620f0) [0042.975] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="HFORM", varVal2=0x0)) returned 0x0 [0042.975] malloc (_Size=0xc) returned 0x29620f0 [0042.975] malloc (_Size=0xc) returned 0x2962108 [0042.975] SysStringLen (param_1="HFORM") returned 0x5 [0042.975] SysStringLen (param_1="TABLE") returned 0x5 [0042.975] SysStringLen (param_1="HFORM") returned 0x5 [0042.975] SysStringLen (param_1="LIST") returned 0x4 [0042.975] SysStringLen (param_1="HFORM") returned 0x5 [0042.975] SysStringLen (param_1="HTABLE") returned 0x6 [0042.975] malloc (_Size=0x18) returned 0x9e988 [0042.975] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.975] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.975] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.975] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=6, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.976] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="xml.xsl") returned 0x0 [0042.976] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.976] malloc (_Size=0xc) returned 0x2962120 [0042.976] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.976] free (_Block=0x2962120) [0042.976] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="XML", varVal2=0x0)) returned 0x0 [0042.976] malloc (_Size=0xc) returned 0x2962120 [0042.976] malloc (_Size=0xc) returned 0x2962138 [0042.976] SysStringLen (param_1="XML") returned 0x3 [0042.976] SysStringLen (param_1="TABLE") returned 0x5 [0042.976] SysStringLen (param_1="XML") returned 0x3 [0042.976] SysStringLen (param_1="VALUE") returned 0x5 [0042.976] SysStringLen (param_1="VALUE") returned 0x5 [0042.976] SysStringLen (param_1="XML") returned 0x3 [0042.976] malloc (_Size=0x18) returned 0x9e9a8 [0042.976] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.976] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.976] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.976] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=7, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.976] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="mof.xsl") returned 0x0 [0042.977] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.977] malloc (_Size=0xc) returned 0x2962150 [0042.977] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.977] free (_Block=0x2962150) [0042.977] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="MOF", varVal2=0x0)) returned 0x0 [0042.977] malloc (_Size=0xc) returned 0x2962150 [0042.977] malloc (_Size=0xc) returned 0x2962168 [0042.977] SysStringLen (param_1="MOF") returned 0x3 [0042.977] SysStringLen (param_1="TABLE") returned 0x5 [0042.977] SysStringLen (param_1="MOF") returned 0x3 [0042.977] SysStringLen (param_1="LIST") returned 0x4 [0042.977] SysStringLen (param_1="MOF") returned 0x3 [0042.977] SysStringLen (param_1="RAWXML") returned 0x6 [0042.977] SysStringLen (param_1="LIST") returned 0x4 [0042.977] SysStringLen (param_1="MOF") returned 0x3 [0042.977] malloc (_Size=0x18) returned 0x9e9c8 [0042.977] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.977] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.977] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.977] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=8, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.977] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="csv.xsl") returned 0x0 [0042.977] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.978] malloc (_Size=0xc) returned 0x2962180 [0042.978] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.978] free (_Block=0x2962180) [0042.978] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="CSV", varVal2=0x0)) returned 0x0 [0042.978] malloc (_Size=0xc) returned 0x2962180 [0042.978] malloc (_Size=0xc) returned 0x2962198 [0042.978] SysStringLen (param_1="CSV") returned 0x3 [0042.978] SysStringLen (param_1="TABLE") returned 0x5 [0042.978] SysStringLen (param_1="CSV") returned 0x3 [0042.978] SysStringLen (param_1="LIST") returned 0x4 [0042.978] SysStringLen (param_1="CSV") returned 0x3 [0042.978] SysStringLen (param_1="HTABLE") returned 0x6 [0042.978] SysStringLen (param_1="CSV") returned 0x3 [0042.978] SysStringLen (param_1="HFORM") returned 0x5 [0042.978] malloc (_Size=0x18) returned 0x9e9e8 [0042.978] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.978] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.978] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.978] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=9, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.978] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="texttable.xsl") returned 0x0 [0042.978] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.979] malloc (_Size=0xc) returned 0x29621b0 [0042.979] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.979] free (_Block=0x29621b0) [0042.979] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="texttablewsys.xsl", varVal2=0x0)) returned 0x0 [0042.979] malloc (_Size=0xc) returned 0x29621b0 [0042.979] malloc (_Size=0xc) returned 0x29621c8 [0042.979] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.979] SysStringLen (param_1="TABLE") returned 0x5 [0042.979] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.979] SysStringLen (param_1="VALUE") returned 0x5 [0042.979] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.979] SysStringLen (param_1="XML") returned 0x3 [0042.979] SysStringLen (param_1="XML") returned 0x3 [0042.979] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.979] malloc (_Size=0x18) returned 0x9ea08 [0042.979] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.979] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.979] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.979] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=10, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.979] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="texttable.xsl") returned 0x0 [0042.979] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.980] malloc (_Size=0xc) returned 0x29621e0 [0042.980] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.980] free (_Block=0x29621e0) [0042.980] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="texttablewsys", varVal2=0x0)) returned 0x0 [0042.980] malloc (_Size=0xc) returned 0x29621e0 [0042.980] malloc (_Size=0xc) returned 0x29621f8 [0042.980] SysStringLen (param_1="texttablewsys") returned 0xd [0042.980] SysStringLen (param_1="TABLE") returned 0x5 [0042.980] SysStringLen (param_1="texttablewsys") returned 0xd [0042.980] SysStringLen (param_1="XML") returned 0x3 [0042.980] SysStringLen (param_1="texttablewsys") returned 0xd [0042.980] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.980] SysStringLen (param_1="XML") returned 0x3 [0042.980] SysStringLen (param_1="texttablewsys") returned 0xd [0042.980] malloc (_Size=0x18) returned 0x9ea28 [0042.980] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.980] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.980] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.980] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=11, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.980] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="texttable.xsl") returned 0x0 [0042.980] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.981] malloc (_Size=0xc) returned 0x2962210 [0042.981] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.981] free (_Block=0x2962210) [0042.981] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="wmiclitableformat.xsl", varVal2=0x0)) returned 0x0 [0042.981] malloc (_Size=0xc) returned 0x2962210 [0042.981] malloc (_Size=0xc) returned 0x2962228 [0042.981] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0042.981] SysStringLen (param_1="TABLE") returned 0x5 [0042.981] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0042.981] SysStringLen (param_1="XML") returned 0x3 [0042.981] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0042.981] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.981] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.981] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0042.981] malloc (_Size=0x18) returned 0x9ea48 [0042.981] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.981] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.981] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.981] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=12, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.981] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="texttable.xsl") returned 0x0 [0042.981] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.982] malloc (_Size=0xc) returned 0x2962240 [0042.982] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.982] free (_Block=0x2962240) [0042.982] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="wmiclitableformat", varVal2=0x0)) returned 0x0 [0042.982] malloc (_Size=0xc) returned 0x2962240 [0042.982] malloc (_Size=0xc) returned 0x2962258 [0042.982] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0042.982] SysStringLen (param_1="TABLE") returned 0x5 [0042.982] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0042.982] SysStringLen (param_1="XML") returned 0x3 [0042.982] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0042.982] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.982] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0042.982] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0042.982] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.982] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0042.982] malloc (_Size=0x18) returned 0x9ea68 [0042.982] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.982] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.982] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.982] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=13, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.982] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="texttable.xsl") returned 0x0 [0042.982] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.983] malloc (_Size=0xc) returned 0x2962270 [0042.983] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.983] free (_Block=0x2962270) [0042.983] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="wmiclitableformatnosys.xsl", varVal2=0x0)) returned 0x0 [0042.983] malloc (_Size=0xc) returned 0x2962270 [0042.983] malloc (_Size=0xc) returned 0x2962288 [0042.983] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0042.983] SysStringLen (param_1="TABLE") returned 0x5 [0042.983] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0042.983] SysStringLen (param_1="XML") returned 0x3 [0042.983] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0042.983] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.983] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0042.983] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0042.983] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0042.983] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0042.983] malloc (_Size=0x18) returned 0x9ea88 [0042.983] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.983] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.983] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.983] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=14, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.984] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="texttable.xsl") returned 0x0 [0042.984] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.984] malloc (_Size=0xc) returned 0x29622a0 [0042.984] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.984] free (_Block=0x29622a0) [0042.984] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="wmiclitableformatnosys", varVal2=0x0)) returned 0x0 [0042.984] malloc (_Size=0xc) returned 0x29622a0 [0042.984] malloc (_Size=0xc) returned 0x29622b8 [0042.984] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0042.984] SysStringLen (param_1="TABLE") returned 0x5 [0042.984] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0042.984] SysStringLen (param_1="XML") returned 0x3 [0042.984] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0042.984] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.984] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0042.984] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0042.984] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0042.984] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0042.984] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0042.984] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0042.984] malloc (_Size=0x18) returned 0x9eaa8 [0042.984] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.984] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.985] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.985] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=15, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.985] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="htable.xsl") returned 0x0 [0042.985] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.985] malloc (_Size=0xc) returned 0x29622d0 [0042.985] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.985] free (_Block=0x29622d0) [0042.985] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="htable-sortby.xsl", varVal2=0x0)) returned 0x0 [0042.985] malloc (_Size=0xc) returned 0x29622d0 [0042.985] malloc (_Size=0xc) returned 0x29622e8 [0042.985] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0042.985] SysStringLen (param_1="TABLE") returned 0x5 [0042.985] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0042.985] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.985] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0042.985] SysStringLen (param_1="XML") returned 0x3 [0042.985] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0042.985] SysStringLen (param_1="texttablewsys") returned 0xd [0042.985] SysStringLen (param_1="XML") returned 0x3 [0042.985] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0042.985] malloc (_Size=0x18) returned 0x9eac8 [0042.985] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.986] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.986] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.986] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=16, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.986] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="htable.xsl") returned 0x0 [0042.986] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.986] malloc (_Size=0xc) returned 0x2962300 [0042.986] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.986] free (_Block=0x2962300) [0042.986] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="htable-sortby", varVal2=0x0)) returned 0x0 [0042.986] malloc (_Size=0xc) returned 0x2962300 [0042.986] malloc (_Size=0xc) returned 0x2962318 [0042.986] SysStringLen (param_1="htable-sortby") returned 0xd [0042.986] SysStringLen (param_1="TABLE") returned 0x5 [0042.986] SysStringLen (param_1="htable-sortby") returned 0xd [0042.986] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.986] SysStringLen (param_1="htable-sortby") returned 0xd [0042.986] SysStringLen (param_1="XML") returned 0x3 [0042.986] SysStringLen (param_1="htable-sortby") returned 0xd [0042.986] SysStringLen (param_1="texttablewsys") returned 0xd [0042.986] SysStringLen (param_1="htable-sortby") returned 0xd [0042.986] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0042.986] SysStringLen (param_1="XML") returned 0x3 [0042.986] SysStringLen (param_1="htable-sortby") returned 0xd [0042.986] malloc (_Size=0x18) returned 0x9eae8 [0042.987] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.987] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.987] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.987] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=17, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.987] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="mof.xsl") returned 0x0 [0042.987] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.987] malloc (_Size=0xc) returned 0x2962330 [0042.987] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.987] free (_Block=0x2962330) [0042.987] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="wmiclimofformat.xsl", varVal2=0x0)) returned 0x0 [0042.987] malloc (_Size=0xc) returned 0x2962330 [0042.987] malloc (_Size=0xc) returned 0x2962348 [0042.987] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0042.987] SysStringLen (param_1="TABLE") returned 0x5 [0042.987] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0042.987] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.987] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0042.987] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0042.987] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0042.987] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0042.987] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.987] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0042.988] malloc (_Size=0x18) returned 0x9eb08 [0042.988] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.988] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.988] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.988] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=18, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.988] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="mof.xsl") returned 0x0 [0042.988] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.988] malloc (_Size=0xc) returned 0x2962360 [0042.988] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.988] free (_Block=0x2962360) [0042.988] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="wmiclimofformat", varVal2=0x0)) returned 0x0 [0042.988] malloc (_Size=0xc) returned 0x2962360 [0042.988] malloc (_Size=0xc) returned 0x2962378 [0042.989] SysStringLen (param_1="wmiclimofformat") returned 0xf [0042.989] SysStringLen (param_1="TABLE") returned 0x5 [0042.989] SysStringLen (param_1="wmiclimofformat") returned 0xf [0042.989] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.989] SysStringLen (param_1="wmiclimofformat") returned 0xf [0042.989] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0042.989] SysStringLen (param_1="wmiclimofformat") returned 0xf [0042.989] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0042.989] SysStringLen (param_1="wmiclimofformat") returned 0xf [0042.989] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0042.989] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.989] SysStringLen (param_1="wmiclimofformat") returned 0xf [0042.989] malloc (_Size=0x18) returned 0x9eb28 [0042.989] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.989] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.989] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.989] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=19, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.989] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="textvaluelist.xsl") returned 0x0 [0042.989] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.989] malloc (_Size=0xc) returned 0x2962390 [0042.989] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.989] free (_Block=0x2962390) [0042.989] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="wmiclivalueformat.xsl", varVal2=0x0)) returned 0x0 [0042.990] malloc (_Size=0xc) returned 0x2962390 [0042.990] malloc (_Size=0xc) returned 0x29623a8 [0042.990] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0042.990] SysStringLen (param_1="TABLE") returned 0x5 [0042.990] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0042.990] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.990] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0042.990] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0042.990] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0042.990] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0042.990] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0042.990] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0042.990] malloc (_Size=0x18) returned 0x9eb48 [0042.990] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.990] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.990] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.990] IXMLDOMNodeList:get_item (in: This=0x2148e80, index=20, listItem=0xdfa84 | out: listItem=0xdfa84*=0x2144b20) returned 0x0 [0042.990] IXMLDOMNode:get_text (in: This=0x2144b20, text=0xdfa8c | out: text=0xdfa8c*="textvaluelist.xsl") returned 0x0 [0042.990] IXMLDOMNode:get_attributes (in: This=0x2144b20, attributeMap=0xdfa80 | out: attributeMap=0xdfa80*=0x2148cf8) returned 0x0 [0042.990] malloc (_Size=0xc) returned 0x29623c0 [0042.990] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2148cf8, name="KEYWORD", namedItem=0xdfa7c | out: namedItem=0xdfa7c*=0x2148c98) returned 0x0 [0042.991] free (_Block=0x29623c0) [0042.991] IXMLDOMNode:get_nodeValue (in: This=0x2148c98, value=0xdfa28 | out: value=0xdfa28*(varType=0x8, wReserved1=0x9, wReserved2=0x2f40, wReserved3=0x9, varVal1="wmiclivalueformat", varVal2=0x0)) returned 0x0 [0042.991] malloc (_Size=0xc) returned 0x29623c0 [0042.991] malloc (_Size=0xc) returned 0x29623d8 [0042.991] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0042.991] SysStringLen (param_1="TABLE") returned 0x5 [0042.991] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0042.991] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0042.991] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0042.991] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0042.991] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0042.991] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0042.991] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0042.991] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0042.991] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0042.991] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0042.991] malloc (_Size=0x18) returned 0x9eb68 [0042.991] IUnknown:Release (This=0x2144b20) returned 0x0 [0042.991] IUnknown:Release (This=0x2148cf8) returned 0x0 [0042.991] IUnknown:Release (This=0x2148c98) returned 0x0 [0042.991] IUnknown:Release (This=0x2148e80) returned 0x0 [0042.991] FreeThreadedDOMDocument:IUnknown:Release (This=0x2148c58) returned 0x1 [0042.991] FreeThreadedDOMDocument:IUnknown:Release (This=0x2144630) returned 0x0 [0042.992] free (_Block=0x92f58) [0042.992] GetCommandLineW () returned="wmic shadowcopy delete" [0042.992] malloc (_Size=0x30) returned 0x93190 [0042.992] memcpy_s (in: _Destination=0x93190, _DestinationSize=0x2e, _Source=0x4f1976, _SourceSize=0x2e | out: _Destination=0x93190) returned 0x0 [0042.992] malloc (_Size=0xc) returned 0x29623f0 [0042.992] malloc (_Size=0xc) returned 0x2962408 [0042.992] malloc (_Size=0xc) returned 0x2962420 [0042.992] malloc (_Size=0xc) returned 0x2962460 [0042.992] malloc (_Size=0x80) returned 0x29605b0 [0042.992] GetLocalTime (in: lpSystemTime=0xdfa34 | out: lpSystemTime=0xdfa34*(wYear=0x7e3, wMonth=0xa, wDayOfWeek=0x4, wDay=0x3, wHour=0x2, wMinute=0x1f, wSecond=0xb, wMilliseconds=0x19f)) [0042.992] _vsnwprintf (in: _Buffer=0x29605b0, _BufferCount=0x3f, _Format="%.2d-%.2d-%.4dT%.2d:%.2d:%.2d", _ArgList=0xdfa14 | out: _Buffer="10-03-2019T02:31:11") returned 19 [0042.992] lstrlenW (lpString=" shadowcopy delete") returned 19 [0042.992] malloc (_Size=0x28) returned 0x931c8 [0042.992] lstrlenW (lpString=" shadowcopy delete") returned 19 [0042.992] lstrlenW (lpString=" shadowcopy delete") returned 19 [0042.992] malloc (_Size=0x28) returned 0x931f8 [0042.992] lstrlenW (lpString=" shadowcopy delete") returned 19 [0042.992] lstrlenW (lpString=" shadowcopy delete") returned 19 [0042.992] lstrlenW (lpString=" shadowcopy delete") returned 19 [0042.992] malloc (_Size=0x16) returned 0x9eb88 [0042.992] lstrlenW (lpString="shadowcopy") returned 10 [0042.992] _wcsicmp (_String1="shadowcopy", _String2="\"NULL\"") returned 81 [0042.992] malloc (_Size=0x16) returned 0x9eba8 [0042.992] malloc (_Size=0x4) returned 0x93228 [0042.992] free (_Block=0x0) [0042.992] free (_Block=0x9eb88) [0042.992] lstrlenW (lpString=" shadowcopy delete") returned 19 [0042.992] malloc (_Size=0xe) returned 0x2962478 [0042.993] lstrlenW (lpString="delete") returned 6 [0042.993] _wcsicmp (_String1="delete", _String2="\"NULL\"") returned 66 [0042.993] malloc (_Size=0xe) returned 0x2962490 [0042.993] malloc (_Size=0x8) returned 0x92f58 [0042.993] memmove_s (in: _Destination=0x92f58, _DestinationSize=0x4, _Source=0x93228, _SourceSize=0x4 | out: _Destination=0x92f58) returned 0x0 [0042.993] free (_Block=0x93228) [0042.993] free (_Block=0x0) [0042.993] free (_Block=0x2962478) [0042.993] malloc (_Size=0x8) returned 0x93228 [0042.993] lstrlenW (lpString="QUIT") returned 4 [0042.993] lstrlenW (lpString="shadowcopy") returned 10 [0042.993] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="shadowcopy", cchCount1=10, lpString2="QUIT", cchCount2=4) returned 3 [0042.993] lstrlenW (lpString="EXIT") returned 4 [0042.993] lstrlenW (lpString="shadowcopy") returned 10 [0042.993] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="shadowcopy", cchCount1=10, lpString2="EXIT", cchCount2=4) returned 3 [0042.993] free (_Block=0x93228) [0042.993] WbemLocator:IUnknown:AddRef (This=0x2e0828) returned 0x2 [0042.993] malloc (_Size=0x8) returned 0x93228 [0042.993] lstrlenW (lpString="/") returned 1 [0042.993] lstrlenW (lpString="shadowcopy") returned 10 [0042.993] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="shadowcopy", cchCount1=10, lpString2="/", cchCount2=1) returned 3 [0042.993] lstrlenW (lpString="-") returned 1 [0042.993] lstrlenW (lpString="shadowcopy") returned 10 [0042.993] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="shadowcopy", cchCount1=10, lpString2="-", cchCount2=1) returned 3 [0042.993] lstrlenW (lpString="CLASS") returned 5 [0042.993] lstrlenW (lpString="shadowcopy") returned 10 [0042.993] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="shadowcopy", cchCount1=10, lpString2="CLASS", cchCount2=5) returned 3 [0042.993] lstrlenW (lpString="PATH") returned 4 [0042.993] lstrlenW (lpString="shadowcopy") returned 10 [0042.993] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="shadowcopy", cchCount1=10, lpString2="PATH", cchCount2=4) returned 3 [0042.993] lstrlenW (lpString="CONTEXT") returned 7 [0042.993] lstrlenW (lpString="shadowcopy") returned 10 [0042.993] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="shadowcopy", cchCount1=10, lpString2="CONTEXT", cchCount2=7) returned 3 [0042.993] lstrlenW (lpString="shadowcopy") returned 10 [0042.993] malloc (_Size=0x16) returned 0x9eb88 [0042.994] lstrlenW (lpString="shadowcopy") returned 10 [0042.994] GetCurrentThreadId () returned 0xa28 [0042.994] ??0CHString@@QAE@XZ () returned 0xdf988 [0042.994] malloc (_Size=0xc) returned 0x2962478 [0042.994] malloc (_Size=0xc) returned 0x29624a8 [0042.994] WbemLocator:IWbemLocator:ConnectServer (in: This=0x2e0828, strNetworkResource="root\\cli", strUser=0x0, strPassword=0x0, strLocale="ms_409", lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x1ec1e0 | out: ppNamespace=0x1ec1e0*=0x2ed00c) returned 0x0 [0043.057] free (_Block=0x29624a8) [0043.057] free (_Block=0x2962478) [0043.057] CoSetProxyBlanket (pProxy=0x2ed00c, dwAuthnSvc=0xffffffff, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x0) returned 0x0 [0043.057] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0043.057] GetCurrentThreadId () returned 0xa28 [0043.057] ??0CHString@@QAE@XZ () returned 0xdf920 [0043.057] malloc (_Size=0xc) returned 0x2962478 [0043.057] malloc (_Size=0xc) returned 0x29624a8 [0043.057] malloc (_Size=0xc) returned 0x29624c0 [0043.057] malloc (_Size=0xc) returned 0x29624d8 [0043.057] SysStringLen (param_1="root\\cli") returned 0x8 [0043.057] SysStringLen (param_1="\\") returned 0x1 [0043.057] malloc (_Size=0xc) returned 0x29624f0 [0043.057] SysStringLen (param_1="root\\cli\\") returned 0x9 [0043.057] SysStringLen (param_1="ms_409") returned 0x6 [0043.058] free (_Block=0x29624d8) [0043.058] free (_Block=0x29624c0) [0043.058] free (_Block=0x29624a8) [0043.058] free (_Block=0x2962478) [0043.058] malloc (_Size=0xc) returned 0x2962478 [0043.058] WbemLocator:IWbemLocator:ConnectServer (in: This=0x2e0828, strNetworkResource="root\\cli\\ms_409", strUser=0x0, strPassword=0x0, strLocale="ms_409", lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x1ec1e4 | out: ppNamespace=0x1ec1e4*=0x2ed064) returned 0x0 [0043.067] free (_Block=0x2962478) [0043.067] free (_Block=0x29624f0) [0043.067] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0043.067] GetCurrentThreadId () returned 0xa28 [0043.067] ??0CHString@@QAE@XZ () returned 0xdf98c [0043.067] malloc (_Size=0xc) returned 0x29624f0 [0043.067] malloc (_Size=0xc) returned 0x2962478 [0043.067] malloc (_Size=0xc) returned 0x29624a8 [0043.067] lstrlenA (lpString="MSFT_CliAlias.FriendlyName='") returned 28 [0043.067] malloc (_Size=0x3a) returned 0x9fcd0 [0043.067] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1a1f7c, cbMultiByte=-1, lpWideCharStr=0x9fcd0, cchWideChar=29 | out: lpWideCharStr="MSFT_CliAlias.FriendlyName='") returned 29 [0043.067] free (_Block=0x9fcd0) [0043.067] malloc (_Size=0xc) returned 0x29624c0 [0043.067] SysStringLen (param_1="MSFT_CliAlias.FriendlyName='") returned 0x1c [0043.067] SysStringLen (param_1="shadowcopy") returned 0xa [0043.068] malloc (_Size=0xc) returned 0x29624d8 [0043.068] SysStringLen (param_1="MSFT_CliAlias.FriendlyName='shadowcopy") returned 0x26 [0043.068] SysStringLen (param_1="'") returned 0x1 [0043.068] free (_Block=0x29624c0) [0043.068] free (_Block=0x29624a8) [0043.068] free (_Block=0x2962478) [0043.068] free (_Block=0x29624f0) [0043.068] IWbemServices:GetObject (in: This=0x2ed00c, strObjectPath="MSFT_CliAlias.FriendlyName='shadowcopy'", lFlags=0, pCtx=0x0, ppObject=0xdf988*=0x0, ppCallResult=0x0 | out: ppObject=0xdf988*=0x2f9a18, ppCallResult=0x0) returned 0x0 [0043.080] malloc (_Size=0xc) returned 0x29624f0 [0043.080] IWbemClassObject:Get (in: This=0x2f9a18, wszName="Target", lFlags=0, pVal=0xdf948*(varType=0x0, wReserved1=0xd, wReserved2=0xe58c, wReserved3=0x1d, varVal1=0xffffffff, varVal2=0x1aa03c), pType=0x0, plFlavor=0x0 | out: pVal=0xdf948*(varType=0x8, wReserved1=0xd, wReserved2=0xe58c, wReserved3=0x1d, varVal1="Select * from Win32_ShadowCopy", varVal2=0x1aa03c), pType=0x0, plFlavor=0x0) returned 0x0 [0043.080] free (_Block=0x29624f0) [0043.080] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0043.080] malloc (_Size=0x3e) returned 0x9fcd0 [0043.080] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0043.080] malloc (_Size=0xc) returned 0x29624f0 [0043.080] IWbemClassObject:Get (in: This=0x2f9a18, wszName="PWhere", lFlags=0, pVal=0xdf948*(varType=0x0, wReserved1=0xd, wReserved2=0xe58c, wReserved3=0x1d, varVal1=0x514fec, varVal2=0x1aa03c), pType=0x0, plFlavor=0x0 | out: pVal=0xdf948*(varType=0x8, wReserved1=0xd, wReserved2=0xe58c, wReserved3=0x1d, varVal1=" Where ID = '#'", varVal2=0x1aa03c), pType=0x0, plFlavor=0x0) returned 0x0 [0043.080] free (_Block=0x29624f0) [0043.080] lstrlenW (lpString=" Where ID = '#'") returned 15 [0043.080] malloc (_Size=0x20) returned 0x9fd18 [0043.080] lstrlenW (lpString=" Where ID = '#'") returned 15 [0043.080] malloc (_Size=0xc) returned 0x29624f0 [0043.080] IWbemClassObject:Get (in: This=0x2f9a18, wszName="Connection", lFlags=0, pVal=0xdf948*(varType=0x0, wReserved1=0xd, wReserved2=0xe58c, wReserved3=0x1d, varVal1=0x546f8c, varVal2=0x1aa03c), pType=0x0, plFlavor=0x0 | out: pVal=0xdf948*(varType=0xd, wReserved1=0xd, wReserved2=0xe58c, wReserved3=0x1d, varVal1=0x2f9dd8, varVal2=0x1aa03c), pType=0x0, plFlavor=0x0) returned 0x0 [0043.082] free (_Block=0x29624f0) [0043.082] IUnknown:QueryInterface (in: This=0x2f9dd8, riid=0x1a6b50*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0xdf980 | out: ppvObject=0xdf980*=0x2f9dd8) returned 0x0 [0043.082] GetCurrentThreadId () returned 0xa28 [0043.082] ??0CHString@@QAE@XZ () returned 0xdf8fc [0043.082] malloc (_Size=0xc) returned 0x29624f0 [0043.082] IWbemClassObject:Get (in: This=0x2f9dd8, wszName="Namespace", lFlags=0, pVal=0xdf8cc*(varType=0x0, wReserved1=0x0, wReserved2=0x24f0, wReserved3=0x296, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0xdf8cc*(varType=0x8, wReserved1=0x0, wReserved2=0x24f0, wReserved3=0x296, varVal1="ROOT\\CIMV2", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0043.082] free (_Block=0x29624f0) [0043.082] lstrlenW (lpString="ROOT\\CIMV2") returned 10 [0043.082] malloc (_Size=0x16) returned 0x9ebc8 [0043.082] lstrlenW (lpString="ROOT\\CIMV2") returned 10 [0043.082] malloc (_Size=0xc) returned 0x29624f0 [0043.082] IWbemClassObject:Get (in: This=0x2f9dd8, wszName="Locale", lFlags=0, pVal=0xdf8cc*(varType=0x0, wReserved1=0x0, wReserved2=0x24f0, wReserved3=0x296, varVal1=0x555e3c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0xdf8cc*(varType=0x8, wReserved1=0x0, wReserved2=0x24f0, wReserved3=0x296, varVal1="ms_409", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0043.082] free (_Block=0x29624f0) [0043.082] lstrlenW (lpString="ms_409") returned 6 [0043.082] malloc (_Size=0xe) returned 0x29624f0 [0043.082] lstrlenW (lpString="ms_409") returned 6 [0043.082] malloc (_Size=0xc) returned 0x2962478 [0043.082] IWbemClassObject:Get (in: This=0x2f9dd8, wszName="User", lFlags=0, pVal=0xdf8cc*(varType=0x0, wReserved1=0x0, wReserved2=0x24f0, wReserved3=0x296, varVal1=0x555e3c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0xdf8cc*(varType=0x1, wReserved1=0x0, wReserved2=0x24f0, wReserved3=0x296, varVal1=0x555e3c, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0043.082] free (_Block=0x2962478) [0043.082] malloc (_Size=0xc) returned 0x2962478 [0043.082] IWbemClassObject:Get (in: This=0x2f9dd8, wszName="Password", lFlags=0, pVal=0xdf8cc*(varType=0x1, wReserved1=0x0, wReserved2=0x24f0, wReserved3=0x296, varVal1=0x555e3c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0xdf8cc*(varType=0x1, wReserved1=0x0, wReserved2=0x24f0, wReserved3=0x296, varVal1=0x555e3c, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0043.082] free (_Block=0x2962478) [0043.083] malloc (_Size=0xc) returned 0x2962478 [0043.083] IWbemClassObject:Get (in: This=0x2f9dd8, wszName="Server", lFlags=0, pVal=0xdf8cc*(varType=0x1, wReserved1=0x0, wReserved2=0x24f0, wReserved3=0x296, varVal1=0x555e3c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0xdf8cc*(varType=0x8, wReserved1=0x0, wReserved2=0x24f0, wReserved3=0x296, varVal1=".", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0043.083] free (_Block=0x2962478) [0043.083] lstrlenW (lpString=".") returned 1 [0043.083] malloc (_Size=0x4) returned 0x9fd40 [0043.083] lstrlenW (lpString=".") returned 1 [0043.083] malloc (_Size=0xc) returned 0x2962478 [0043.083] IWbemClassObject:Get (in: This=0x2f9dd8, wszName="Authority", lFlags=0, pVal=0xdf8cc*(varType=0x0, wReserved1=0x0, wReserved2=0x24f0, wReserved3=0x296, varVal1=0x555e3c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0xdf8cc*(varType=0x1, wReserved1=0x0, wReserved2=0x24f0, wReserved3=0x296, varVal1=0x555e3c, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0043.083] free (_Block=0x2962478) [0043.083] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0043.083] IUnknown:Release (This=0x2f9dd8) returned 0x1 [0043.083] GetCurrentThreadId () returned 0xa28 [0043.083] ??0CHString@@QAE@XZ () returned 0xdf8f4 [0043.083] malloc (_Size=0xc) returned 0x2962478 [0043.083] IWbemClassObject:Get (in: This=0x2f9a18, wszName="__RELPATH", lFlags=0, pVal=0xdf8d4*(varType=0x0, wReserved1=0x749c, wReserved2=0x0, wReserved3=0x2e, varVal1=0x0, varVal2=0x2f9dd8), pType=0x0, plFlavor=0x0 | out: pVal=0xdf8d4*(varType=0x8, wReserved1=0x749c, wReserved2=0x0, wReserved3=0x2e, varVal1="MSFT_CliAlias.FriendlyName=\"ShadowCopy\"", varVal2=0x2f9dd8), pType=0x0, plFlavor=0x0) returned 0x0 [0043.083] free (_Block=0x2962478) [0043.083] malloc (_Size=0xc) returned 0x2962478 [0043.083] GetCurrentThreadId () returned 0xa28 [0043.083] ??0CHString@@QAE@XZ () returned 0xdf884 [0043.083] ??0CHString@@QAE@PBG@Z () returned 0xdf870 [0043.083] ??0CHString@@QAE@ABV0@@Z () returned 0xdf810 [0043.084] ?Empty@CHString@@QAEXXZ () returned 0x74ab0510 [0043.084] ?GetData@CHString@@IBEPAUCHStringData@@XZ () returned 0x9fd50 [0043.084] ?Find@CHString@@QBEHPBG@Z () returned 0x1b [0043.084] ?Left@CHString@@QBE?AV1@H@Z () returned 0xdf7f0 [0043.084] ??H@YG?AVCHString@@ABV0@PBG@Z () returned 0xdf7f4 [0043.084] ??YCHString@@QAEABV0@ABV0@@Z () returned 0xdf870 [0043.084] ??1CHString@@QAE@XZ () returned 0x1 [0043.084] ??1CHString@@QAE@XZ () returned 0x1 [0043.084] ?Mid@CHString@@QBE?AV1@H@Z () returned 0xdf7ec [0043.084] ??4CHString@@QAEABV0@ABV0@@Z () returned 0xdf810 [0043.084] ??1CHString@@QAE@XZ () returned 0x1 [0043.084] ?GetData@CHString@@IBEPAUCHStringData@@XZ () returned 0x9fdb8 [0043.084] ?Find@CHString@@QBEHPBG@Z () returned 0xa [0043.084] ?Left@CHString@@QBE?AV1@H@Z () returned 0xdf7f0 [0043.084] ??H@YG?AVCHString@@ABV0@PBG@Z () returned 0xdf7f4 [0043.084] ??YCHString@@QAEABV0@ABV0@@Z () returned 0xdf870 [0043.084] ??1CHString@@QAE@XZ () returned 0x1 [0043.084] ??1CHString@@QAE@XZ () returned 0x1 [0043.084] ?Mid@CHString@@QBE?AV1@H@Z () returned 0xdf7ec [0043.084] ??4CHString@@QAEABV0@ABV0@@Z () returned 0xdf810 [0043.084] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0043.084] ?GetData@CHString@@IBEPAUCHStringData@@XZ () returned 0x74ab0504 [0043.084] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0043.084] malloc (_Size=0xc) returned 0x29624a8 [0043.084] malloc (_Size=0xc) returned 0x29624c0 [0043.084] malloc (_Size=0xc) returned 0x2962508 [0043.084] malloc (_Size=0xc) returned 0x2962520 [0043.084] malloc (_Size=0xc) returned 0x2962538 [0043.084] SysStringLen (param_1="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=") returned 0x3c [0043.084] SysStringLen (param_1="\"Description\",RelPath=\"") returned 0x17 [0043.085] malloc (_Size=0xc) returned 0x2962550 [0043.085] SysStringLen (param_1="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=\"Description\",RelPath=\"") returned 0x53 [0043.085] SysStringLen (param_1="MSFT_CliAlias.FriendlyName=\\\"ShadowCopy\\\"") returned 0x29 [0043.085] malloc (_Size=0xc) returned 0x2962568 [0043.085] SysStringLen (param_1="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=\"Description\",RelPath=\"MSFT_CliAlias.FriendlyName=\\\"ShadowCopy\\\"") returned 0x7c [0043.085] SysStringLen (param_1="\"") returned 0x1 [0043.085] free (_Block=0x2962550) [0043.085] free (_Block=0x2962538) [0043.085] free (_Block=0x2962520) [0043.085] free (_Block=0x2962508) [0043.085] free (_Block=0x29624c0) [0043.086] free (_Block=0x29624a8) [0043.086] IWbemServices:GetObject (in: This=0x2ed064, strObjectPath="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=\"Description\",RelPath=\"MSFT_CliAlias.FriendlyName=\\\"ShadowCopy\\\"\"", lFlags=0, pCtx=0x0, ppObject=0xdf88c*=0x0, ppCallResult=0x0 | out: ppObject=0xdf88c*=0x2f9e68, ppCallResult=0x0) returned 0x0 [0043.089] malloc (_Size=0xc) returned 0x29624a8 [0043.089] IWbemClassObject:Get (in: This=0x2f9e68, wszName="Text", lFlags=0, pVal=0xdf838*(varType=0x0, wReserved1=0x51, wReserved2=0x3954, wReserved3=0x51, varVal1=0x4e, varVal2=0x1ec1e0), pType=0x0, plFlavor=0x0 | out: pVal=0xdf838*(varType=0x2008, wReserved1=0x51, wReserved2=0x3954, wReserved3=0x51, varVal1=0x538ad0*(cDims=0x1, fFeatures=0x180, cbElements=0x4, cLocks=0x0, pvData=0x5494e8, rgsabound=((cElements=0x1, lLbound=0))), varVal2=0x1ec1e0), pType=0x0, plFlavor=0x0) returned 0x0 [0043.089] free (_Block=0x29624a8) [0043.089] SafeArrayGetLBound (in: psa=0x538ad0, nDim=0x1, plLbound=0xdf850 | out: plLbound=0xdf850) returned 0x0 [0043.089] SafeArrayGetUBound (in: psa=0x538ad0, nDim=0x1, plUbound=0xdf84c | out: plUbound=0xdf84c) returned 0x0 [0043.089] SafeArrayGetElement (in: psa=0x538ad0, rgIndices=0xdf8b0, pv=0xdf878 | out: pv=0xdf878) returned 0x0 [0043.089] malloc (_Size=0xc) returned 0x29624a8 [0043.089] malloc (_Size=0xc) returned 0x29624c0 [0043.089] SysStringLen (param_1="Shadow copy management.") returned 0x17 [0043.089] free (_Block=0x29624a8) [0043.089] IUnknown:Release (This=0x2f9e68) returned 0x0 [0043.090] free (_Block=0x2962568) [0043.090] ??1CHString@@QAE@XZ () returned 0x1 [0043.090] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0043.090] free (_Block=0x2962478) [0043.090] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0043.090] lstrlenW (lpString="Shadow copy management.") returned 23 [0043.090] malloc (_Size=0x30) returned 0x9fd50 [0043.090] lstrlenW (lpString="Shadow copy management.") returned 23 [0043.090] free (_Block=0x29624c0) [0043.090] IUnknown:Release (This=0x2f9a18) returned 0x0 [0043.090] free (_Block=0x29624d8) [0043.090] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0043.090] lstrlenW (lpString="PATH") returned 4 [0043.090] lstrlenW (lpString="delete") returned 6 [0043.090] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="PATH", cchCount2=4) returned 1 [0043.090] lstrlenW (lpString="WHERE") returned 5 [0043.090] lstrlenW (lpString="delete") returned 6 [0043.090] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="WHERE", cchCount2=5) returned 1 [0043.090] lstrlenW (lpString="(") returned 1 [0043.090] lstrlenW (lpString="delete") returned 6 [0043.090] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="(", cchCount2=1) returned 3 [0043.090] lstrlenW (lpString="/") returned 1 [0043.090] lstrlenW (lpString="delete") returned 6 [0043.090] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="/", cchCount2=1) returned 3 [0043.090] lstrlenW (lpString="-") returned 1 [0043.090] lstrlenW (lpString="delete") returned 6 [0043.090] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="-", cchCount2=1) returned 3 [0043.090] malloc (_Size=0xc) returned 0x29624d8 [0043.091] lstrlenW (lpString="GET") returned 3 [0043.091] lstrlenW (lpString="delete") returned 6 [0043.091] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="GET", cchCount2=3) returned 1 [0043.091] lstrlenW (lpString="LIST") returned 4 [0043.091] lstrlenW (lpString="delete") returned 6 [0043.091] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="LIST", cchCount2=4) returned 1 [0043.091] lstrlenW (lpString="SET") returned 3 [0043.091] lstrlenW (lpString="delete") returned 6 [0043.091] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="SET", cchCount2=3) returned 1 [0043.091] lstrlenW (lpString="CREATE") returned 6 [0043.091] lstrlenW (lpString="delete") returned 6 [0043.091] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="CREATE", cchCount2=6) returned 3 [0043.091] lstrlenW (lpString="CALL") returned 4 [0043.091] lstrlenW (lpString="delete") returned 6 [0043.091] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="CALL", cchCount2=4) returned 3 [0043.091] lstrlenW (lpString="ASSOC") returned 5 [0043.091] lstrlenW (lpString="delete") returned 6 [0043.091] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="ASSOC", cchCount2=5) returned 3 [0043.091] lstrlenW (lpString="DELETE") returned 6 [0043.091] lstrlenW (lpString="delete") returned 6 [0043.091] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="DELETE", cchCount2=6) returned 2 [0043.091] free (_Block=0x29624d8) [0043.091] lstrlenW (lpString="/") returned 1 [0043.091] lstrlenW (lpString="delete") returned 6 [0043.091] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="/", cchCount2=1) returned 3 [0043.091] lstrlenW (lpString="-") returned 1 [0043.091] lstrlenW (lpString="delete") returned 6 [0043.091] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="-", cchCount2=1) returned 3 [0043.091] lstrlenW (lpString="delete") returned 6 [0043.091] malloc (_Size=0xe) returned 0x29624d8 [0043.092] lstrlenW (lpString="delete") returned 6 [0043.092] lstrlenW (lpString="GET") returned 3 [0043.092] lstrlenW (lpString="delete") returned 6 [0043.092] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="GET", cchCount2=3) returned 1 [0043.092] lstrlenW (lpString="LIST") returned 4 [0043.092] lstrlenW (lpString="delete") returned 6 [0043.092] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="LIST", cchCount2=4) returned 1 [0043.092] lstrlenW (lpString="SET") returned 3 [0043.092] lstrlenW (lpString="delete") returned 6 [0043.092] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="SET", cchCount2=3) returned 1 [0043.092] lstrlenW (lpString="CREATE") returned 6 [0043.092] lstrlenW (lpString="delete") returned 6 [0043.092] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="CREATE", cchCount2=6) returned 3 [0043.092] lstrlenW (lpString="CALL") returned 4 [0043.092] lstrlenW (lpString="delete") returned 6 [0043.092] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="CALL", cchCount2=4) returned 3 [0043.092] lstrlenW (lpString="ASSOC") returned 5 [0043.092] lstrlenW (lpString="delete") returned 6 [0043.092] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="ASSOC", cchCount2=5) returned 3 [0043.092] lstrlenW (lpString="DELETE") returned 6 [0043.092] lstrlenW (lpString="delete") returned 6 [0043.092] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="DELETE", cchCount2=6) returned 2 [0043.092] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0043.092] malloc (_Size=0x3e) returned 0x9fd88 [0043.092] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0043.092] wcstok (in: _String="Select * from Win32_ShadowCopy", _Delimiter=" ", _Context=0x67143eb4 | out: _String="Select", _Context=0x67143eb4) returned="Select" [0043.092] malloc (_Size=0xc) returned 0x29624c0 [0043.092] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x67143eb4 | out: _String=0x0, _Context=0x67143eb4) returned="*" [0043.092] lstrlenW (lpString="FROM") returned 4 [0043.092] lstrlenW (lpString="*") returned 1 [0043.092] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="*", cchCount1=1, lpString2="FROM", cchCount2=4) returned 1 [0043.093] malloc (_Size=0xc) returned 0x2962478 [0043.093] free (_Block=0x29624c0) [0043.093] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x67143eb4 | out: _String=0x0, _Context=0x67143eb4) returned="from" [0043.093] lstrlenW (lpString="FROM") returned 4 [0043.093] lstrlenW (lpString="from") returned 4 [0043.093] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="from", cchCount1=4, lpString2="FROM", cchCount2=4) returned 2 [0043.093] malloc (_Size=0xc) returned 0x29624c0 [0043.093] free (_Block=0x2962478) [0043.093] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x67143eb4 | out: _String=0x0, _Context=0x67143eb4) returned="Win32_ShadowCopy" [0043.093] malloc (_Size=0xc) returned 0x2962478 [0043.093] free (_Block=0x29624c0) [0043.093] free (_Block=0x9fd88) [0043.093] free (_Block=0x2962478) [0043.093] lstrlenW (lpString="SET") returned 3 [0043.093] lstrlenW (lpString="delete") returned 6 [0043.093] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="SET", cchCount2=3) returned 1 [0043.093] lstrlenW (lpString="CREATE") returned 6 [0043.093] lstrlenW (lpString="delete") returned 6 [0043.093] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="CREATE", cchCount2=6) returned 3 [0043.093] free (_Block=0x93228) [0043.093] malloc (_Size=0x4) returned 0x93228 [0043.093] lstrlenW (lpString="GET") returned 3 [0043.094] lstrlenW (lpString="delete") returned 6 [0043.094] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="GET", cchCount2=3) returned 1 [0043.094] lstrlenW (lpString="LIST") returned 4 [0043.094] lstrlenW (lpString="delete") returned 6 [0043.094] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="LIST", cchCount2=4) returned 1 [0043.094] lstrlenW (lpString="ASSOC") returned 5 [0043.094] lstrlenW (lpString="delete") returned 6 [0043.094] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="ASSOC", cchCount2=5) returned 3 [0043.094] WbemLocator:IUnknown:AddRef (This=0x2e0828) returned 0x3 [0043.094] free (_Block=0x92860) [0043.094] lstrlenW (lpString="") returned 0 [0043.094] lstrlenW (lpString="XDUWTFONO") returned 9 [0043.094] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2="", cchCount2=0) returned 3 [0043.094] lstrlenW (lpString="XDUWTFONO") returned 9 [0043.094] malloc (_Size=0x14) returned 0x9ebe8 [0043.094] lstrlenW (lpString="XDUWTFONO") returned 9 [0043.094] GetCurrentThreadId () returned 0xa28 [0043.094] GetCurrentProcess () returned 0xffffffff [0043.094] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x28, TokenHandle=0xdf9f4 | out: TokenHandle=0xdf9f4*=0x294) returned 1 [0043.094] GetTokenInformation (in: TokenHandle=0x294, TokenInformationClass=0x3, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xdf9f0 | out: TokenInformation=0x0, ReturnLength=0xdf9f0) returned 0 [0043.094] malloc (_Size=0x118) returned 0x9fd88 [0043.094] GetTokenInformation (in: TokenHandle=0x294, TokenInformationClass=0x3, TokenInformation=0x9fd88, TokenInformationLength=0x118, ReturnLength=0xdf9f0 | out: TokenInformation=0x9fd88, ReturnLength=0xdf9f0) returned 1 [0043.094] AdjustTokenPrivileges (in: TokenHandle=0x294, DisableAllPrivileges=0, NewState=0x9fd88*(PrivilegesCount=0x17, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x8, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x9, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xa, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xb, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xc, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xd, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xe, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xf, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x13, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x16, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x18, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x19, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x1c, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x1e, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x21, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x22, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x23, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0043.094] free (_Block=0x9fd88) [0043.094] CloseHandle (hObject=0x294) returned 1 [0043.094] lstrlenW (lpString="GET") returned 3 [0043.094] lstrlenW (lpString="delete") returned 6 [0043.094] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="GET", cchCount2=3) returned 1 [0043.094] lstrlenW (lpString="LIST") returned 4 [0043.094] lstrlenW (lpString="delete") returned 6 [0043.094] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="LIST", cchCount2=4) returned 1 [0043.095] lstrlenW (lpString="SET") returned 3 [0043.095] lstrlenW (lpString="delete") returned 6 [0043.095] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="SET", cchCount2=3) returned 1 [0043.095] lstrlenW (lpString="CALL") returned 4 [0043.095] lstrlenW (lpString="delete") returned 6 [0043.095] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="CALL", cchCount2=4) returned 3 [0043.095] lstrlenW (lpString="ASSOC") returned 5 [0043.095] lstrlenW (lpString="delete") returned 6 [0043.095] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="ASSOC", cchCount2=5) returned 3 [0043.095] lstrlenW (lpString="CREATE") returned 6 [0043.095] lstrlenW (lpString="delete") returned 6 [0043.095] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="CREATE", cchCount2=6) returned 3 [0043.095] lstrlenW (lpString="DELETE") returned 6 [0043.095] lstrlenW (lpString="delete") returned 6 [0043.095] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="delete", cchCount1=6, lpString2="DELETE", cchCount2=6) returned 2 [0043.096] malloc (_Size=0xc) returned 0x2962478 [0043.096] lstrlenA (lpString="") returned 0 [0043.096] malloc (_Size=0x2) returned 0x92860 [0043.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1a26a2, cbMultiByte=-1, lpWideCharStr=0x92860, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0043.096] free (_Block=0x92860) [0043.096] malloc (_Size=0xc) returned 0x29624c0 [0043.096] lstrlenA (lpString="") returned 0 [0043.096] malloc (_Size=0x2) returned 0x92860 [0043.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1a26a2, cbMultiByte=-1, lpWideCharStr=0x92860, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0043.096] free (_Block=0x92860) [0043.096] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0043.096] malloc (_Size=0x3e) returned 0x9fd88 [0043.096] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0043.096] wcstok (in: _String="Select * from Win32_ShadowCopy", _Delimiter=" ", _Context=0x67143ed0 | out: _String="Select", _Context=0x67143ed0) returned="Select" [0043.096] malloc (_Size=0xc) returned 0x2962568 [0043.097] free (_Block=0x29624c0) [0043.097] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x67143ed0 | out: _String=0x0, _Context=0x67143ed0) returned="*" [0043.097] lstrlenW (lpString="FROM") returned 4 [0043.097] lstrlenW (lpString="*") returned 1 [0043.097] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="*", cchCount1=1, lpString2="FROM", cchCount2=4) returned 1 [0043.097] malloc (_Size=0xc) returned 0x29624c0 [0043.097] free (_Block=0x2962568) [0043.097] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x67143ed0 | out: _String=0x0, _Context=0x67143ed0) returned="from" [0043.097] lstrlenW (lpString="FROM") returned 4 [0043.097] lstrlenW (lpString="from") returned 4 [0043.097] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="from", cchCount1=4, lpString2="FROM", cchCount2=4) returned 2 [0043.097] malloc (_Size=0xc) returned 0x2962568 [0043.097] free (_Block=0x29624c0) [0043.097] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x67143ed0 | out: _String=0x0, _Context=0x67143ed0) returned="Win32_ShadowCopy" [0043.097] malloc (_Size=0xc) returned 0x29624c0 [0043.097] free (_Block=0x2962568) [0043.097] free (_Block=0x9fd88) [0043.097] malloc (_Size=0xc) returned 0x2962568 [0043.098] malloc (_Size=0xc) returned 0x29624a8 [0043.098] SysStringLen (param_1="SELECT * FROM ") returned 0xe [0043.098] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0043.098] free (_Block=0x2962478) [0043.098] free (_Block=0x2962568) [0043.098] ??0CHString@@QAE@XZ () returned 0xdf970 [0043.098] GetCurrentThreadId () returned 0xa28 [0043.098] malloc (_Size=0xc) returned 0x2962568 [0043.098] malloc (_Size=0xc) returned 0x2962478 [0043.098] malloc (_Size=0xc) returned 0x2962508 [0043.098] malloc (_Size=0xc) returned 0x2962520 [0043.098] malloc (_Size=0xc) returned 0x2962538 [0043.098] SysStringLen (param_1="\\\\") returned 0x2 [0043.098] SysStringLen (param_1="XDUWTFONO") returned 0x9 [0043.098] malloc (_Size=0xc) returned 0x2962550 [0043.098] SysStringLen (param_1="\\\\XDUWTFONO") returned 0xb [0043.098] SysStringLen (param_1="\\") returned 0x1 [0043.099] malloc (_Size=0xc) returned 0x2962580 [0043.099] SysStringLen (param_1="\\\\XDUWTFONO\\") returned 0xc [0043.099] SysStringLen (param_1="ROOT\\CIMV2") returned 0xa [0043.099] free (_Block=0x2962550) [0043.099] free (_Block=0x2962538) [0043.099] free (_Block=0x2962520) [0043.099] free (_Block=0x2962508) [0043.099] free (_Block=0x2962478) [0043.099] free (_Block=0x2962568) [0043.099] malloc (_Size=0xc) returned 0x2962568 [0043.099] malloc (_Size=0xc) returned 0x2962478 [0043.099] malloc (_Size=0xc) returned 0x2962508 [0043.099] WbemLocator:IWbemLocator:ConnectServer (in: This=0x2e0828, strNetworkResource="\\\\XDUWTFONO\\ROOT\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="ms_409", lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x1ec204 | out: ppNamespace=0x1ec204*=0x2ed0bc) returned 0x0 [0043.106] free (_Block=0x2962508) [0043.106] free (_Block=0x2962478) [0043.106] free (_Block=0x2962568) [0043.106] CoSetProxyBlanket (pProxy=0x2ed0bc, dwAuthnSvc=0xffffffff, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x0) returned 0x0 [0043.106] free (_Block=0x2962580) [0043.106] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0043.107] ??0CHString@@QAE@XZ () returned 0xdf968 [0043.107] GetCurrentThreadId () returned 0xa28 [0043.107] malloc (_Size=0xc) returned 0x2962580 [0043.107] lstrlenA (lpString="") returned 0 [0043.107] malloc (_Size=0x2) returned 0x92860 [0043.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1a26a2, cbMultiByte=-1, lpWideCharStr=0x92860, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0043.107] free (_Block=0x92860) [0043.107] SysStringLen (param_1="SELECT * FROM Win32_ShadowCopy") returned 0x1e [0043.107] SysStringLen (param_1="") returned 0x0 [0043.107] free (_Block=0x2962580) [0043.107] malloc (_Size=0xc) returned 0x2962580 [0043.107] IWbemServices:ExecQuery (in: This=0x2ed0bc, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_ShadowCopy", lFlags=0, pCtx=0x0, ppEnum=0xdf964 | out: ppEnum=0xdf964*=0x0) returned 0x80041014 [0044.983] free (_Block=0x2962580) [0044.983] _CxxThrowException () [0044.984] malloc (_Size=0x10) returned 0x2962580 [0044.984] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.984] free (_Block=0x29624c0) [0044.984] free (_Block=0x29624a8) [0044.984] GetCurrentThreadId () returned 0xa28 [0044.984] ??0CHString@@QAE@PBG@Z () returned 0xdfa28 [0044.984] ??YCHString@@QAEABV0@PBG@Z () returned 0xdfa28 [0044.984] ??0CHString@@QAE@XZ () returned 0xdf8ec [0044.984] malloc (_Size=0xc) returned 0x29624a8 [0044.984] malloc (_Size=0xc) returned 0x29624c0 [0044.984] SysStringLen (param_1="") returned 0x0 [0044.984] free (_Block=0x29624a8) [0044.984] CoCreateInstance (in: rclsid=0x1a6cb0*(Data1=0xeb87e1bd, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x1a6c00*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppv=0x1ec21c | out: ppv=0x1ec21c*=0x2e0810) returned 0x0 [0044.987] WbemStatusCodeText:IWbemStatusCodeText:GetErrorCodeText (in: This=0x2e0810, hRes=0x80041014, LocaleId=0x0, lFlags=0, MessageText=0xdf904 | out: MessageText=0xdf904*="Initialization failure\r\n") returned 0x0 [0044.988] free (_Block=0x29624c0) [0044.988] malloc (_Size=0xc) returned 0x29624c0 [0044.988] WbemStatusCodeText:IWbemStatusCodeText:GetFacilityCodeText (in: This=0x2e0810, hRes=0x80041014, LocaleId=0x0, lFlags=0, MessageText=0xdf928 | out: MessageText=0xdf928*="WMI") returned 0x0 [0044.988] malloc (_Size=0xc) returned 0x29624a8 [0044.988] lstrlenW (lpString="WMI") returned 3 [0044.988] lstrlenW (lpString="Wbem") returned 4 [0044.988] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="Wbem", cchCount1=4, lpString2="WMI", cchCount2=3) returned 1 [0044.988] lstrlenW (lpString="WMI") returned 3 [0044.988] lstrlenW (lpString="WMI") returned 3 [0044.988] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="WMI", cchCount1=3, lpString2="WMI", cchCount2=3) returned 2 [0044.989] WbemStatusCodeText:IUnknown:Release (This=0x2e0810) returned 0x0 [0044.989] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.989] LoadStringW (in: hInstance=0x0, uID=0xb7f3, lpBuffer=0xdf154, cchBufferMax=1024 | out: lpBuffer="ERROR:\r\nDescription = %1") returned 0x18 [0044.989] FormatMessageW (in: dwFlags=0x2500, lpSource=0xdf154, dwMessageId=0x0, dwLanguageId=0x400, lpBuffer=0xdf150, nSize=0x0, Arguments=0xdf13c | out: lpBuffer="ឈSERROR:\r\nDescription = %1") returned 0x2e [0044.989] malloc (_Size=0xc) returned 0x2962568 [0044.989] LocalFree (hMem=0x531788) returned 0x0 [0044.989] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="ERROR:\r\nDescription = Initialization failure\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 47 [0044.989] malloc (_Size=0x2f) returned 0x9fe00 [0044.989] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="ERROR:\r\nDescription = Initialization failure\r\n", cchWideChar=-1, lpMultiByteStr=0x9fe00, cbMultiByte=47, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ERROR:\r\nDescription = Initialization failure\r\n", lpUsedDefaultChar=0x0) returned 47 [0044.989] fprintf (in: _File=0x74eb2940, _Format="%s" | out: _File=0x74eb2940) returned 46 [0044.990] fflush (in: _File=0x74eb2940 | out: _File=0x74eb2940) returned 0 [0044.990] free (_Block=0x9fe00) [0044.990] free (_Block=0x2962568) [0044.990] free (_Block=0x29624a8) [0044.990] free (_Block=0x29624c0) [0044.990] ??1CHString@@QAE@XZ () returned 0x1 [0044.990] ??0CHString@@QAE@PBG@Z () returned 0xdfa48 [0044.990] ??YCHString@@QAEABV0@PBG@Z () returned 0xdfa48 [0044.990] GetCurrentThreadId () returned 0xa28 [0044.990] ??1CHString@@QAE@XZ () returned 0x1 [0044.990] WbemLocator:IUnknown:Release (This=0x2ed0bc) returned 0x0 [0044.991] ?Empty@CHString@@QAEXXZ () returned 0x74ab0504 [0044.991] free (_Block=0x2962580) [0044.991] _kbhit () returned 0x0 [0044.992] free (_Block=0x93228) [0044.992] free (_Block=0x2962460) [0044.992] free (_Block=0x2962420) [0044.992] free (_Block=0x2962408) [0044.992] free (_Block=0x29623f0) [0044.992] free (_Block=0x931c8) [0044.992] free (_Block=0x9eb88) [0044.992] free (_Block=0x9fd50) [0044.992] free (_Block=0x29624d8) [0044.992] free (_Block=0x9fcd0) [0044.992] free (_Block=0x29624f0) [0044.992] free (_Block=0x9ebc8) [0044.992] free (_Block=0x9fd40) [0044.992] free (_Block=0x92ee0) [0044.992] free (_Block=0x9fd18) [0044.992] ?Empty@CHString@@QAEXXZ () returned 0x74ab0504 [0044.992] free (_Block=0x931f8) [0044.992] free (_Block=0x9eba8) [0044.992] free (_Block=0x2962490) [0044.992] free (_Block=0x92788) [0044.992] free (_Block=0x927d0) [0044.992] free (_Block=0x92818) [0044.992] free (_Block=0x9ebe8) [0044.992] free (_Block=0x928c8) [0044.992] free (_Block=0x92ec8) [0044.993] free (_Block=0x9e8c8) [0044.993] free (_Block=0x92eb0) [0044.993] free (_Block=0x9e8a8) [0044.993] free (_Block=0x92e98) [0044.993] free (_Block=0x9e888) [0044.993] free (_Block=0x92a10) [0044.993] free (_Block=0x92a28) [0044.993] free (_Block=0x929d8) [0044.993] free (_Block=0x929f0) [0044.993] free (_Block=0x92a48) [0044.993] free (_Block=0x92a60) [0044.993] free (_Block=0x92a80) [0044.993] free (_Block=0x9e868) [0044.993] free (_Block=0x92968) [0044.993] free (_Block=0x92980) [0044.993] free (_Block=0x92930) [0044.993] free (_Block=0x92948) [0044.993] free (_Block=0x929a0) [0044.993] free (_Block=0x929b8) [0044.993] free (_Block=0x928f8) [0044.993] free (_Block=0x92910) [0044.994] free (_Block=0x92880) [0044.994] free (_Block=0x93fb8) [0044.994] free (_Block=0x29605b0) [0044.994] WbemLocator:IUnknown:Release (This=0x2e0828) returned 0x2 [0044.994] WbemLocator:IUnknown:Release (This=0x2ed064) returned 0x0 [0044.994] WbemLocator:IUnknown:Release (This=0x2ed00c) returned 0x0 [0044.994] WbemLocator:IUnknown:Release (This=0x2e0828) returned 0x1 [0044.994] ?Empty@CHString@@QAEXXZ () returned 0x74ab0504 [0044.994] WbemLocator:IUnknown:Release (This=0x2e0828) returned 0x0 [0044.994] free (_Block=0x2962390) [0044.994] free (_Block=0x29623a8) [0044.994] free (_Block=0x9eb48) [0044.994] free (_Block=0x29623c0) [0044.994] free (_Block=0x29623d8) [0044.994] free (_Block=0x9eb68) [0044.994] free (_Block=0x2962270) [0044.995] free (_Block=0x2962288) [0044.995] free (_Block=0x9ea88) [0044.995] free (_Block=0x29622a0) [0044.995] free (_Block=0x29622b8) [0044.995] free (_Block=0x9eaa8) [0044.995] free (_Block=0x2962210) [0044.995] free (_Block=0x2962228) [0044.995] free (_Block=0x9ea48) [0044.995] free (_Block=0x2962240) [0044.995] free (_Block=0x2962258) [0044.995] free (_Block=0x9ea68) [0044.995] free (_Block=0x2962330) [0044.995] free (_Block=0x2962348) [0044.995] free (_Block=0x9eb08) [0044.995] free (_Block=0x2962360) [0044.995] free (_Block=0x2962378) [0044.995] free (_Block=0x9eb28) [0044.995] free (_Block=0x29621b0) [0044.995] free (_Block=0x29621c8) [0044.995] free (_Block=0x9ea08) [0044.996] free (_Block=0x29621e0) [0044.996] free (_Block=0x29621f8) [0044.996] free (_Block=0x9ea28) [0044.996] free (_Block=0x29622d0) [0044.996] free (_Block=0x29622e8) [0044.996] free (_Block=0x9eac8) [0044.996] free (_Block=0x2962300) [0044.996] free (_Block=0x2962318) [0044.996] free (_Block=0x9eae8) [0044.996] free (_Block=0x2962120) [0044.996] free (_Block=0x2962138) [0044.996] free (_Block=0x9e9a8) [0044.996] free (_Block=0x93160) [0044.996] free (_Block=0x93178) [0044.996] free (_Block=0x9e908) [0044.996] free (_Block=0x92f28) [0044.996] free (_Block=0x92f40) [0044.996] free (_Block=0x9e8e8) [0044.996] free (_Block=0x2962090) [0044.996] free (_Block=0x29620a8) [0044.996] free (_Block=0x9e948) [0044.997] free (_Block=0x2962150) [0044.997] free (_Block=0x2962168) [0044.997] free (_Block=0x9e9c8) [0044.997] free (_Block=0x2962060) [0044.997] free (_Block=0x2962078) [0044.997] free (_Block=0x9e928) [0044.997] free (_Block=0x29620c0) [0044.997] free (_Block=0x29620d8) [0044.997] free (_Block=0x9e968) [0044.997] free (_Block=0x29620f0) [0044.997] free (_Block=0x2962108) [0044.997] free (_Block=0x9e988) [0044.997] free (_Block=0x2962180) [0044.997] free (_Block=0x2962198) [0044.997] free (_Block=0x9e9e8) [0044.997] CoUninitialize () [0045.079] exit (_Code=-2147217388) [0045.079] free (_Block=0x93190) [0045.080] free (_Block=0x93e88) [0045.080] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0045.080] free (_Block=0x93000) [0045.080] free (_Block=0x928e8) [0045.080] free (_Block=0x93e68) [0045.080] free (_Block=0x93e48) [0045.080] free (_Block=0x93e18) [0045.080] free (_Block=0x93df8) [0045.080] free (_Block=0x93dc8) [0045.080] free (_Block=0x913d8) [0045.080] free (_Block=0x913b8) [0045.080] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0045.080] free (_Block=0x92f58) Thread: id = 71 os_tid = 0xa4c Thread: id = 78 os_tid = 0xa74 Thread: id = 85 os_tid = 0xb2c Thread: id = 86 os_tid = 0xb30 Thread: id = 87 os_tid = 0xb34 Thread: id = 88 os_tid = 0xb38 Process: id = "9" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x4f01e000" os_pid = "0xa30" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0xa1c" cmd_line = "taskkill.exe /F /IM sql*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 66 os_tid = 0xa34 Thread: id = 67 os_tid = 0xa38 Thread: id = 68 os_tid = 0xa3c Thread: id = 69 os_tid = 0xa40 Thread: id = 70 os_tid = 0xa44 Process: id = "10" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x4e4a6000" os_pid = "0xa50" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x980" cmd_line = "cmd.exe /C taskkill.exe /F /IM agent*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 72 os_tid = 0xa54 [0037.633] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3bf96c | out: lpSystemTimeAsFileTime=0x3bf96c*(dwLowDateTime=0xcc2f0340, dwHighDateTime=0x1d5793e)) [0037.633] GetCurrentProcessId () returned 0xa50 [0037.633] GetCurrentThreadId () returned 0xa54 [0037.633] GetTickCount () returned 0x1143a91 [0037.633] QueryPerformanceCounter (in: lpPerformanceCount=0x3bf964 | out: lpPerformanceCount=0x3bf964*=15791732044) returned 1 [0037.634] GetModuleHandleA (lpModuleName=0x0) returned 0x4a210000 [0037.634] __set_app_type (_Type=0x1) [0037.634] __p__fmode () returned 0x74eb31f4 [0037.634] __p__commode () returned 0x74eb31fc [0037.634] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a2321a6) returned 0x0 [0037.634] __getmainargs (in: _Argc=0x4a234238, _Argv=0x4a234240, _Env=0x4a23423c, _DoWildCard=0, _StartInfo=0x4a234140 | out: _Argc=0x4a234238, _Argv=0x4a234240, _Env=0x4a23423c) returned 0 [0037.634] GetCurrentThreadId () returned 0xa54 [0037.634] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xa54) returned 0x60 [0037.634] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0037.634] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f [0037.634] SetThreadUILanguage (LangId=0x0) returned 0x409 [0037.635] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0037.635] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x3bf8fc | out: phkResult=0x3bf8fc*=0x0) returned 0x2 [0037.635] VirtualQuery (in: lpAddress=0x3bf933, lpBuffer=0x3bf8cc, dwLength=0x1c | out: lpBuffer=0x3bf8cc*(BaseAddress=0x3bf000, AllocationBase=0x2c0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0037.635] VirtualQuery (in: lpAddress=0x2c0000, lpBuffer=0x3bf8cc, dwLength=0x1c | out: lpBuffer=0x3bf8cc*(BaseAddress=0x2c0000, AllocationBase=0x2c0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0037.635] VirtualQuery (in: lpAddress=0x2c1000, lpBuffer=0x3bf8cc, dwLength=0x1c | out: lpBuffer=0x3bf8cc*(BaseAddress=0x2c1000, AllocationBase=0x2c0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0037.635] VirtualQuery (in: lpAddress=0x2c3000, lpBuffer=0x3bf8cc, dwLength=0x1c | out: lpBuffer=0x3bf8cc*(BaseAddress=0x2c3000, AllocationBase=0x2c0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0037.635] VirtualQuery (in: lpAddress=0x3c0000, lpBuffer=0x3bf8cc, dwLength=0x1c | out: lpBuffer=0x3bf8cc*(BaseAddress=0x3c0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xe0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0037.635] GetConsoleOutputCP () returned 0x1b5 [0037.635] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0037.635] SetConsoleCtrlHandler (HandlerRoutine=0x4a22e72a, Add=1) returned 1 [0037.635] _get_osfhandle (_FileHandle=1) returned 0xd0 [0037.635] SetConsoleMode (hConsoleHandle=0xd0, dwMode=0x0) returned 0 [0037.636] _get_osfhandle (_FileHandle=1) returned 0xd0 [0037.636] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x4a2341ac | out: lpMode=0x4a2341ac) returned 0 [0037.636] _get_osfhandle (_FileHandle=0) returned 0xcc [0037.636] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x4a2341b0 | out: lpMode=0x4a2341b0) returned 0 [0037.636] GetEnvironmentStringsW () returned 0x611ff8* [0037.636] GetProcessHeap () returned 0x600000 [0037.636] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0xaca) returned 0x612ad0 [0037.636] FreeEnvironmentStringsW (penv=0x611ff8) returned 1 [0037.636] GetProcessHeap () returned 0x600000 [0037.636] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x4) returned 0x610c30 [0037.636] GetEnvironmentStringsW () returned 0x611ff8* [0037.636] GetProcessHeap () returned 0x600000 [0037.636] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0xaca) returned 0x6135a8 [0037.637] FreeEnvironmentStringsW (penv=0x611ff8) returned 1 [0037.637] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3be86c | out: phkResult=0x3be86c*=0x68) returned 0x0 [0037.637] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3be874, lpData=0x3be878, lpcbData=0x3be870*=0x1000 | out: lpType=0x3be874*=0x0, lpData=0x3be878*=0x0, lpcbData=0x3be870*=0x1000) returned 0x2 [0037.637] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3be874, lpData=0x3be878, lpcbData=0x3be870*=0x1000 | out: lpType=0x3be874*=0x4, lpData=0x3be878*=0x1, lpcbData=0x3be870*=0x4) returned 0x0 [0037.637] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3be874, lpData=0x3be878, lpcbData=0x3be870*=0x1000 | out: lpType=0x3be874*=0x0, lpData=0x3be878*=0x1, lpcbData=0x3be870*=0x1000) returned 0x2 [0037.637] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3be874, lpData=0x3be878, lpcbData=0x3be870*=0x1000 | out: lpType=0x3be874*=0x4, lpData=0x3be878*=0x0, lpcbData=0x3be870*=0x4) returned 0x0 [0037.637] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3be874, lpData=0x3be878, lpcbData=0x3be870*=0x1000 | out: lpType=0x3be874*=0x4, lpData=0x3be878*=0x40, lpcbData=0x3be870*=0x4) returned 0x0 [0037.637] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3be874, lpData=0x3be878, lpcbData=0x3be870*=0x1000 | out: lpType=0x3be874*=0x4, lpData=0x3be878*=0x40, lpcbData=0x3be870*=0x4) returned 0x0 [0037.637] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3be874, lpData=0x3be878, lpcbData=0x3be870*=0x1000 | out: lpType=0x3be874*=0x0, lpData=0x3be878*=0x40, lpcbData=0x3be870*=0x1000) returned 0x2 [0037.637] RegCloseKey (hKey=0x68) returned 0x0 [0037.637] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3be86c | out: phkResult=0x3be86c*=0x68) returned 0x0 [0037.637] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3be874, lpData=0x3be878, lpcbData=0x3be870*=0x1000 | out: lpType=0x3be874*=0x0, lpData=0x3be878*=0x40, lpcbData=0x3be870*=0x1000) returned 0x2 [0037.637] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3be874, lpData=0x3be878, lpcbData=0x3be870*=0x1000 | out: lpType=0x3be874*=0x4, lpData=0x3be878*=0x1, lpcbData=0x3be870*=0x4) returned 0x0 [0037.637] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3be874, lpData=0x3be878, lpcbData=0x3be870*=0x1000 | out: lpType=0x3be874*=0x0, lpData=0x3be878*=0x1, lpcbData=0x3be870*=0x1000) returned 0x2 [0037.637] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3be874, lpData=0x3be878, lpcbData=0x3be870*=0x1000 | out: lpType=0x3be874*=0x4, lpData=0x3be878*=0x0, lpcbData=0x3be870*=0x4) returned 0x0 [0037.638] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3be874, lpData=0x3be878, lpcbData=0x3be870*=0x1000 | out: lpType=0x3be874*=0x4, lpData=0x3be878*=0x9, lpcbData=0x3be870*=0x4) returned 0x0 [0037.638] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3be874, lpData=0x3be878, lpcbData=0x3be870*=0x1000 | out: lpType=0x3be874*=0x4, lpData=0x3be878*=0x9, lpcbData=0x3be870*=0x4) returned 0x0 [0037.638] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3be874, lpData=0x3be878, lpcbData=0x3be870*=0x1000 | out: lpType=0x3be874*=0x0, lpData=0x3be878*=0x9, lpcbData=0x3be870*=0x1000) returned 0x2 [0037.638] RegCloseKey (hKey=0x68) returned 0x0 [0037.638] time (in: timer=0x0 | out: timer=0x0) returned 0x5d94d0cd [0037.638] srand (_Seed=0x5d94d0cd) [0037.638] GetCommandLineW () returned="cmd.exe /C taskkill.exe /F /IM agent*" [0037.638] GetCommandLineW () returned="cmd.exe /C taskkill.exe /F /IM agent*" [0037.638] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a235260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0037.638] GetProcessHeap () returned 0x600000 [0037.638] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x210) returned 0x611ff8 [0037.638] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x612000, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0037.639] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0037.639] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0037.639] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0037.639] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0037.639] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0037.639] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0037.639] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0037.639] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0037.639] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0037.639] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0037.639] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0037.639] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0037.639] GetProcessHeap () returned 0x600000 [0037.639] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x612ad0 | out: hHeap=0x600000) returned 1 [0037.639] GetEnvironmentStringsW () returned 0x612210* [0037.639] GetProcessHeap () returned 0x600000 [0037.639] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0xae2) returned 0x614b70 [0037.639] FreeEnvironmentStringsW (penv=0x612210) returned 1 [0037.639] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0037.639] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0037.639] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0037.639] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0037.639] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0037.639] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0037.639] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0037.639] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0037.640] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0037.640] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0037.640] GetProcessHeap () returned 0x600000 [0037.640] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x54) returned 0x615660 [0037.640] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3bf638 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0037.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x3bf638, lpFilePart=0x3bf634 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3bf634*="Desktop") returned 0x25 [0037.640] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0037.640] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x3bf3b4 | out: lpFindFileData=0x3bf3b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x611e78 [0037.640] FindClose (in: hFindFile=0x611e78 | out: hFindFile=0x611e78) returned 1 [0037.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x3bf3b4 | out: lpFindFileData=0x3bf3b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x611e78 [0037.640] FindClose (in: hFindFile=0x611e78 | out: hFindFile=0x611e78) returned 1 [0037.640] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20 [0037.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x3bf3b4 | out: lpFindFileData=0x3bf3b4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc46c41e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xc46c41e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x611e78 [0037.640] FindClose (in: hFindFile=0x611e78 | out: hFindFile=0x611e78) returned 1 [0037.640] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0037.641] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0037.641] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0037.641] GetProcessHeap () returned 0x600000 [0037.641] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x614b70 | out: hHeap=0x600000) returned 1 [0037.641] GetEnvironmentStringsW () returned 0x614080* [0037.641] GetProcessHeap () returned 0x600000 [0037.641] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0xb36) returned 0x615ec0 [0037.641] FreeEnvironmentStringsW (penv=0x614080) returned 1 [0037.641] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a235260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0037.641] GetProcessHeap () returned 0x600000 [0037.641] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x615660 | out: hHeap=0x600000) returned 1 [0037.641] GetProcessHeap () returned 0x600000 [0037.641] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x400e) returned 0x616a00 [0037.641] GetProcessHeap () returned 0x600000 [0037.642] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x42) returned 0x611e78 [0037.642] GetProcessHeap () returned 0x600000 [0037.642] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x616a00 | out: hHeap=0x600000) returned 1 [0037.642] GetConsoleOutputCP () returned 0x1b5 [0037.642] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0037.642] GetUserDefaultLCID () returned 0x409 [0037.642] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a234950, cchData=8 | out: lpLCData=":") returned 2 [0037.642] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x3bf778, cchData=128 | out: lpLCData="0") returned 2 [0037.643] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x3bf778, cchData=128 | out: lpLCData="0") returned 2 [0037.643] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x3bf778, cchData=128 | out: lpLCData="1") returned 2 [0037.643] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a234940, cchData=8 | out: lpLCData="/") returned 2 [0037.643] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a234d80, cchData=32 | out: lpLCData="Mon") returned 4 [0037.643] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a234d40, cchData=32 | out: lpLCData="Tue") returned 4 [0037.643] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a234d00, cchData=32 | out: lpLCData="Wed") returned 4 [0037.643] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a234cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0037.643] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a234c80, cchData=32 | out: lpLCData="Fri") returned 4 [0037.643] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a234c40, cchData=32 | out: lpLCData="Sat") returned 4 [0037.643] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a234c00, cchData=32 | out: lpLCData="Sun") returned 4 [0037.643] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a234930, cchData=8 | out: lpLCData=".") returned 2 [0037.643] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a234920, cchData=8 | out: lpLCData=",") returned 2 [0037.643] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0037.644] GetProcessHeap () returned 0x600000 [0037.644] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x20c) returned 0x612d88 [0037.644] GetConsoleTitleW (in: lpConsoleTitle=0x612d88, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0037.645] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0037.645] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92 [0037.645] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0037.645] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d [0037.645] GetProcessHeap () returned 0x600000 [0037.645] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x400a) returned 0x616a00 [0037.645] GetProcessHeap () returned 0x600000 [0037.645] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x616a00 | out: hHeap=0x600000) returned 1 [0037.646] _wcsicmp (_String1="taskkill.exe", _String2=")") returned 75 [0037.646] _wcsicmp (_String1="FOR", _String2="taskkill.exe") returned -14 [0037.646] _wcsicmp (_String1="FOR/?", _String2="taskkill.exe") returned -14 [0037.646] _wcsicmp (_String1="IF", _String2="taskkill.exe") returned -11 [0037.646] _wcsicmp (_String1="IF/?", _String2="taskkill.exe") returned -11 [0037.646] _wcsicmp (_String1="REM", _String2="taskkill.exe") returned -2 [0037.646] _wcsicmp (_String1="REM/?", _String2="taskkill.exe") returned -2 [0037.646] GetProcessHeap () returned 0x600000 [0037.646] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x58) returned 0x612fa0 [0037.646] GetProcessHeap () returned 0x600000 [0037.646] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x22) returned 0x613000 [0037.647] GetProcessHeap () returned 0x600000 [0037.647] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x26) returned 0x613030 [0037.647] GetConsoleTitleW (in: lpConsoleTitle=0x3bf470, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0037.648] GetFileAttributesW (lpFileName="taskkill.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\taskkill.exe")) returned 0xffffffff [0037.648] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16 [0037.648] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15 [0037.648] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16 [0037.648] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24 [0037.648] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17 [0037.648] _wcsicmp (_String1="taskkill", _String2="CD") returned 17 [0037.648] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17 [0037.648] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2 [0037.648] _wcsicmp (_String1="taskkill", _String2="REN") returned 2 [0037.648] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15 [0037.648] _wcsicmp (_String1="taskkill", _String2="SET") returned 1 [0037.648] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4 [0037.648] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16 [0037.649] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8 [0037.649] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4 [0037.649] _wcsicmp (_String1="taskkill", _String2="MD") returned 7 [0037.649] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7 [0037.649] _wcsicmp (_String1="taskkill", _String2="RD") returned 2 [0037.649] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2 [0037.649] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4 [0037.649] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13 [0037.649] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1 [0037.649] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17 [0037.649] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17 [0037.649] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2 [0037.649] _wcsicmp (_String1="taskkill", _String2="VER") returned -2 [0037.649] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2 [0037.649] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15 [0037.649] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1 [0037.649] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15 [0037.649] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8 [0037.649] _wcsicmp (_String1="taskkill", _String2="START") returned 1 [0037.649] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16 [0037.649] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9 [0037.649] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7 [0037.649] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4 [0037.649] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4 [0037.649] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19 [0037.649] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14 [0037.649] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18 [0037.649] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17 [0037.649] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7 [0037.649] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16 [0037.649] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15 [0037.649] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16 [0037.649] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24 [0037.649] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17 [0037.649] _wcsicmp (_String1="taskkill", _String2="CD") returned 17 [0037.649] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17 [0037.649] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2 [0037.649] _wcsicmp (_String1="taskkill", _String2="REN") returned 2 [0037.650] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15 [0037.650] _wcsicmp (_String1="taskkill", _String2="SET") returned 1 [0037.650] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4 [0037.650] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16 [0037.650] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8 [0037.650] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4 [0037.650] _wcsicmp (_String1="taskkill", _String2="MD") returned 7 [0037.650] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7 [0037.650] _wcsicmp (_String1="taskkill", _String2="RD") returned 2 [0037.650] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2 [0037.650] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4 [0037.650] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13 [0037.650] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1 [0037.650] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17 [0037.650] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17 [0037.650] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2 [0037.650] _wcsicmp (_String1="taskkill", _String2="VER") returned -2 [0037.650] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2 [0037.650] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15 [0037.650] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1 [0037.650] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15 [0037.650] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8 [0037.650] _wcsicmp (_String1="taskkill", _String2="START") returned 1 [0037.650] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16 [0037.650] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9 [0037.650] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7 [0037.650] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4 [0037.650] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4 [0037.650] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19 [0037.650] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14 [0037.650] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18 [0037.650] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17 [0037.650] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7 [0037.650] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14 [0037.650] _wcsicmp (_String1="taskkill", _String2="IF") returned 11 [0037.650] _wcsicmp (_String1="taskkill", _String2="REM") returned 2 [0037.651] GetProcessHeap () returned 0x600000 [0037.651] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x210) returned 0x613060 [0037.651] GetProcessHeap () returned 0x600000 [0037.651] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x40) returned 0x613278 [0037.651] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17 [0037.653] GetProcessHeap () returned 0x600000 [0037.653] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x418) returned 0x6007f0 [0037.653] SetErrorMode (uMode=0x0) returned 0x8003 [0037.653] SetErrorMode (uMode=0x1) returned 0x0 [0037.653] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6007f8, lpFilePart=0x3bef90 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x3bef90*="Desktop") returned 0x25 [0037.653] SetErrorMode (uMode=0x8003) returned 0x1 [0037.653] GetProcessHeap () returned 0x600000 [0037.653] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x6007f0, Size=0x6e) returned 0x6007f0 [0037.653] GetProcessHeap () returned 0x600000 [0037.653] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x6007f0) returned 0x6e [0037.653] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0037.654] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0037.654] GetProcessHeap () returned 0x600000 [0037.654] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x120) returned 0x6132c0 [0037.654] GetProcessHeap () returned 0x600000 [0037.654] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x238) returned 0x600868 [0037.659] GetProcessHeap () returned 0x600000 [0037.659] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x600868, Size=0x122) returned 0x600868 [0037.659] GetProcessHeap () returned 0x600000 [0037.659] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x600868) returned 0x122 [0037.659] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0037.659] GetProcessHeap () returned 0x600000 [0037.659] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0xe0) returned 0x6133e8 [0037.659] GetProcessHeap () returned 0x600000 [0037.659] RtlReAllocateHeap (Heap=0x600000, Flags=0x0, Ptr=0x6133e8, Size=0x76) returned 0x6133e8 [0037.659] GetProcessHeap () returned 0x600000 [0037.659] RtlSizeHeap (HeapHandle=0x600000, Flags=0x0, MemoryPointer=0x6133e8) returned 0x76 [0037.660] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0037.660] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.exe", fInfoLevelId=0x1, lpFindFileData=0x3bed2c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3bed2c) returned 0xffffffff [0037.660] GetLastError () returned 0x2 [0037.660] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.exe.*", fInfoLevelId=0x1, lpFindFileData=0x3bed0c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3bed0c) returned 0xffffffff [0037.661] GetLastError () returned 0x2 [0037.661] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.exe", fInfoLevelId=0x1, lpFindFileData=0x3bed0c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3bed0c) returned 0xffffffff [0037.661] GetLastError () returned 0x2 [0037.661] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0037.661] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.exe", fInfoLevelId=0x1, lpFindFileData=0x3bed2c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x3bed2c) returned 0x613468 [0037.661] GetProcessHeap () returned 0x600000 [0037.661] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x0, Size=0x14) returned 0x6134a8 [0037.661] FindClose (in: hFindFile=0x613468 | out: hFindFile=0x613468) returned 1 [0037.661] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0037.661] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0037.661] GetConsoleTitleW (in: lpConsoleTitle=0x3bf204, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0037.661] InitializeProcThreadAttributeList (in: lpAttributeList=0x3bf08c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x3bf154 | out: lpAttributeList=0x3bf08c, lpSize=0x3bf154) returned 1 [0037.661] UpdateProcThreadAttribute (in: lpAttributeList=0x3bf08c, dwFlags=0x0, Attribute=0x60001, lpValue=0x3bf14c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x3bf08c, lpPreviousValue=0x0) returned 1 [0037.661] GetStartupInfoW (in: lpStartupInfo=0x3bf048 | out: lpStartupInfo=0x3bf048*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xcc, hStdOutput=0xd0, hStdError=0xdc)) [0037.661] GetProcessHeap () returned 0x600000 [0037.661] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0x18) returned 0x613468 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0037.662] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0037.663] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0037.663] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0037.663] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0037.663] GetProcessHeap () returned 0x600000 [0037.663] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x613468 | out: hHeap=0x600000) returned 1 [0037.663] GetProcessHeap () returned 0x600000 [0037.663] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0xa) returned 0x60fed0 [0037.663] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1 [0037.664] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill.exe /F /IM agent*", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x3bf0e8*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill.exe /F /IM agent*", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x3bf134 | out: lpCommandLine="taskkill.exe /F /IM agent*", lpProcessInformation=0x3bf134*(hProcess=0x78, hThread=0x74, dwProcessId=0xa58, dwThreadId=0xa5c)) returned 1 [0037.669] CloseHandle (hObject=0x74) returned 1 [0037.669] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0037.669] GetProcessHeap () returned 0x600000 [0037.669] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x615ec0 | out: hHeap=0x600000) returned 1 [0037.669] GetEnvironmentStringsW () returned 0x615ec0* [0037.669] GetProcessHeap () returned 0x600000 [0037.669] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0xb36) returned 0x614080 [0037.669] FreeEnvironmentStringsW (penv=0x615ec0) returned 1 [0037.670] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0 [0039.195] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x3bf028 | out: lpExitCode=0x3bf028*=0x80) returned 1 [0039.195] CloseHandle (hObject=0x78) returned 1 [0039.195] _vsnwprintf (in: _Buffer=0x3bf170, _BufferCount=0x13, _Format="%08X", _ArgList=0x3bf034 | out: _Buffer="00000080") returned 8 [0039.195] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1 [0039.196] GetProcessHeap () returned 0x600000 [0039.196] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x614080 | out: hHeap=0x600000) returned 1 [0039.196] GetEnvironmentStringsW () returned 0x614080* [0039.196] GetProcessHeap () returned 0x600000 [0039.196] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0xb5c) returned 0x619568 [0039.196] FreeEnvironmentStringsW (penv=0x614080) returned 1 [0039.196] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0039.196] GetProcessHeap () returned 0x600000 [0039.196] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x619568 | out: hHeap=0x600000) returned 1 [0039.196] GetEnvironmentStringsW () returned 0x614080* [0039.196] GetProcessHeap () returned 0x600000 [0039.196] RtlAllocateHeap (HeapHandle=0x600000, Flags=0x8, Size=0xb5c) returned 0x619568 [0039.196] FreeEnvironmentStringsW (penv=0x614080) returned 1 [0039.196] GetProcessHeap () returned 0x600000 [0039.196] HeapFree (in: hHeap=0x600000, dwFlags=0x0, lpMem=0x60fed0 | out: hHeap=0x600000) returned 1 [0039.196] DeleteProcThreadAttributeList (in: lpAttributeList=0x3bf08c | out: lpAttributeList=0x3bf08c) [0039.196] _get_osfhandle (_FileHandle=1) returned 0xd0 [0039.196] SetConsoleMode (hConsoleHandle=0xd0, dwMode=0x0) returned 0 [0039.196] _get_osfhandle (_FileHandle=1) returned 0xd0 [0039.196] GetConsoleMode (in: hConsoleHandle=0xd0, lpMode=0x4a2341ac | out: lpMode=0x4a2341ac) returned 0 [0039.196] _get_osfhandle (_FileHandle=0) returned 0xcc [0039.196] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x4a2341b0 | out: lpMode=0x4a2341b0) returned 0 [0039.197] GetConsoleOutputCP () returned 0x1b5 [0039.197] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0039.197] SetThreadUILanguage (LangId=0x0) returned 0x409 [0039.197] exit (_Code=128) Process: id = "11" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x4d9e0000" os_pid = "0xa58" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0xa50" cmd_line = "taskkill.exe /F /IM agent*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 73 os_tid = 0xa5c Thread: id = 74 os_tid = 0xa60 Thread: id = 75 os_tid = 0xa64 Thread: id = 76 os_tid = 0xa68 Thread: id = 77 os_tid = 0xa6c Process: id = "12" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x4e3b5000" os_pid = "0xb04" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x980" cmd_line = "cmd.exe /C taskkill.exe /F /IM backup*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 79 os_tid = 0xb08 [0042.150] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1cfdec | out: lpSystemTimeAsFileTime=0x1cfdec*(dwLowDateTime=0xccde6d80, dwHighDateTime=0x1d5793e)) [0042.150] GetCurrentProcessId () returned 0xb04 [0042.150] GetCurrentThreadId () returned 0xb08 [0042.150] GetTickCount () returned 0x1143f04 [0042.150] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfde4 | out: lpPerformanceCount=0x1cfde4*=16243455458) returned 1 [0042.151] GetModuleHandleA (lpModuleName=0x0) returned 0x4a210000 [0042.151] __set_app_type (_Type=0x1) [0042.151] __p__fmode () returned 0x74eb31f4 [0042.151] __p__commode () returned 0x74eb31fc [0042.151] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a2321a6) returned 0x0 [0042.151] __getmainargs (in: _Argc=0x4a234238, _Argv=0x4a234240, _Env=0x4a23423c, _DoWildCard=0, _StartInfo=0x4a234140 | out: _Argc=0x4a234238, _Argv=0x4a234240, _Env=0x4a23423c) returned 0 [0042.152] GetCurrentThreadId () returned 0xb08 [0042.152] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xb08) returned 0x60 [0042.152] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0042.152] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f [0042.152] SetThreadUILanguage (LangId=0x0) returned 0x409 [0042.152] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0042.152] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1cfd7c | out: phkResult=0x1cfd7c*=0x0) returned 0x2 [0042.152] VirtualQuery (in: lpAddress=0x1cfdb3, lpBuffer=0x1cfd4c, dwLength=0x1c | out: lpBuffer=0x1cfd4c*(BaseAddress=0x1cf000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0042.152] VirtualQuery (in: lpAddress=0xd0000, lpBuffer=0x1cfd4c, dwLength=0x1c | out: lpBuffer=0x1cfd4c*(BaseAddress=0xd0000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0042.152] VirtualQuery (in: lpAddress=0xd1000, lpBuffer=0x1cfd4c, dwLength=0x1c | out: lpBuffer=0x1cfd4c*(BaseAddress=0xd1000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0042.153] VirtualQuery (in: lpAddress=0xd3000, lpBuffer=0x1cfd4c, dwLength=0x1c | out: lpBuffer=0x1cfd4c*(BaseAddress=0xd3000, AllocationBase=0xd0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0042.153] VirtualQuery (in: lpAddress=0x1d0000, lpBuffer=0x1cfd4c, dwLength=0x1c | out: lpBuffer=0x1cfd4c*(BaseAddress=0x1d0000, AllocationBase=0x1d0000, AllocationProtect=0x2, RegionSize=0x67000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0042.153] GetConsoleOutputCP () returned 0x1b5 [0042.153] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0042.153] SetConsoleCtrlHandler (HandlerRoutine=0x4a22e72a, Add=1) returned 1 [0042.153] _get_osfhandle (_FileHandle=1) returned 0xcc [0042.153] SetConsoleMode (hConsoleHandle=0xcc, dwMode=0x0) returned 0 [0042.153] _get_osfhandle (_FileHandle=1) returned 0xcc [0042.153] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x4a2341ac | out: lpMode=0x4a2341ac) returned 0 [0042.153] _get_osfhandle (_FileHandle=0) returned 0xd8 [0042.153] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x4a2341b0 | out: lpMode=0x4a2341b0) returned 0 [0042.154] GetEnvironmentStringsW () returned 0x3a1ff8* [0042.154] GetProcessHeap () returned 0x390000 [0042.154] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xaca) returned 0x3a2ad0 [0042.154] FreeEnvironmentStringsW (penv=0x3a1ff8) returned 1 [0042.154] GetProcessHeap () returned 0x390000 [0042.154] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x4) returned 0x3a0c30 [0042.154] GetEnvironmentStringsW () returned 0x3a1ff8* [0042.154] GetProcessHeap () returned 0x390000 [0042.154] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xaca) returned 0x3a35a8 [0042.154] FreeEnvironmentStringsW (penv=0x3a1ff8) returned 1 [0042.154] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1cecec | out: phkResult=0x1cecec*=0x68) returned 0x0 [0042.154] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1cecf4, lpData=0x1cecf8, lpcbData=0x1cecf0*=0x1000 | out: lpType=0x1cecf4*=0x0, lpData=0x1cecf8*=0x0, lpcbData=0x1cecf0*=0x1000) returned 0x2 [0042.155] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1cecf4, lpData=0x1cecf8, lpcbData=0x1cecf0*=0x1000 | out: lpType=0x1cecf4*=0x4, lpData=0x1cecf8*=0x1, lpcbData=0x1cecf0*=0x4) returned 0x0 [0042.155] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1cecf4, lpData=0x1cecf8, lpcbData=0x1cecf0*=0x1000 | out: lpType=0x1cecf4*=0x0, lpData=0x1cecf8*=0x1, lpcbData=0x1cecf0*=0x1000) returned 0x2 [0042.155] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1cecf4, lpData=0x1cecf8, lpcbData=0x1cecf0*=0x1000 | out: lpType=0x1cecf4*=0x4, lpData=0x1cecf8*=0x0, lpcbData=0x1cecf0*=0x4) returned 0x0 [0042.155] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1cecf4, lpData=0x1cecf8, lpcbData=0x1cecf0*=0x1000 | out: lpType=0x1cecf4*=0x4, lpData=0x1cecf8*=0x40, lpcbData=0x1cecf0*=0x4) returned 0x0 [0042.155] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1cecf4, lpData=0x1cecf8, lpcbData=0x1cecf0*=0x1000 | out: lpType=0x1cecf4*=0x4, lpData=0x1cecf8*=0x40, lpcbData=0x1cecf0*=0x4) returned 0x0 [0042.155] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1cecf4, lpData=0x1cecf8, lpcbData=0x1cecf0*=0x1000 | out: lpType=0x1cecf4*=0x0, lpData=0x1cecf8*=0x40, lpcbData=0x1cecf0*=0x1000) returned 0x2 [0042.155] RegCloseKey (hKey=0x68) returned 0x0 [0042.155] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1cecec | out: phkResult=0x1cecec*=0x68) returned 0x0 [0042.155] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1cecf4, lpData=0x1cecf8, lpcbData=0x1cecf0*=0x1000 | out: lpType=0x1cecf4*=0x0, lpData=0x1cecf8*=0x40, lpcbData=0x1cecf0*=0x1000) returned 0x2 [0042.155] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1cecf4, lpData=0x1cecf8, lpcbData=0x1cecf0*=0x1000 | out: lpType=0x1cecf4*=0x4, lpData=0x1cecf8*=0x1, lpcbData=0x1cecf0*=0x4) returned 0x0 [0042.155] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1cecf4, lpData=0x1cecf8, lpcbData=0x1cecf0*=0x1000 | out: lpType=0x1cecf4*=0x0, lpData=0x1cecf8*=0x1, lpcbData=0x1cecf0*=0x1000) returned 0x2 [0042.155] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1cecf4, lpData=0x1cecf8, lpcbData=0x1cecf0*=0x1000 | out: lpType=0x1cecf4*=0x4, lpData=0x1cecf8*=0x0, lpcbData=0x1cecf0*=0x4) returned 0x0 [0042.155] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1cecf4, lpData=0x1cecf8, lpcbData=0x1cecf0*=0x1000 | out: lpType=0x1cecf4*=0x4, lpData=0x1cecf8*=0x9, lpcbData=0x1cecf0*=0x4) returned 0x0 [0042.155] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1cecf4, lpData=0x1cecf8, lpcbData=0x1cecf0*=0x1000 | out: lpType=0x1cecf4*=0x4, lpData=0x1cecf8*=0x9, lpcbData=0x1cecf0*=0x4) returned 0x0 [0042.155] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1cecf4, lpData=0x1cecf8, lpcbData=0x1cecf0*=0x1000 | out: lpType=0x1cecf4*=0x0, lpData=0x1cecf8*=0x9, lpcbData=0x1cecf0*=0x1000) returned 0x2 [0042.155] RegCloseKey (hKey=0x68) returned 0x0 [0042.155] time (in: timer=0x0 | out: timer=0x0) returned 0x5d94d0ce [0042.155] srand (_Seed=0x5d94d0ce) [0042.155] GetCommandLineW () returned="cmd.exe /C taskkill.exe /F /IM backup*" [0042.155] GetCommandLineW () returned="cmd.exe /C taskkill.exe /F /IM backup*" [0042.156] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a235260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0042.156] GetProcessHeap () returned 0x390000 [0042.156] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x210) returned 0x3a1ff8 [0042.156] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3a2000, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0042.156] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0042.156] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0042.156] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0042.156] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0042.156] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0042.156] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0042.156] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0042.156] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0042.156] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0042.156] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0042.156] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0042.156] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0042.156] GetProcessHeap () returned 0x390000 [0042.156] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a2ad0 | out: hHeap=0x390000) returned 1 [0042.157] GetEnvironmentStringsW () returned 0x3a2210* [0042.157] GetProcessHeap () returned 0x390000 [0042.157] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xae2) returned 0x3a4b70 [0042.157] FreeEnvironmentStringsW (penv=0x3a2210) returned 1 [0042.157] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0042.157] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0042.157] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0042.157] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0042.157] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0042.157] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0042.157] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0042.157] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0042.157] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0042.157] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0042.157] GetProcessHeap () returned 0x390000 [0042.157] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x54) returned 0x3a5660 [0042.157] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1cfab8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0042.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x1cfab8, lpFilePart=0x1cfab4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x1cfab4*="Desktop") returned 0x25 [0042.157] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0042.157] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x1cf834 | out: lpFindFileData=0x1cf834*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x3a1e78 [0042.158] FindClose (in: hFindFile=0x3a1e78 | out: hFindFile=0x3a1e78) returned 1 [0042.158] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x1cf834 | out: lpFindFileData=0x1cf834*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x3a1e78 [0042.158] FindClose (in: hFindFile=0x3a1e78 | out: hFindFile=0x3a1e78) returned 1 [0042.158] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20 [0042.158] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x1cf834 | out: lpFindFileData=0x1cf834*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc46c41e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xc46c41e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x3a1e78 [0042.158] FindClose (in: hFindFile=0x3a1e78 | out: hFindFile=0x3a1e78) returned 1 [0042.158] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0042.158] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0042.158] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0042.158] GetProcessHeap () returned 0x390000 [0042.158] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a4b70 | out: hHeap=0x390000) returned 1 [0042.158] GetEnvironmentStringsW () returned 0x3a4080* [0042.158] GetProcessHeap () returned 0x390000 [0042.158] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xb36) returned 0x3a5ec0 [0042.159] FreeEnvironmentStringsW (penv=0x3a4080) returned 1 [0042.159] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a235260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0042.159] GetProcessHeap () returned 0x390000 [0042.159] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a5660 | out: hHeap=0x390000) returned 1 [0042.159] GetProcessHeap () returned 0x390000 [0042.159] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x400e) returned 0x3a6a00 [0042.159] GetProcessHeap () returned 0x390000 [0042.159] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x44) returned 0x3a1e78 [0042.159] GetProcessHeap () returned 0x390000 [0042.159] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a6a00 | out: hHeap=0x390000) returned 1 [0042.159] GetConsoleOutputCP () returned 0x1b5 [0042.159] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0042.159] GetUserDefaultLCID () returned 0x409 [0042.160] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a234950, cchData=8 | out: lpLCData=":") returned 2 [0042.160] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x1cfbf8, cchData=128 | out: lpLCData="0") returned 2 [0042.160] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x1cfbf8, cchData=128 | out: lpLCData="0") returned 2 [0042.160] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x1cfbf8, cchData=128 | out: lpLCData="1") returned 2 [0042.160] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a234940, cchData=8 | out: lpLCData="/") returned 2 [0042.160] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a234d80, cchData=32 | out: lpLCData="Mon") returned 4 [0042.161] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a234d40, cchData=32 | out: lpLCData="Tue") returned 4 [0042.161] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a234d00, cchData=32 | out: lpLCData="Wed") returned 4 [0042.161] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a234cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0042.161] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a234c80, cchData=32 | out: lpLCData="Fri") returned 4 [0042.161] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a234c40, cchData=32 | out: lpLCData="Sat") returned 4 [0042.161] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a234c00, cchData=32 | out: lpLCData="Sun") returned 4 [0042.161] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a234930, cchData=8 | out: lpLCData=".") returned 2 [0042.161] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a234920, cchData=8 | out: lpLCData=",") returned 2 [0042.161] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0042.162] GetProcessHeap () returned 0x390000 [0042.162] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x0, Size=0x20c) returned 0x3a2d88 [0042.162] GetConsoleTitleW (in: lpConsoleTitle=0x3a2d88, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0042.162] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0042.162] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92 [0042.162] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0042.162] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d [0042.163] GetProcessHeap () returned 0x390000 [0042.163] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x400a) returned 0x3a6a00 [0042.163] GetProcessHeap () returned 0x390000 [0042.163] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a6a00 | out: hHeap=0x390000) returned 1 [0042.292] _wcsicmp (_String1="taskkill.exe", _String2=")") returned 75 [0042.292] _wcsicmp (_String1="FOR", _String2="taskkill.exe") returned -14 [0042.292] _wcsicmp (_String1="FOR/?", _String2="taskkill.exe") returned -14 [0042.292] _wcsicmp (_String1="IF", _String2="taskkill.exe") returned -11 [0042.292] _wcsicmp (_String1="IF/?", _String2="taskkill.exe") returned -11 [0042.292] _wcsicmp (_String1="REM", _String2="taskkill.exe") returned -2 [0042.292] _wcsicmp (_String1="REM/?", _String2="taskkill.exe") returned -2 [0042.292] GetProcessHeap () returned 0x390000 [0042.292] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x58) returned 0x3a2fa0 [0042.292] GetProcessHeap () returned 0x390000 [0042.293] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x22) returned 0x3a3000 [0042.293] GetProcessHeap () returned 0x390000 [0042.293] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x28) returned 0x3a3030 [0042.294] GetConsoleTitleW (in: lpConsoleTitle=0x1cf8f0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0042.294] GetFileAttributesW (lpFileName="taskkill.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\taskkill.exe")) returned 0xffffffff [0042.294] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16 [0042.294] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15 [0042.294] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16 [0042.295] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24 [0042.295] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17 [0042.295] _wcsicmp (_String1="taskkill", _String2="CD") returned 17 [0042.295] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17 [0042.295] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2 [0042.295] _wcsicmp (_String1="taskkill", _String2="REN") returned 2 [0042.295] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15 [0042.295] _wcsicmp (_String1="taskkill", _String2="SET") returned 1 [0042.295] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4 [0042.295] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16 [0042.295] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8 [0042.295] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4 [0042.295] _wcsicmp (_String1="taskkill", _String2="MD") returned 7 [0042.295] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7 [0042.295] _wcsicmp (_String1="taskkill", _String2="RD") returned 2 [0042.295] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2 [0042.295] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4 [0042.295] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13 [0042.295] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1 [0042.295] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17 [0042.295] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17 [0042.295] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2 [0042.295] _wcsicmp (_String1="taskkill", _String2="VER") returned -2 [0042.295] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2 [0042.295] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15 [0042.295] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1 [0042.295] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15 [0042.295] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8 [0042.295] _wcsicmp (_String1="taskkill", _String2="START") returned 1 [0042.295] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16 [0042.295] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9 [0042.295] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7 [0042.295] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4 [0042.295] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4 [0042.296] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19 [0042.296] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14 [0042.296] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18 [0042.296] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17 [0042.296] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7 [0042.296] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16 [0042.296] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15 [0042.296] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16 [0042.296] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24 [0042.296] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17 [0042.296] _wcsicmp (_String1="taskkill", _String2="CD") returned 17 [0042.296] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17 [0042.296] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2 [0042.296] _wcsicmp (_String1="taskkill", _String2="REN") returned 2 [0042.296] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15 [0042.296] _wcsicmp (_String1="taskkill", _String2="SET") returned 1 [0042.296] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4 [0042.296] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16 [0042.296] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8 [0042.296] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4 [0042.296] _wcsicmp (_String1="taskkill", _String2="MD") returned 7 [0042.296] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7 [0042.296] _wcsicmp (_String1="taskkill", _String2="RD") returned 2 [0042.296] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2 [0042.296] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4 [0042.296] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13 [0042.296] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1 [0042.296] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17 [0042.296] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17 [0042.296] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2 [0042.296] _wcsicmp (_String1="taskkill", _String2="VER") returned -2 [0042.296] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2 [0042.296] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15 [0042.296] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1 [0042.297] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15 [0042.297] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8 [0042.297] _wcsicmp (_String1="taskkill", _String2="START") returned 1 [0042.297] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16 [0042.297] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9 [0042.297] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7 [0042.297] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4 [0042.297] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4 [0042.297] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19 [0042.297] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14 [0042.297] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18 [0042.297] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17 [0042.297] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7 [0042.297] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14 [0042.297] _wcsicmp (_String1="taskkill", _String2="IF") returned 11 [0042.297] _wcsicmp (_String1="taskkill", _String2="REM") returned 2 [0042.297] GetProcessHeap () returned 0x390000 [0042.298] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x210) returned 0x3a3060 [0042.298] GetProcessHeap () returned 0x390000 [0042.298] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x42) returned 0x3a3278 [0042.298] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17 [0042.298] GetProcessHeap () returned 0x390000 [0042.298] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x418) returned 0x3907f0 [0042.298] SetErrorMode (uMode=0x0) returned 0x8003 [0042.298] SetErrorMode (uMode=0x1) returned 0x0 [0042.298] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3907f8, lpFilePart=0x1cf410 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x1cf410*="Desktop") returned 0x25 [0042.298] SetErrorMode (uMode=0x8003) returned 0x1 [0042.298] GetProcessHeap () returned 0x390000 [0042.298] RtlReAllocateHeap (Heap=0x390000, Flags=0x0, Ptr=0x3907f0, Size=0x6e) returned 0x3907f0 [0042.298] GetProcessHeap () returned 0x390000 [0042.298] RtlSizeHeap (HeapHandle=0x390000, Flags=0x0, MemoryPointer=0x3907f0) returned 0x6e [0042.298] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0042.298] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0042.299] GetProcessHeap () returned 0x390000 [0042.299] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x120) returned 0x3a32c8 [0042.299] GetProcessHeap () returned 0x390000 [0042.299] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x238) returned 0x390868 [0042.304] GetProcessHeap () returned 0x390000 [0042.304] RtlReAllocateHeap (Heap=0x390000, Flags=0x0, Ptr=0x390868, Size=0x122) returned 0x390868 [0042.304] GetProcessHeap () returned 0x390000 [0042.304] RtlSizeHeap (HeapHandle=0x390000, Flags=0x0, MemoryPointer=0x390868) returned 0x122 [0042.304] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0042.304] GetProcessHeap () returned 0x390000 [0042.304] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xe0) returned 0x3a33f0 [0042.304] GetProcessHeap () returned 0x390000 [0042.305] RtlReAllocateHeap (Heap=0x390000, Flags=0x0, Ptr=0x3a33f0, Size=0x76) returned 0x3a33f0 [0042.305] GetProcessHeap () returned 0x390000 [0042.305] RtlSizeHeap (HeapHandle=0x390000, Flags=0x0, MemoryPointer=0x3a33f0) returned 0x76 [0042.305] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0042.305] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.exe", fInfoLevelId=0x1, lpFindFileData=0x1cf1ac, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1cf1ac) returned 0xffffffff [0042.306] GetLastError () returned 0x2 [0042.306] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.exe.*", fInfoLevelId=0x1, lpFindFileData=0x1cf18c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1cf18c) returned 0xffffffff [0042.306] GetLastError () returned 0x2 [0042.306] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.exe", fInfoLevelId=0x1, lpFindFileData=0x1cf18c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1cf18c) returned 0xffffffff [0042.306] GetLastError () returned 0x2 [0042.306] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0042.306] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.exe", fInfoLevelId=0x1, lpFindFileData=0x1cf1ac, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1cf1ac) returned 0x3a3470 [0042.306] GetProcessHeap () returned 0x390000 [0042.306] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x0, Size=0x14) returned 0x3a34b0 [0042.306] FindClose (in: hFindFile=0x3a3470 | out: hFindFile=0x3a3470) returned 1 [0042.306] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0042.307] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0042.307] GetConsoleTitleW (in: lpConsoleTitle=0x1cf684, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0042.307] InitializeProcThreadAttributeList (in: lpAttributeList=0x1cf50c, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x1cf5d4 | out: lpAttributeList=0x1cf50c, lpSize=0x1cf5d4) returned 1 [0042.307] UpdateProcThreadAttribute (in: lpAttributeList=0x1cf50c, dwFlags=0x0, Attribute=0x60001, lpValue=0x1cf5cc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x1cf50c, lpPreviousValue=0x0) returned 1 [0042.307] GetStartupInfoW (in: lpStartupInfo=0x1cf4c8 | out: lpStartupInfo=0x1cf4c8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xd8, hStdOutput=0xcc, hStdError=0xd0)) [0042.307] GetProcessHeap () returned 0x390000 [0042.307] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0x18) returned 0x3a3470 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0042.307] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0042.308] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0042.308] GetProcessHeap () returned 0x390000 [0042.308] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a3470 | out: hHeap=0x390000) returned 1 [0042.308] GetProcessHeap () returned 0x390000 [0042.308] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xa) returned 0x39fed0 [0042.309] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1 [0042.310] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill.exe /F /IM backup*", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x1cf568*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill.exe /F /IM backup*", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1cf5b4 | out: lpCommandLine="taskkill.exe /F /IM backup*", lpProcessInformation=0x1cf5b4*(hProcess=0x78, hThread=0x74, dwProcessId=0xb14, dwThreadId=0xb18)) returned 1 [0042.315] CloseHandle (hObject=0x74) returned 1 [0042.315] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0042.315] GetProcessHeap () returned 0x390000 [0042.315] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a5ec0 | out: hHeap=0x390000) returned 1 [0042.315] GetEnvironmentStringsW () returned 0x3a5ec0* [0042.315] GetProcessHeap () returned 0x390000 [0042.315] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xb36) returned 0x3a4080 [0042.315] FreeEnvironmentStringsW (penv=0x3a5ec0) returned 1 [0042.315] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0 [0043.049] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x1cf4a8 | out: lpExitCode=0x1cf4a8*=0x80) returned 1 [0043.049] CloseHandle (hObject=0x78) returned 1 [0043.049] _vsnwprintf (in: _Buffer=0x1cf5f0, _BufferCount=0x13, _Format="%08X", _ArgList=0x1cf4b4 | out: _Buffer="00000080") returned 8 [0043.049] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1 [0043.049] GetProcessHeap () returned 0x390000 [0043.049] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a4080 | out: hHeap=0x390000) returned 1 [0043.049] GetEnvironmentStringsW () returned 0x3a4080* [0043.049] GetProcessHeap () returned 0x390000 [0043.049] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xb5c) returned 0x3a9568 [0043.049] FreeEnvironmentStringsW (penv=0x3a4080) returned 1 [0043.049] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0043.049] GetProcessHeap () returned 0x390000 [0043.049] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x3a9568 | out: hHeap=0x390000) returned 1 [0043.049] GetEnvironmentStringsW () returned 0x3a4080* [0043.049] GetProcessHeap () returned 0x390000 [0043.049] RtlAllocateHeap (HeapHandle=0x390000, Flags=0x8, Size=0xb5c) returned 0x3a9568 [0043.050] FreeEnvironmentStringsW (penv=0x3a4080) returned 1 [0043.050] GetProcessHeap () returned 0x390000 [0043.050] HeapFree (in: hHeap=0x390000, dwFlags=0x0, lpMem=0x39fed0 | out: hHeap=0x390000) returned 1 [0043.050] DeleteProcThreadAttributeList (in: lpAttributeList=0x1cf50c | out: lpAttributeList=0x1cf50c) [0043.050] _get_osfhandle (_FileHandle=1) returned 0xcc [0043.050] SetConsoleMode (hConsoleHandle=0xcc, dwMode=0x0) returned 0 [0043.050] _get_osfhandle (_FileHandle=1) returned 0xcc [0043.050] GetConsoleMode (in: hConsoleHandle=0xcc, lpMode=0x4a2341ac | out: lpMode=0x4a2341ac) returned 0 [0043.050] _get_osfhandle (_FileHandle=0) returned 0xd8 [0043.050] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x4a2341b0 | out: lpMode=0x4a2341b0) returned 0 [0043.050] GetConsoleOutputCP () returned 0x1b5 [0043.050] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0043.050] SetThreadUILanguage (LangId=0x0) returned 0x409 [0043.051] exit (_Code=128) Process: id = "13" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x4f703000" os_pid = "0xb14" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0xb04" cmd_line = "taskkill.exe /F /IM backup*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 80 os_tid = 0xb18 Thread: id = 81 os_tid = 0xb1c Thread: id = 82 os_tid = 0xb20 Thread: id = 83 os_tid = 0xb24 Thread: id = 84 os_tid = 0xb28 Process: id = "14" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x66606000" os_pid = "0x2b0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e990" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0x36c" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cedf" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 89 os_tid = 0x808 Thread: id = 90 os_tid = 0x804 Thread: id = 91 os_tid = 0x688 Thread: id = 92 os_tid = 0x6b4 Thread: id = 93 os_tid = 0x694 Thread: id = 94 os_tid = 0x664 Thread: id = 95 os_tid = 0x6ec Thread: id = 96 os_tid = 0x73c Thread: id = 151 os_tid = 0x6a8 Thread: id = 155 os_tid = 0x354 Thread: id = 206 os_tid = 0x9c0 Thread: id = 207 os_tid = 0x9c4 Process: id = "15" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x4d9bf000" os_pid = "0xb40" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x980" cmd_line = "cmd.exe /C taskkill.exe /F /IM vm*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 97 os_tid = 0xb44 [0043.187] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x43f9cc | out: lpSystemTimeAsFileTime=0x43f9cc*(dwLowDateTime=0xcd45ab30, dwHighDateTime=0x1d5793e)) [0043.187] GetCurrentProcessId () returned 0xb40 [0043.187] GetCurrentThreadId () returned 0xb44 [0043.187] GetTickCount () returned 0x11441b2 [0043.187] QueryPerformanceCounter (in: lpPerformanceCount=0x43f9c4 | out: lpPerformanceCount=0x43f9c4*=16347205171) returned 1 [0043.188] GetModuleHandleA (lpModuleName=0x0) returned 0x4a210000 [0043.188] __set_app_type (_Type=0x1) [0043.188] __p__fmode () returned 0x74eb31f4 [0043.189] __p__commode () returned 0x74eb31fc [0043.189] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a2321a6) returned 0x0 [0043.189] __getmainargs (in: _Argc=0x4a234238, _Argv=0x4a234240, _Env=0x4a23423c, _DoWildCard=0, _StartInfo=0x4a234140 | out: _Argc=0x4a234238, _Argv=0x4a234240, _Env=0x4a23423c) returned 0 [0043.189] GetCurrentThreadId () returned 0xb44 [0043.189] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xb44) returned 0x60 [0043.189] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0043.189] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f [0043.189] SetThreadUILanguage (LangId=0x0) returned 0x409 [0043.190] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0043.190] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x43f95c | out: phkResult=0x43f95c*=0x0) returned 0x2 [0043.190] VirtualQuery (in: lpAddress=0x43f993, lpBuffer=0x43f92c, dwLength=0x1c | out: lpBuffer=0x43f92c*(BaseAddress=0x43f000, AllocationBase=0x340000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0043.190] VirtualQuery (in: lpAddress=0x340000, lpBuffer=0x43f92c, dwLength=0x1c | out: lpBuffer=0x43f92c*(BaseAddress=0x340000, AllocationBase=0x340000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0043.190] VirtualQuery (in: lpAddress=0x341000, lpBuffer=0x43f92c, dwLength=0x1c | out: lpBuffer=0x43f92c*(BaseAddress=0x341000, AllocationBase=0x340000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0043.190] VirtualQuery (in: lpAddress=0x343000, lpBuffer=0x43f92c, dwLength=0x1c | out: lpBuffer=0x43f92c*(BaseAddress=0x343000, AllocationBase=0x340000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0043.190] VirtualQuery (in: lpAddress=0x440000, lpBuffer=0x43f92c, dwLength=0x1c | out: lpBuffer=0x43f92c*(BaseAddress=0x440000, AllocationBase=0x440000, AllocationProtect=0x2, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0043.190] GetConsoleOutputCP () returned 0x1b5 [0043.190] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0043.190] SetConsoleCtrlHandler (HandlerRoutine=0x4a22e72a, Add=1) returned 1 [0043.190] _get_osfhandle (_FileHandle=1) returned 0xd8 [0043.190] SetConsoleMode (hConsoleHandle=0xd8, dwMode=0x0) returned 0 [0043.191] _get_osfhandle (_FileHandle=1) returned 0xd8 [0043.191] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x4a2341ac | out: lpMode=0x4a2341ac) returned 0 [0043.191] _get_osfhandle (_FileHandle=0) returned 0xe0 [0043.191] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x4a2341b0 | out: lpMode=0x4a2341b0) returned 0 [0043.191] GetEnvironmentStringsW () returned 0x231ff0* [0043.191] GetProcessHeap () returned 0x220000 [0043.191] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xaca) returned 0x232ac8 [0043.191] FreeEnvironmentStringsW (penv=0x231ff0) returned 1 [0043.191] GetProcessHeap () returned 0x220000 [0043.191] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x4) returned 0x230c28 [0043.191] GetEnvironmentStringsW () returned 0x231ff0* [0043.191] GetProcessHeap () returned 0x220000 [0043.191] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xaca) returned 0x2335a0 [0043.191] FreeEnvironmentStringsW (penv=0x231ff0) returned 1 [0043.192] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x43e8cc | out: phkResult=0x43e8cc*=0x68) returned 0x0 [0043.192] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x43e8d4, lpData=0x43e8d8, lpcbData=0x43e8d0*=0x1000 | out: lpType=0x43e8d4*=0x0, lpData=0x43e8d8*=0x0, lpcbData=0x43e8d0*=0x1000) returned 0x2 [0043.192] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x43e8d4, lpData=0x43e8d8, lpcbData=0x43e8d0*=0x1000 | out: lpType=0x43e8d4*=0x4, lpData=0x43e8d8*=0x1, lpcbData=0x43e8d0*=0x4) returned 0x0 [0043.192] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x43e8d4, lpData=0x43e8d8, lpcbData=0x43e8d0*=0x1000 | out: lpType=0x43e8d4*=0x0, lpData=0x43e8d8*=0x1, lpcbData=0x43e8d0*=0x1000) returned 0x2 [0043.192] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x43e8d4, lpData=0x43e8d8, lpcbData=0x43e8d0*=0x1000 | out: lpType=0x43e8d4*=0x4, lpData=0x43e8d8*=0x0, lpcbData=0x43e8d0*=0x4) returned 0x0 [0043.192] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x43e8d4, lpData=0x43e8d8, lpcbData=0x43e8d0*=0x1000 | out: lpType=0x43e8d4*=0x4, lpData=0x43e8d8*=0x40, lpcbData=0x43e8d0*=0x4) returned 0x0 [0043.192] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x43e8d4, lpData=0x43e8d8, lpcbData=0x43e8d0*=0x1000 | out: lpType=0x43e8d4*=0x4, lpData=0x43e8d8*=0x40, lpcbData=0x43e8d0*=0x4) returned 0x0 [0043.192] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x43e8d4, lpData=0x43e8d8, lpcbData=0x43e8d0*=0x1000 | out: lpType=0x43e8d4*=0x0, lpData=0x43e8d8*=0x40, lpcbData=0x43e8d0*=0x1000) returned 0x2 [0043.192] RegCloseKey (hKey=0x68) returned 0x0 [0043.192] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x43e8cc | out: phkResult=0x43e8cc*=0x68) returned 0x0 [0043.192] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x43e8d4, lpData=0x43e8d8, lpcbData=0x43e8d0*=0x1000 | out: lpType=0x43e8d4*=0x0, lpData=0x43e8d8*=0x40, lpcbData=0x43e8d0*=0x1000) returned 0x2 [0043.192] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x43e8d4, lpData=0x43e8d8, lpcbData=0x43e8d0*=0x1000 | out: lpType=0x43e8d4*=0x4, lpData=0x43e8d8*=0x1, lpcbData=0x43e8d0*=0x4) returned 0x0 [0043.192] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x43e8d4, lpData=0x43e8d8, lpcbData=0x43e8d0*=0x1000 | out: lpType=0x43e8d4*=0x0, lpData=0x43e8d8*=0x1, lpcbData=0x43e8d0*=0x1000) returned 0x2 [0043.192] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x43e8d4, lpData=0x43e8d8, lpcbData=0x43e8d0*=0x1000 | out: lpType=0x43e8d4*=0x4, lpData=0x43e8d8*=0x0, lpcbData=0x43e8d0*=0x4) returned 0x0 [0043.192] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x43e8d4, lpData=0x43e8d8, lpcbData=0x43e8d0*=0x1000 | out: lpType=0x43e8d4*=0x4, lpData=0x43e8d8*=0x9, lpcbData=0x43e8d0*=0x4) returned 0x0 [0043.192] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x43e8d4, lpData=0x43e8d8, lpcbData=0x43e8d0*=0x1000 | out: lpType=0x43e8d4*=0x4, lpData=0x43e8d8*=0x9, lpcbData=0x43e8d0*=0x4) returned 0x0 [0043.192] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x43e8d4, lpData=0x43e8d8, lpcbData=0x43e8d0*=0x1000 | out: lpType=0x43e8d4*=0x0, lpData=0x43e8d8*=0x9, lpcbData=0x43e8d0*=0x1000) returned 0x2 [0043.192] RegCloseKey (hKey=0x68) returned 0x0 [0043.193] time (in: timer=0x0 | out: timer=0x0) returned 0x5d94d0cf [0043.193] srand (_Seed=0x5d94d0cf) [0043.193] GetCommandLineW () returned="cmd.exe /C taskkill.exe /F /IM vm*" [0043.193] GetCommandLineW () returned="cmd.exe /C taskkill.exe /F /IM vm*" [0043.193] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a235260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0043.193] GetProcessHeap () returned 0x220000 [0043.193] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x210) returned 0x231ff0 [0043.193] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x231ff8, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0043.193] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0043.193] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0043.193] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0043.193] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0043.193] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0043.193] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0043.193] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0043.193] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0043.194] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0043.194] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0043.194] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0043.194] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0043.194] GetProcessHeap () returned 0x220000 [0043.194] HeapFree (in: hHeap=0x220000, dwFlags=0x0, lpMem=0x232ac8 | out: hHeap=0x220000) returned 1 [0043.194] GetEnvironmentStringsW () returned 0x232208* [0043.194] GetProcessHeap () returned 0x220000 [0043.194] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xae2) returned 0x234b68 [0043.194] FreeEnvironmentStringsW (penv=0x232208) returned 1 [0043.194] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0043.194] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0043.194] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0043.194] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0043.194] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0043.194] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0043.194] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0043.194] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0043.194] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0043.194] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0043.194] GetProcessHeap () returned 0x220000 [0043.194] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x54) returned 0x235658 [0043.194] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x43f698 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0043.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x43f698, lpFilePart=0x43f694 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x43f694*="Desktop") returned 0x25 [0043.194] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0043.195] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x43f414 | out: lpFindFileData=0x43f414*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x231e70 [0043.195] FindClose (in: hFindFile=0x231e70 | out: hFindFile=0x231e70) returned 1 [0043.195] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x43f414 | out: lpFindFileData=0x43f414*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x231e70 [0043.195] FindClose (in: hFindFile=0x231e70 | out: hFindFile=0x231e70) returned 1 [0043.195] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20 [0043.195] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x43f414 | out: lpFindFileData=0x43f414*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc46c41e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xc46c41e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x231e70 [0043.195] FindClose (in: hFindFile=0x231e70 | out: hFindFile=0x231e70) returned 1 [0043.195] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0043.195] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0043.195] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0043.195] GetProcessHeap () returned 0x220000 [0043.195] HeapFree (in: hHeap=0x220000, dwFlags=0x0, lpMem=0x234b68 | out: hHeap=0x220000) returned 1 [0043.195] GetEnvironmentStringsW () returned 0x234078* [0043.195] GetProcessHeap () returned 0x220000 [0043.196] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xb36) returned 0x235eb8 [0043.196] FreeEnvironmentStringsW (penv=0x234078) returned 1 [0043.196] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a235260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0043.196] GetProcessHeap () returned 0x220000 [0043.196] HeapFree (in: hHeap=0x220000, dwFlags=0x0, lpMem=0x235658 | out: hHeap=0x220000) returned 1 [0043.196] GetProcessHeap () returned 0x220000 [0043.196] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x400e) returned 0x2369f8 [0043.196] GetProcessHeap () returned 0x220000 [0043.196] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x3c) returned 0x231e70 [0043.196] GetProcessHeap () returned 0x220000 [0043.196] HeapFree (in: hHeap=0x220000, dwFlags=0x0, lpMem=0x2369f8 | out: hHeap=0x220000) returned 1 [0043.196] GetConsoleOutputCP () returned 0x1b5 [0043.197] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0043.197] GetUserDefaultLCID () returned 0x409 [0043.197] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a234950, cchData=8 | out: lpLCData=":") returned 2 [0043.197] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x43f7d8, cchData=128 | out: lpLCData="0") returned 2 [0043.197] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x43f7d8, cchData=128 | out: lpLCData="0") returned 2 [0043.197] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x43f7d8, cchData=128 | out: lpLCData="1") returned 2 [0043.197] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a234940, cchData=8 | out: lpLCData="/") returned 2 [0043.197] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a234d80, cchData=32 | out: lpLCData="Mon") returned 4 [0043.198] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a234d40, cchData=32 | out: lpLCData="Tue") returned 4 [0043.198] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a234d00, cchData=32 | out: lpLCData="Wed") returned 4 [0043.198] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a234cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0043.198] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a234c80, cchData=32 | out: lpLCData="Fri") returned 4 [0043.198] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a234c40, cchData=32 | out: lpLCData="Sat") returned 4 [0043.198] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a234c00, cchData=32 | out: lpLCData="Sun") returned 4 [0043.198] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a234930, cchData=8 | out: lpLCData=".") returned 2 [0043.198] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a234920, cchData=8 | out: lpLCData=",") returned 2 [0043.198] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0043.199] GetProcessHeap () returned 0x220000 [0043.199] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x20c) returned 0x232d80 [0043.199] GetConsoleTitleW (in: lpConsoleTitle=0x232d80, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0043.199] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0043.199] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92 [0043.199] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0043.200] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d [0043.200] GetProcessHeap () returned 0x220000 [0043.200] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x400a) returned 0x2369f8 [0043.200] GetProcessHeap () returned 0x220000 [0043.200] HeapFree (in: hHeap=0x220000, dwFlags=0x0, lpMem=0x2369f8 | out: hHeap=0x220000) returned 1 [0043.201] _wcsicmp (_String1="taskkill.exe", _String2=")") returned 75 [0043.201] _wcsicmp (_String1="FOR", _String2="taskkill.exe") returned -14 [0043.201] _wcsicmp (_String1="FOR/?", _String2="taskkill.exe") returned -14 [0043.201] _wcsicmp (_String1="IF", _String2="taskkill.exe") returned -11 [0043.201] _wcsicmp (_String1="IF/?", _String2="taskkill.exe") returned -11 [0043.201] _wcsicmp (_String1="REM", _String2="taskkill.exe") returned -2 [0043.201] _wcsicmp (_String1="REM/?", _String2="taskkill.exe") returned -2 [0043.201] GetProcessHeap () returned 0x220000 [0043.201] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x58) returned 0x232f98 [0043.201] GetProcessHeap () returned 0x220000 [0043.201] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x22) returned 0x232ff8 [0043.201] GetProcessHeap () returned 0x220000 [0043.201] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x20) returned 0x2356f8 [0043.202] GetConsoleTitleW (in: lpConsoleTitle=0x43f4d0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0043.203] GetFileAttributesW (lpFileName="taskkill.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\taskkill.exe")) returned 0xffffffff [0043.203] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16 [0043.203] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15 [0043.203] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16 [0043.203] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24 [0043.203] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17 [0043.203] _wcsicmp (_String1="taskkill", _String2="CD") returned 17 [0043.203] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17 [0043.203] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2 [0043.203] _wcsicmp (_String1="taskkill", _String2="REN") returned 2 [0043.203] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15 [0043.203] _wcsicmp (_String1="taskkill", _String2="SET") returned 1 [0043.203] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4 [0043.203] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16 [0043.203] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8 [0043.203] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4 [0043.203] _wcsicmp (_String1="taskkill", _String2="MD") returned 7 [0043.203] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7 [0043.203] _wcsicmp (_String1="taskkill", _String2="RD") returned 2 [0043.203] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2 [0043.204] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4 [0043.204] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13 [0043.204] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1 [0043.204] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17 [0043.204] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17 [0043.204] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2 [0043.204] _wcsicmp (_String1="taskkill", _String2="VER") returned -2 [0043.204] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2 [0043.204] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15 [0043.204] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1 [0043.204] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15 [0043.204] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8 [0043.204] _wcsicmp (_String1="taskkill", _String2="START") returned 1 [0043.204] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16 [0043.204] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9 [0043.204] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7 [0043.204] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4 [0043.204] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4 [0043.204] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19 [0043.204] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14 [0043.204] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18 [0043.204] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17 [0043.204] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7 [0043.204] _wcsicmp (_String1="taskkill", _String2="DIR") returned 16 [0043.205] _wcsicmp (_String1="taskkill", _String2="ERASE") returned 15 [0043.205] _wcsicmp (_String1="taskkill", _String2="DEL") returned 16 [0043.205] _wcsicmp (_String1="taskkill", _String2="TYPE") returned -24 [0043.205] _wcsicmp (_String1="taskkill", _String2="COPY") returned 17 [0043.205] _wcsicmp (_String1="taskkill", _String2="CD") returned 17 [0043.205] _wcsicmp (_String1="taskkill", _String2="CHDIR") returned 17 [0043.205] _wcsicmp (_String1="taskkill", _String2="RENAME") returned 2 [0043.205] _wcsicmp (_String1="taskkill", _String2="REN") returned 2 [0043.205] _wcsicmp (_String1="taskkill", _String2="ECHO") returned 15 [0043.205] _wcsicmp (_String1="taskkill", _String2="SET") returned 1 [0043.205] _wcsicmp (_String1="taskkill", _String2="PAUSE") returned 4 [0043.205] _wcsicmp (_String1="taskkill", _String2="DATE") returned 16 [0043.205] _wcsicmp (_String1="taskkill", _String2="TIME") returned -8 [0043.205] _wcsicmp (_String1="taskkill", _String2="PROMPT") returned 4 [0043.205] _wcsicmp (_String1="taskkill", _String2="MD") returned 7 [0043.205] _wcsicmp (_String1="taskkill", _String2="MKDIR") returned 7 [0043.205] _wcsicmp (_String1="taskkill", _String2="RD") returned 2 [0043.205] _wcsicmp (_String1="taskkill", _String2="RMDIR") returned 2 [0043.205] _wcsicmp (_String1="taskkill", _String2="PATH") returned 4 [0043.205] _wcsicmp (_String1="taskkill", _String2="GOTO") returned 13 [0043.205] _wcsicmp (_String1="taskkill", _String2="SHIFT") returned 1 [0043.205] _wcsicmp (_String1="taskkill", _String2="CLS") returned 17 [0043.205] _wcsicmp (_String1="taskkill", _String2="CALL") returned 17 [0043.205] _wcsicmp (_String1="taskkill", _String2="VERIFY") returned -2 [0043.205] _wcsicmp (_String1="taskkill", _String2="VER") returned -2 [0043.205] _wcsicmp (_String1="taskkill", _String2="VOL") returned -2 [0043.205] _wcsicmp (_String1="taskkill", _String2="EXIT") returned 15 [0043.205] _wcsicmp (_String1="taskkill", _String2="SETLOCAL") returned 1 [0043.205] _wcsicmp (_String1="taskkill", _String2="ENDLOCAL") returned 15 [0043.205] _wcsicmp (_String1="taskkill", _String2="TITLE") returned -8 [0043.205] _wcsicmp (_String1="taskkill", _String2="START") returned 1 [0043.205] _wcsicmp (_String1="taskkill", _String2="DPATH") returned 16 [0043.205] _wcsicmp (_String1="taskkill", _String2="KEYS") returned 9 [0043.205] _wcsicmp (_String1="taskkill", _String2="MOVE") returned 7 [0043.205] _wcsicmp (_String1="taskkill", _String2="PUSHD") returned 4 [0043.206] _wcsicmp (_String1="taskkill", _String2="POPD") returned 4 [0043.206] _wcsicmp (_String1="taskkill", _String2="ASSOC") returned 19 [0043.206] _wcsicmp (_String1="taskkill", _String2="FTYPE") returned 14 [0043.206] _wcsicmp (_String1="taskkill", _String2="BREAK") returned 18 [0043.206] _wcsicmp (_String1="taskkill", _String2="COLOR") returned 17 [0043.206] _wcsicmp (_String1="taskkill", _String2="MKLINK") returned 7 [0043.206] _wcsicmp (_String1="taskkill", _String2="FOR") returned 14 [0043.206] _wcsicmp (_String1="taskkill", _String2="IF") returned 11 [0043.206] _wcsicmp (_String1="taskkill", _String2="REM") returned 2 [0043.206] GetProcessHeap () returned 0x220000 [0043.206] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x210) returned 0x233028 [0043.206] GetProcessHeap () returned 0x220000 [0043.206] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x3a) returned 0x233240 [0043.206] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17 [0043.207] GetProcessHeap () returned 0x220000 [0043.207] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x418) returned 0x2207f0 [0043.207] SetErrorMode (uMode=0x0) returned 0x8003 [0043.207] SetErrorMode (uMode=0x1) returned 0x0 [0043.207] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x2207f8, lpFilePart=0x43eff0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x43eff0*="Desktop") returned 0x25 [0043.207] SetErrorMode (uMode=0x8003) returned 0x1 [0043.207] GetProcessHeap () returned 0x220000 [0043.207] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x2207f0, Size=0x6e) returned 0x2207f0 [0043.207] GetProcessHeap () returned 0x220000 [0043.207] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x2207f0) returned 0x6e [0043.207] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0043.207] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0043.207] GetProcessHeap () returned 0x220000 [0043.207] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x120) returned 0x233288 [0043.207] GetProcessHeap () returned 0x220000 [0043.207] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x238) returned 0x220868 [0043.215] GetProcessHeap () returned 0x220000 [0043.215] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x220868, Size=0x122) returned 0x220868 [0043.215] GetProcessHeap () returned 0x220000 [0043.215] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x220868) returned 0x122 [0043.215] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0043.215] GetProcessHeap () returned 0x220000 [0043.215] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xe0) returned 0x2333b0 [0043.215] GetProcessHeap () returned 0x220000 [0043.215] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x2333b0, Size=0x76) returned 0x2333b0 [0043.215] GetProcessHeap () returned 0x220000 [0043.215] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x2333b0) returned 0x76 [0043.216] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0043.216] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.exe", fInfoLevelId=0x1, lpFindFileData=0x43ed8c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43ed8c) returned 0xffffffff [0043.216] GetLastError () returned 0x2 [0043.216] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.exe.*", fInfoLevelId=0x1, lpFindFileData=0x43ed6c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43ed6c) returned 0xffffffff [0043.216] GetLastError () returned 0x2 [0043.216] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\taskkill.exe", fInfoLevelId=0x1, lpFindFileData=0x43ed6c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43ed6c) returned 0xffffffff [0043.217] GetLastError () returned 0x2 [0043.217] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0043.217] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\taskkill.exe", fInfoLevelId=0x1, lpFindFileData=0x43ed8c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43ed8c) returned 0x233430 [0043.217] GetProcessHeap () returned 0x220000 [0043.217] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x14) returned 0x233470 [0043.217] FindClose (in: hFindFile=0x233430 | out: hFindFile=0x233430) returned 1 [0043.217] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0043.217] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0043.217] GetConsoleTitleW (in: lpConsoleTitle=0x43f264, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0043.217] InitializeProcThreadAttributeList (in: lpAttributeList=0x43f0ec, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x43f1b4 | out: lpAttributeList=0x43f0ec, lpSize=0x43f1b4) returned 1 [0043.217] UpdateProcThreadAttribute (in: lpAttributeList=0x43f0ec, dwFlags=0x0, Attribute=0x60001, lpValue=0x43f1ac, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x43f0ec, lpPreviousValue=0x0) returned 1 [0043.217] GetStartupInfoW (in: lpStartupInfo=0x43f0a8 | out: lpStartupInfo=0x43f0a8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xe0, hStdOutput=0xd8, hStdError=0xcc)) [0043.217] GetProcessHeap () returned 0x220000 [0043.217] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x18) returned 0x233430 [0043.217] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0043.218] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0043.219] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0043.219] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0043.219] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0043.219] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0043.219] GetProcessHeap () returned 0x220000 [0043.219] HeapFree (in: hHeap=0x220000, dwFlags=0x0, lpMem=0x233430 | out: hHeap=0x220000) returned 1 [0043.219] GetProcessHeap () returned 0x220000 [0043.219] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xa) returned 0x22fec8 [0043.219] lstrcmpW (lpString1="\\taskkill.exe", lpString2="\\XCOPY.EXE") returned -1 [0043.220] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\taskkill.exe", lpCommandLine="taskkill.exe /F /IM vm*", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x43f148*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="taskkill.exe /F /IM vm*", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x43f194 | out: lpCommandLine="taskkill.exe /F /IM vm*", lpProcessInformation=0x43f194*(hProcess=0x78, hThread=0x74, dwProcessId=0xb48, dwThreadId=0xb4c)) returned 1 [0043.225] CloseHandle (hObject=0x74) returned 1 [0043.225] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0043.225] GetProcessHeap () returned 0x220000 [0043.225] HeapFree (in: hHeap=0x220000, dwFlags=0x0, lpMem=0x235eb8 | out: hHeap=0x220000) returned 1 [0043.225] GetEnvironmentStringsW () returned 0x235eb8* [0043.225] GetProcessHeap () returned 0x220000 [0043.225] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xb36) returned 0x234078 [0043.225] FreeEnvironmentStringsW (penv=0x235eb8) returned 1 [0043.225] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0 [0044.011] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x43f088 | out: lpExitCode=0x43f088*=0x80) returned 1 [0044.012] CloseHandle (hObject=0x78) returned 1 [0044.012] _vsnwprintf (in: _Buffer=0x43f1d0, _BufferCount=0x13, _Format="%08X", _ArgList=0x43f094 | out: _Buffer="00000080") returned 8 [0044.012] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000080") returned 1 [0044.012] GetProcessHeap () returned 0x220000 [0044.013] HeapFree (in: hHeap=0x220000, dwFlags=0x0, lpMem=0x234078 | out: hHeap=0x220000) returned 1 [0044.013] GetEnvironmentStringsW () returned 0x234078* [0044.014] GetProcessHeap () returned 0x220000 [0044.014] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xb5c) returned 0x239560 [0044.014] FreeEnvironmentStringsW (penv=0x234078) returned 1 [0044.014] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0044.014] GetProcessHeap () returned 0x220000 [0044.014] HeapFree (in: hHeap=0x220000, dwFlags=0x0, lpMem=0x239560 | out: hHeap=0x220000) returned 1 [0044.014] GetEnvironmentStringsW () returned 0x234078* [0044.015] GetProcessHeap () returned 0x220000 [0044.015] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xb5c) returned 0x239560 [0044.015] FreeEnvironmentStringsW (penv=0x234078) returned 1 [0044.015] GetProcessHeap () returned 0x220000 [0044.015] HeapFree (in: hHeap=0x220000, dwFlags=0x0, lpMem=0x22fec8 | out: hHeap=0x220000) returned 1 [0044.015] DeleteProcThreadAttributeList (in: lpAttributeList=0x43f0ec | out: lpAttributeList=0x43f0ec) [0044.018] _get_osfhandle (_FileHandle=1) returned 0xd8 [0044.018] SetConsoleMode (hConsoleHandle=0xd8, dwMode=0x0) returned 0 [0044.018] _get_osfhandle (_FileHandle=1) returned 0xd8 [0044.018] GetConsoleMode (in: hConsoleHandle=0xd8, lpMode=0x4a2341ac | out: lpMode=0x4a2341ac) returned 0 [0044.018] _get_osfhandle (_FileHandle=0) returned 0xe0 [0044.018] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x4a2341b0 | out: lpMode=0x4a2341b0) returned 0 [0044.019] GetConsoleOutputCP () returned 0x1b5 [0044.019] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0044.019] SetThreadUILanguage (LangId=0x0) returned 0x409 [0044.019] exit (_Code=128) Process: id = "16" image_name = "taskkill.exe" filename = "c:\\windows\\syswow64\\taskkill.exe" page_root = "0x4e808000" os_pid = "0xb48" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0xb40" cmd_line = "taskkill.exe /F /IM vm*" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 98 os_tid = 0xb4c Thread: id = 100 os_tid = 0xb58 Thread: id = 101 os_tid = 0xb5c Thread: id = 103 os_tid = 0xb64 Thread: id = 104 os_tid = 0xb68 Process: id = "17" image_name = "wmiprvse.exe" filename = "c:\\windows\\syswow64\\wbem\\wmiprvse.exe" page_root = "0x4f01a000" os_pid = "0xb50" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0x36c" cmd_line = "C:\\Windows\\sysWOW64\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:00079938" [0xc000000f] Thread: id = 99 os_tid = 0xb54 Thread: id = 102 os_tid = 0xb60 Thread: id = 105 os_tid = 0xb6c Thread: id = 106 os_tid = 0xb70 Thread: id = 107 os_tid = 0xb74 Thread: id = 108 os_tid = 0xb78 Thread: id = 109 os_tid = 0xb7c Thread: id = 149 os_tid = 0xbfc Thread: id = 154 os_tid = 0x83c Thread: id = 168 os_tid = 0x81c Process: id = "18" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x4eb2d000" os_pid = "0xb84" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x980" cmd_line = "cmd.exe /C WMIC PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 110 os_tid = 0xb88 [0044.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x31fea4 | out: lpSystemTimeAsFileTime=0x31fea4*(dwLowDateTime=0xcdbe6d40, dwHighDateTime=0x1d5793e)) [0044.133] GetCurrentProcessId () returned 0xb84 [0044.133] GetCurrentThreadId () returned 0xb88 [0044.133] GetTickCount () returned 0x11444ce [0044.133] QueryPerformanceCounter (in: lpPerformanceCount=0x31fe9c | out: lpPerformanceCount=0x31fe9c*=16441802881) returned 1 [0044.134] GetModuleHandleA (lpModuleName=0x0) returned 0x4a210000 [0044.134] __set_app_type (_Type=0x1) [0044.134] __p__fmode () returned 0x74eb31f4 [0044.135] __p__commode () returned 0x74eb31fc [0044.135] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a2321a6) returned 0x0 [0044.135] __getmainargs (in: _Argc=0x4a234238, _Argv=0x4a234240, _Env=0x4a23423c, _DoWildCard=0, _StartInfo=0x4a234140 | out: _Argc=0x4a234238, _Argv=0x4a234240, _Env=0x4a23423c) returned 0 [0044.135] GetCurrentThreadId () returned 0xb88 [0044.135] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xb88) returned 0x60 [0044.135] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0044.135] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f [0044.135] SetThreadUILanguage (LangId=0x0) returned 0x409 [0044.136] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0044.136] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x31fe34 | out: phkResult=0x31fe34*=0x0) returned 0x2 [0044.136] VirtualQuery (in: lpAddress=0x31fe6b, lpBuffer=0x31fe04, dwLength=0x1c | out: lpBuffer=0x31fe04*(BaseAddress=0x31f000, AllocationBase=0x220000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0044.136] VirtualQuery (in: lpAddress=0x220000, lpBuffer=0x31fe04, dwLength=0x1c | out: lpBuffer=0x31fe04*(BaseAddress=0x220000, AllocationBase=0x220000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0044.136] VirtualQuery (in: lpAddress=0x221000, lpBuffer=0x31fe04, dwLength=0x1c | out: lpBuffer=0x31fe04*(BaseAddress=0x221000, AllocationBase=0x220000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0044.136] VirtualQuery (in: lpAddress=0x223000, lpBuffer=0x31fe04, dwLength=0x1c | out: lpBuffer=0x31fe04*(BaseAddress=0x223000, AllocationBase=0x220000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0044.136] VirtualQuery (in: lpAddress=0x320000, lpBuffer=0x31fe04, dwLength=0x1c | out: lpBuffer=0x31fe04*(BaseAddress=0x320000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x50000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0044.136] GetConsoleOutputCP () returned 0x1b5 [0044.136] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0044.136] SetConsoleCtrlHandler (HandlerRoutine=0x4a22e72a, Add=1) returned 1 [0044.136] _get_osfhandle (_FileHandle=1) returned 0xe0 [0044.136] SetConsoleMode (hConsoleHandle=0xe0, dwMode=0x0) returned 0 [0044.136] _get_osfhandle (_FileHandle=1) returned 0xe0 [0044.136] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x4a2341ac | out: lpMode=0x4a2341ac) returned 0 [0044.137] _get_osfhandle (_FileHandle=0) returned 0xe4 [0044.137] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x4a2341b0 | out: lpMode=0x4a2341b0) returned 0 [0044.137] GetEnvironmentStringsW () returned 0x382058* [0044.137] GetProcessHeap () returned 0x370000 [0044.137] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0xaca) returned 0x382b30 [0044.137] FreeEnvironmentStringsW (penv=0x382058) returned 1 [0044.137] GetProcessHeap () returned 0x370000 [0044.137] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x4) returned 0x380c90 [0044.137] GetEnvironmentStringsW () returned 0x382058* [0044.137] GetProcessHeap () returned 0x370000 [0044.137] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0xaca) returned 0x383608 [0044.137] FreeEnvironmentStringsW (penv=0x382058) returned 1 [0044.137] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x31eda4 | out: phkResult=0x31eda4*=0x68) returned 0x0 [0044.138] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x31edac, lpData=0x31edb0, lpcbData=0x31eda8*=0x1000 | out: lpType=0x31edac*=0x0, lpData=0x31edb0*=0x0, lpcbData=0x31eda8*=0x1000) returned 0x2 [0044.138] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x31edac, lpData=0x31edb0, lpcbData=0x31eda8*=0x1000 | out: lpType=0x31edac*=0x4, lpData=0x31edb0*=0x1, lpcbData=0x31eda8*=0x4) returned 0x0 [0044.138] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x31edac, lpData=0x31edb0, lpcbData=0x31eda8*=0x1000 | out: lpType=0x31edac*=0x0, lpData=0x31edb0*=0x1, lpcbData=0x31eda8*=0x1000) returned 0x2 [0044.138] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x31edac, lpData=0x31edb0, lpcbData=0x31eda8*=0x1000 | out: lpType=0x31edac*=0x4, lpData=0x31edb0*=0x0, lpcbData=0x31eda8*=0x4) returned 0x0 [0044.138] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x31edac, lpData=0x31edb0, lpcbData=0x31eda8*=0x1000 | out: lpType=0x31edac*=0x4, lpData=0x31edb0*=0x40, lpcbData=0x31eda8*=0x4) returned 0x0 [0044.138] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x31edac, lpData=0x31edb0, lpcbData=0x31eda8*=0x1000 | out: lpType=0x31edac*=0x4, lpData=0x31edb0*=0x40, lpcbData=0x31eda8*=0x4) returned 0x0 [0044.138] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x31edac, lpData=0x31edb0, lpcbData=0x31eda8*=0x1000 | out: lpType=0x31edac*=0x0, lpData=0x31edb0*=0x40, lpcbData=0x31eda8*=0x1000) returned 0x2 [0044.138] RegCloseKey (hKey=0x68) returned 0x0 [0044.138] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x31eda4 | out: phkResult=0x31eda4*=0x68) returned 0x0 [0044.138] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x31edac, lpData=0x31edb0, lpcbData=0x31eda8*=0x1000 | out: lpType=0x31edac*=0x0, lpData=0x31edb0*=0x40, lpcbData=0x31eda8*=0x1000) returned 0x2 [0044.138] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x31edac, lpData=0x31edb0, lpcbData=0x31eda8*=0x1000 | out: lpType=0x31edac*=0x4, lpData=0x31edb0*=0x1, lpcbData=0x31eda8*=0x4) returned 0x0 [0044.138] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x31edac, lpData=0x31edb0, lpcbData=0x31eda8*=0x1000 | out: lpType=0x31edac*=0x0, lpData=0x31edb0*=0x1, lpcbData=0x31eda8*=0x1000) returned 0x2 [0044.138] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x31edac, lpData=0x31edb0, lpcbData=0x31eda8*=0x1000 | out: lpType=0x31edac*=0x4, lpData=0x31edb0*=0x0, lpcbData=0x31eda8*=0x4) returned 0x0 [0044.138] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x31edac, lpData=0x31edb0, lpcbData=0x31eda8*=0x1000 | out: lpType=0x31edac*=0x4, lpData=0x31edb0*=0x9, lpcbData=0x31eda8*=0x4) returned 0x0 [0044.138] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x31edac, lpData=0x31edb0, lpcbData=0x31eda8*=0x1000 | out: lpType=0x31edac*=0x4, lpData=0x31edb0*=0x9, lpcbData=0x31eda8*=0x4) returned 0x0 [0044.138] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x31edac, lpData=0x31edb0, lpcbData=0x31eda8*=0x1000 | out: lpType=0x31edac*=0x0, lpData=0x31edb0*=0x9, lpcbData=0x31eda8*=0x1000) returned 0x2 [0044.138] RegCloseKey (hKey=0x68) returned 0x0 [0044.138] time (in: timer=0x0 | out: timer=0x0) returned 0x5d94d0d0 [0044.138] srand (_Seed=0x5d94d0d0) [0044.138] GetCommandLineW () returned="cmd.exe /C WMIC PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128" [0044.138] GetCommandLineW () returned="cmd.exe /C WMIC PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128" [0044.139] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a235260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0044.139] GetProcessHeap () returned 0x370000 [0044.139] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x210) returned 0x382058 [0044.139] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x382060, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0044.139] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0044.139] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0044.139] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0044.139] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0044.139] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0044.139] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0044.139] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0044.139] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0044.139] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0044.139] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0044.139] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0044.139] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0044.140] GetProcessHeap () returned 0x370000 [0044.140] HeapFree (in: hHeap=0x370000, dwFlags=0x0, lpMem=0x382b30 | out: hHeap=0x370000) returned 1 [0044.140] GetEnvironmentStringsW () returned 0x382270* [0044.140] GetProcessHeap () returned 0x370000 [0044.140] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0xae2) returned 0x384bd0 [0044.140] FreeEnvironmentStringsW (penv=0x382270) returned 1 [0044.140] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0044.140] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0044.140] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0044.140] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0044.140] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0044.140] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0044.140] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0044.140] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0044.140] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0044.140] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0044.140] GetProcessHeap () returned 0x370000 [0044.140] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x54) returned 0x3856c0 [0044.140] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x31fb70 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0044.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x31fb70, lpFilePart=0x31fb6c | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x31fb6c*="Desktop") returned 0x25 [0044.140] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0044.140] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x31f8ec | out: lpFindFileData=0x31f8ec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x381ed8 [0044.141] FindClose (in: hFindFile=0x381ed8 | out: hFindFile=0x381ed8) returned 1 [0044.141] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x31f8ec | out: lpFindFileData=0x31f8ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x381ed8 [0044.141] FindClose (in: hFindFile=0x381ed8 | out: hFindFile=0x381ed8) returned 1 [0044.141] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20 [0044.141] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x31f8ec | out: lpFindFileData=0x31f8ec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc46c41e0, ftLastAccessTime.dwHighDateTime=0x1d5793e, ftLastWriteTime.dwLowDateTime=0xc46c41e0, ftLastWriteTime.dwHighDateTime=0x1d5793e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x381ed8 [0044.141] FindClose (in: hFindFile=0x381ed8 | out: hFindFile=0x381ed8) returned 1 [0044.141] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11 [0044.141] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1 [0044.141] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0044.141] GetProcessHeap () returned 0x370000 [0044.141] HeapFree (in: hHeap=0x370000, dwFlags=0x0, lpMem=0x384bd0 | out: hHeap=0x370000) returned 1 [0044.141] GetEnvironmentStringsW () returned 0x3840e0* [0044.141] GetProcessHeap () returned 0x370000 [0044.141] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0xb36) returned 0x385f20 [0044.141] FreeEnvironmentStringsW (penv=0x3840e0) returned 1 [0044.141] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a235260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25 [0044.141] GetProcessHeap () returned 0x370000 [0044.142] HeapFree (in: hHeap=0x370000, dwFlags=0x0, lpMem=0x3856c0 | out: hHeap=0x370000) returned 1 [0044.142] GetProcessHeap () returned 0x370000 [0044.142] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x400e) returned 0x386a60 [0044.142] GetProcessHeap () returned 0x370000 [0044.142] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x7e) returned 0x382db0 [0044.142] GetProcessHeap () returned 0x370000 [0044.142] HeapFree (in: hHeap=0x370000, dwFlags=0x0, lpMem=0x386a60 | out: hHeap=0x370000) returned 1 [0044.142] GetConsoleOutputCP () returned 0x1b5 [0044.142] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0044.142] GetUserDefaultLCID () returned 0x409 [0044.143] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a234950, cchData=8 | out: lpLCData=":") returned 2 [0044.143] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x31fcb0, cchData=128 | out: lpLCData="0") returned 2 [0044.143] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x31fcb0, cchData=128 | out: lpLCData="0") returned 2 [0044.143] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x31fcb0, cchData=128 | out: lpLCData="1") returned 2 [0044.143] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a234940, cchData=8 | out: lpLCData="/") returned 2 [0044.143] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a234d80, cchData=32 | out: lpLCData="Mon") returned 4 [0044.143] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a234d40, cchData=32 | out: lpLCData="Tue") returned 4 [0044.143] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a234d00, cchData=32 | out: lpLCData="Wed") returned 4 [0044.143] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a234cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0044.143] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a234c80, cchData=32 | out: lpLCData="Fri") returned 4 [0044.144] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a234c40, cchData=32 | out: lpLCData="Sat") returned 4 [0044.144] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a234c00, cchData=32 | out: lpLCData="Sun") returned 4 [0044.144] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a234930, cchData=8 | out: lpLCData=".") returned 2 [0044.144] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a234920, cchData=8 | out: lpLCData=",") returned 2 [0044.144] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0044.145] GetProcessHeap () returned 0x370000 [0044.145] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x0, Size=0x20c) returned 0x382e38 [0044.145] GetConsoleTitleW (in: lpConsoleTitle=0x382e38, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0044.145] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0044.145] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileExW") returned 0x76c53b92 [0044.145] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0044.145] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleInputExeNameW") returned 0x76c4a79d [0044.146] GetProcessHeap () returned 0x370000 [0044.146] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x400a) returned 0x386a60 [0044.146] GetProcessHeap () returned 0x370000 [0044.146] HeapFree (in: hHeap=0x370000, dwFlags=0x0, lpMem=0x386a60 | out: hHeap=0x370000) returned 1 [0044.146] _wcsicmp (_String1="WMIC", _String2=")") returned 78 [0044.146] _wcsicmp (_String1="FOR", _String2="WMIC") returned -17 [0044.146] _wcsicmp (_String1="FOR/?", _String2="WMIC") returned -17 [0044.146] _wcsicmp (_String1="IF", _String2="WMIC") returned -14 [0044.146] _wcsicmp (_String1="IF/?", _String2="WMIC") returned -14 [0044.146] _wcsicmp (_String1="REM", _String2="WMIC") returned -5 [0044.146] _wcsicmp (_String1="REM/?", _String2="WMIC") returned -5 [0044.146] GetProcessHeap () returned 0x370000 [0044.146] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x58) returned 0x383050 [0044.146] GetProcessHeap () returned 0x370000 [0044.146] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x12) returned 0x3830b0 [0044.147] GetProcessHeap () returned 0x370000 [0044.147] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x72) returned 0x386a78 [0044.148] GetConsoleTitleW (in: lpConsoleTitle=0x31f9a8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0044.148] _wcsicmp (_String1="WMIC", _String2="DIR") returned 19 [0044.148] _wcsicmp (_String1="WMIC", _String2="ERASE") returned 18 [0044.148] _wcsicmp (_String1="WMIC", _String2="DEL") returned 19 [0044.149] _wcsicmp (_String1="WMIC", _String2="TYPE") returned 3 [0044.149] _wcsicmp (_String1="WMIC", _String2="COPY") returned 20 [0044.149] _wcsicmp (_String1="WMIC", _String2="CD") returned 20 [0044.149] _wcsicmp (_String1="WMIC", _String2="CHDIR") returned 20 [0044.149] _wcsicmp (_String1="WMIC", _String2="RENAME") returned 5 [0044.149] _wcsicmp (_String1="WMIC", _String2="REN") returned 5 [0044.149] _wcsicmp (_String1="WMIC", _String2="ECHO") returned 18 [0044.149] _wcsicmp (_String1="WMIC", _String2="SET") returned 4 [0044.149] _wcsicmp (_String1="WMIC", _String2="PAUSE") returned 7 [0044.149] _wcsicmp (_String1="WMIC", _String2="DATE") returned 19 [0044.149] _wcsicmp (_String1="WMIC", _String2="TIME") returned 3 [0044.149] _wcsicmp (_String1="WMIC", _String2="PROMPT") returned 7 [0044.149] _wcsicmp (_String1="WMIC", _String2="MD") returned 10 [0044.149] _wcsicmp (_String1="WMIC", _String2="MKDIR") returned 10 [0044.149] _wcsicmp (_String1="WMIC", _String2="RD") returned 5 [0044.149] _wcsicmp (_String1="WMIC", _String2="RMDIR") returned 5 [0044.149] _wcsicmp (_String1="WMIC", _String2="PATH") returned 7 [0044.149] _wcsicmp (_String1="WMIC", _String2="GOTO") returned 16 [0044.149] _wcsicmp (_String1="WMIC", _String2="SHIFT") returned 4 [0044.149] _wcsicmp (_String1="WMIC", _String2="CLS") returned 20 [0044.149] _wcsicmp (_String1="WMIC", _String2="CALL") returned 20 [0044.149] _wcsicmp (_String1="WMIC", _String2="VERIFY") returned 1 [0044.149] _wcsicmp (_String1="WMIC", _String2="VER") returned 1 [0044.149] _wcsicmp (_String1="WMIC", _String2="VOL") returned 1 [0044.149] _wcsicmp (_String1="WMIC", _String2="EXIT") returned 18 [0044.149] _wcsicmp (_String1="WMIC", _String2="SETLOCAL") returned 4 [0044.149] _wcsicmp (_String1="WMIC", _String2="ENDLOCAL") returned 18 [0044.149] _wcsicmp (_String1="WMIC", _String2="TITLE") returned 3 [0044.149] _wcsicmp (_String1="WMIC", _String2="START") returned 4 [0044.149] _wcsicmp (_String1="WMIC", _String2="DPATH") returned 19 [0044.149] _wcsicmp (_String1="WMIC", _String2="KEYS") returned 12 [0044.149] _wcsicmp (_String1="WMIC", _String2="MOVE") returned 10 [0044.149] _wcsicmp (_String1="WMIC", _String2="PUSHD") returned 7 [0044.149] _wcsicmp (_String1="WMIC", _String2="POPD") returned 7 [0044.149] _wcsicmp (_String1="WMIC", _String2="ASSOC") returned 22 [0044.150] _wcsicmp (_String1="WMIC", _String2="FTYPE") returned 17 [0044.150] _wcsicmp (_String1="WMIC", _String2="BREAK") returned 21 [0044.150] _wcsicmp (_String1="WMIC", _String2="COLOR") returned 20 [0044.150] _wcsicmp (_String1="WMIC", _String2="MKLINK") returned 10 [0044.150] _wcsicmp (_String1="WMIC", _String2="DIR") returned 19 [0044.150] _wcsicmp (_String1="WMIC", _String2="ERASE") returned 18 [0044.150] _wcsicmp (_String1="WMIC", _String2="DEL") returned 19 [0044.150] _wcsicmp (_String1="WMIC", _String2="TYPE") returned 3 [0044.150] _wcsicmp (_String1="WMIC", _String2="COPY") returned 20 [0044.150] _wcsicmp (_String1="WMIC", _String2="CD") returned 20 [0044.150] _wcsicmp (_String1="WMIC", _String2="CHDIR") returned 20 [0044.150] _wcsicmp (_String1="WMIC", _String2="RENAME") returned 5 [0044.150] _wcsicmp (_String1="WMIC", _String2="REN") returned 5 [0044.150] _wcsicmp (_String1="WMIC", _String2="ECHO") returned 18 [0044.150] _wcsicmp (_String1="WMIC", _String2="SET") returned 4 [0044.150] _wcsicmp (_String1="WMIC", _String2="PAUSE") returned 7 [0044.150] _wcsicmp (_String1="WMIC", _String2="DATE") returned 19 [0044.150] _wcsicmp (_String1="WMIC", _String2="TIME") returned 3 [0044.150] _wcsicmp (_String1="WMIC", _String2="PROMPT") returned 7 [0044.150] _wcsicmp (_String1="WMIC", _String2="MD") returned 10 [0044.150] _wcsicmp (_String1="WMIC", _String2="MKDIR") returned 10 [0044.150] _wcsicmp (_String1="WMIC", _String2="RD") returned 5 [0044.150] _wcsicmp (_String1="WMIC", _String2="RMDIR") returned 5 [0044.150] _wcsicmp (_String1="WMIC", _String2="PATH") returned 7 [0044.150] _wcsicmp (_String1="WMIC", _String2="GOTO") returned 16 [0044.150] _wcsicmp (_String1="WMIC", _String2="SHIFT") returned 4 [0044.150] _wcsicmp (_String1="WMIC", _String2="CLS") returned 20 [0044.150] _wcsicmp (_String1="WMIC", _String2="CALL") returned 20 [0044.150] _wcsicmp (_String1="WMIC", _String2="VERIFY") returned 1 [0044.150] _wcsicmp (_String1="WMIC", _String2="VER") returned 1 [0044.150] _wcsicmp (_String1="WMIC", _String2="VOL") returned 1 [0044.150] _wcsicmp (_String1="WMIC", _String2="EXIT") returned 18 [0044.150] _wcsicmp (_String1="WMIC", _String2="SETLOCAL") returned 4 [0044.150] _wcsicmp (_String1="WMIC", _String2="ENDLOCAL") returned 18 [0044.150] _wcsicmp (_String1="WMIC", _String2="TITLE") returned 3 [0044.151] _wcsicmp (_String1="WMIC", _String2="START") returned 4 [0044.151] _wcsicmp (_String1="WMIC", _String2="DPATH") returned 19 [0044.151] _wcsicmp (_String1="WMIC", _String2="KEYS") returned 12 [0044.151] _wcsicmp (_String1="WMIC", _String2="MOVE") returned 10 [0044.151] _wcsicmp (_String1="WMIC", _String2="PUSHD") returned 7 [0044.151] _wcsicmp (_String1="WMIC", _String2="POPD") returned 7 [0044.151] _wcsicmp (_String1="WMIC", _String2="ASSOC") returned 22 [0044.151] _wcsicmp (_String1="WMIC", _String2="FTYPE") returned 17 [0044.151] _wcsicmp (_String1="WMIC", _String2="BREAK") returned 21 [0044.151] _wcsicmp (_String1="WMIC", _String2="COLOR") returned 20 [0044.151] _wcsicmp (_String1="WMIC", _String2="MKLINK") returned 10 [0044.151] _wcsicmp (_String1="WMIC", _String2="FOR") returned 17 [0044.151] _wcsicmp (_String1="WMIC", _String2="IF") returned 14 [0044.151] _wcsicmp (_String1="WMIC", _String2="REM") returned 5 [0044.151] GetProcessHeap () returned 0x370000 [0044.151] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x210) returned 0x3830d0 [0044.151] GetProcessHeap () returned 0x370000 [0044.151] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x7c) returned 0x3832e8 [0044.151] _wcsnicmp (_String1="WMIC", _String2="cmd ", _MaxCount=0x4) returned 20 [0044.151] GetProcessHeap () returned 0x370000 [0044.151] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x418) returned 0x3707f0 [0044.151] SetErrorMode (uMode=0x0) returned 0x8003 [0044.153] SetErrorMode (uMode=0x1) returned 0x0 [0044.153] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x3707f8, lpFilePart=0x31f4c8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x31f4c8*="Desktop") returned 0x25 [0044.153] SetErrorMode (uMode=0x8003) returned 0x1 [0044.153] GetProcessHeap () returned 0x370000 [0044.153] RtlReAllocateHeap (Heap=0x370000, Flags=0x0, Ptr=0x3707f0, Size=0x5e) returned 0x3707f0 [0044.153] GetProcessHeap () returned 0x370000 [0044.153] RtlSizeHeap (HeapHandle=0x370000, Flags=0x0, MemoryPointer=0x3707f0) returned 0x5e [0044.153] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0044.153] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0044.153] GetProcessHeap () returned 0x370000 [0044.153] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x120) returned 0x383370 [0044.153] GetProcessHeap () returned 0x370000 [0044.153] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x238) returned 0x370858 [0044.160] GetProcessHeap () returned 0x370000 [0044.160] RtlReAllocateHeap (Heap=0x370000, Flags=0x0, Ptr=0x370858, Size=0x122) returned 0x370858 [0044.160] GetProcessHeap () returned 0x370000 [0044.160] RtlSizeHeap (HeapHandle=0x370000, Flags=0x0, MemoryPointer=0x370858) returned 0x122 [0044.160] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a240640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0044.160] GetProcessHeap () returned 0x370000 [0044.160] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0xe0) returned 0x383498 [0044.160] GetProcessHeap () returned 0x370000 [0044.160] RtlReAllocateHeap (Heap=0x370000, Flags=0x0, Ptr=0x383498, Size=0x76) returned 0x383498 [0044.160] GetProcessHeap () returned 0x370000 [0044.160] RtlSizeHeap (HeapHandle=0x370000, Flags=0x0, MemoryPointer=0x383498) returned 0x76 [0044.161] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0044.161] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WMIC.*", fInfoLevelId=0x1, lpFindFileData=0x31f244, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31f244) returned 0xffffffff [0044.161] GetLastError () returned 0x2 [0044.161] FindFirstFileExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WMIC", fInfoLevelId=0x1, lpFindFileData=0x31f244, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31f244) returned 0xffffffff [0044.162] GetLastError () returned 0x2 [0044.162] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0044.162] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\WMIC.*", fInfoLevelId=0x1, lpFindFileData=0x31f244, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31f244) returned 0xffffffff [0044.162] GetLastError () returned 0x2 [0044.162] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\WMIC", fInfoLevelId=0x1, lpFindFileData=0x31f244, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31f244) returned 0xffffffff [0044.162] GetLastError () returned 0x2 [0044.162] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0044.162] FindFirstFileExW (in: lpFileName="C:\\Windows\\WMIC.*", fInfoLevelId=0x1, lpFindFileData=0x31f244, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31f244) returned 0xffffffff [0044.162] GetLastError () returned 0x2 [0044.162] FindFirstFileExW (in: lpFileName="C:\\Windows\\WMIC", fInfoLevelId=0x1, lpFindFileData=0x31f244, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31f244) returned 0xffffffff [0044.162] GetLastError () returned 0x2 [0044.162] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0044.163] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\Wbem\\WMIC.*", fInfoLevelId=0x1, lpFindFileData=0x31f244, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31f244) returned 0x383518 [0044.163] GetProcessHeap () returned 0x370000 [0044.163] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x0, Size=0x14) returned 0x383558 [0044.163] FindClose (in: hFindFile=0x383518 | out: hFindFile=0x383518) returned 1 [0044.163] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\Wbem\\WMIC.COM", fInfoLevelId=0x1, lpFindFileData=0x31f244, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31f244) returned 0xffffffff [0044.163] GetLastError () returned 0x2 [0044.163] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\Wbem\\WMIC.EXE", fInfoLevelId=0x1, lpFindFileData=0x31f244, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x31f244) returned 0x383518 [0044.163] GetProcessHeap () returned 0x370000 [0044.163] RtlReAllocateHeap (Heap=0x370000, Flags=0x0, Ptr=0x383558, Size=0x4) returned 0x383558 [0044.163] FindClose (in: hFindFile=0x383518 | out: hFindFile=0x383518) returned 1 [0044.163] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0044.163] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0044.163] GetConsoleTitleW (in: lpConsoleTitle=0x31f73c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sam.exe") returned 0x2d [0044.163] InitializeProcThreadAttributeList (in: lpAttributeList=0x31f5c4, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x31f68c | out: lpAttributeList=0x31f5c4, lpSize=0x31f68c) returned 1 [0044.163] UpdateProcThreadAttribute (in: lpAttributeList=0x31f5c4, dwFlags=0x0, Attribute=0x60001, lpValue=0x31f684, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x31f5c4, lpPreviousValue=0x0) returned 1 [0044.163] GetStartupInfoW (in: lpStartupInfo=0x31f580 | out: lpStartupInfo=0x31f580*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xe4, hStdOutput=0xe0, hStdError=0xd8)) [0044.164] GetProcessHeap () returned 0x370000 [0044.164] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0x18) returned 0x383518 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0044.164] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0044.165] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0044.165] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0044.165] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0044.165] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0044.165] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0044.165] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0044.165] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0044.165] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0044.165] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0044.165] GetProcessHeap () returned 0x370000 [0044.165] HeapFree (in: hHeap=0x370000, dwFlags=0x0, lpMem=0x383518 | out: hHeap=0x370000) returned 1 [0044.165] GetProcessHeap () returned 0x370000 [0044.165] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0xa) returned 0x37ff30 [0044.165] lstrcmpW (lpString1="\\WMIC.exe", lpString2="\\XCOPY.EXE") returned -1 [0044.167] CreateProcessW (in: lpApplicationName="C:\\Windows\\System32\\Wbem\\WMIC.exe", lpCommandLine="WMIC PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStartupInfo=0x31f620*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="WMIC PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x31f66c | out: lpCommandLine="WMIC PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128", lpProcessInformation=0x31f66c*(hProcess=0x78, hThread=0x74, dwProcessId=0xb8c, dwThreadId=0xb90)) returned 1 [0044.171] CloseHandle (hObject=0x74) returned 1 [0044.171] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0044.171] GetProcessHeap () returned 0x370000 [0044.171] HeapFree (in: hHeap=0x370000, dwFlags=0x0, lpMem=0x385f20 | out: hHeap=0x370000) returned 1 [0044.171] GetEnvironmentStringsW () returned 0x385f20* [0044.171] GetProcessHeap () returned 0x370000 [0044.171] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0xb36) returned 0x3840e0 [0044.171] FreeEnvironmentStringsW (penv=0x385f20) returned 1 [0044.171] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0 [0045.539] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x31f560 | out: lpExitCode=0x31f560*=0x80041017) returned 1 [0045.539] CloseHandle (hObject=0x78) returned 1 [0045.539] _vsnwprintf (in: _Buffer=0x31f6a8, _BufferCount=0x13, _Format="%08X", _ArgList=0x31f56c | out: _Buffer="80041017") returned 8 [0045.539] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="80041017") returned 1 [0045.539] GetProcessHeap () returned 0x370000 [0045.539] HeapFree (in: hHeap=0x370000, dwFlags=0x0, lpMem=0x3840e0 | out: hHeap=0x370000) returned 1 [0045.539] GetEnvironmentStringsW () returned 0x3840e0* [0045.539] GetProcessHeap () returned 0x370000 [0045.539] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0xb5c) returned 0x3895c8 [0045.539] FreeEnvironmentStringsW (penv=0x3840e0) returned 1 [0045.539] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0045.539] GetProcessHeap () returned 0x370000 [0045.539] HeapFree (in: hHeap=0x370000, dwFlags=0x0, lpMem=0x3895c8 | out: hHeap=0x370000) returned 1 [0045.539] GetEnvironmentStringsW () returned 0x3840e0* [0045.540] GetProcessHeap () returned 0x370000 [0045.540] RtlAllocateHeap (HeapHandle=0x370000, Flags=0x8, Size=0xb5c) returned 0x3895c8 [0045.540] FreeEnvironmentStringsW (penv=0x3840e0) returned 1 [0045.540] GetProcessHeap () returned 0x370000 [0045.540] HeapFree (in: hHeap=0x370000, dwFlags=0x0, lpMem=0x37ff30 | out: hHeap=0x370000) returned 1 [0045.540] DeleteProcThreadAttributeList (in: lpAttributeList=0x31f5c4 | out: lpAttributeList=0x31f5c4) [0045.540] _get_osfhandle (_FileHandle=1) returned 0xe0 [0045.540] SetConsoleMode (hConsoleHandle=0xe0, dwMode=0x0) returned 0 [0045.540] _get_osfhandle (_FileHandle=1) returned 0xe0 [0045.540] GetConsoleMode (in: hConsoleHandle=0xe0, lpMode=0x4a2341ac | out: lpMode=0x4a2341ac) returned 0 [0045.540] _get_osfhandle (_FileHandle=0) returned 0xe4 [0045.540] GetConsoleMode (in: hConsoleHandle=0xe4, lpMode=0x4a2341b0 | out: lpMode=0x4a2341b0) returned 0 [0045.540] GetConsoleOutputCP () returned 0x1b5 [0045.540] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a234260 | out: lpCPInfo=0x4a234260) returned 1 [0045.540] SetThreadUILanguage (LangId=0x0) returned 0x409 [0045.540] exit (_Code=-2147217385) Process: id = "19" image_name = "wmic.exe" filename = "c:\\windows\\syswow64\\wbem\\wmic.exe" page_root = "0x4ea2d000" os_pid = "0xb8c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "18" os_parent_pid = "0xb84" cmd_line = "WMIC PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 111 os_tid = 0xb90 [0044.239] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x27fc08 | out: lpSystemTimeAsFileTime=0x27fc08*(dwLowDateTime=0xcdcdee00, dwHighDateTime=0x1d5793e)) [0044.239] GetCurrentProcessId () returned 0xb8c [0044.239] GetCurrentThreadId () returned 0xb90 [0044.239] GetTickCount () returned 0x114452b [0044.239] QueryPerformanceCounter (in: lpPerformanceCount=0x27fc00 | out: lpPerformanceCount=0x27fc00*=16452391872) returned 1 [0044.240] GetModuleHandleA (lpModuleName=0x0) returned 0x1a0000 [0044.240] __set_app_type (_Type=0x1) [0044.240] __p__fmode () returned 0x74eb31f4 [0044.240] __p__commode () returned 0x74eb31fc [0044.240] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1ddc15) returned 0x0 [0044.240] __wgetmainargs (in: _Argc=0x1ec5e8, _Argv=0x1ec5f0, _Env=0x1ec5ec, _DoWildCard=0, _StartInfo=0x1ec5fc | out: _Argc=0x1ec5e8, _Argv=0x1ec5f0, _Env=0x1ec5ec) returned 0 [0044.241] ??0CHString@@QAE@XZ () returned 0x1ec28c [0044.242] malloc (_Size=0x18) returned 0x313b8 [0044.242] malloc (_Size=0x38) returned 0x313d8 [0044.242] malloc (_Size=0x28) returned 0x33e58 [0044.242] malloc (_Size=0x18) returned 0x33e88 [0044.242] malloc (_Size=0x24) returned 0x33ea8 [0044.242] malloc (_Size=0x18) returned 0x33ed8 [0044.242] malloc (_Size=0x18) returned 0x33ef8 [0044.242] ??0CHString@@QAE@XZ () returned 0x1ec594 [0044.242] malloc (_Size=0x18) returned 0x33f18 [0044.242] ?Empty@CHString@@QAEXXZ () returned 0x74ab0504 [0044.242] SetConsoleCtrlHandler (HandlerRoutine=0x1d6b6f, Add=1) returned 1 [0044.242] _onexit (_Func=0x1e2f1f) returned 0x1e2f1f [0044.242] _onexit (_Func=0x1e2f2e) returned 0x1e2f2e [0044.243] _onexit (_Func=0x1e2f42) returned 0x1e2f42 [0044.243] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0044.243] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0044.244] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0044.263] CoCreateInstance (in: rclsid=0x1a6c60*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x1a6b90*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1ec1b0 | out: ppv=0x1ec1b0*=0x1cb0828) returned 0x0 [0044.273] GetCurrentProcess () returned 0xffffffff [0044.273] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x28, TokenHandle=0x27fab0 | out: TokenHandle=0x27fab0*=0x114) returned 1 [0044.273] GetTokenInformation (in: TokenHandle=0x114, TokenInformationClass=0x3, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x27faac | out: TokenInformation=0x0, ReturnLength=0x27faac) returned 0 [0044.273] malloc (_Size=0x118) returned 0x328a0 [0044.273] GetTokenInformation (in: TokenHandle=0x114, TokenInformationClass=0x3, TokenInformation=0x328a0, TokenInformationLength=0x118, ReturnLength=0x27faac | out: TokenInformation=0x328a0, ReturnLength=0x27faac) returned 1 [0044.273] AdjustTokenPrivileges (in: TokenHandle=0x114, DisableAllPrivileges=0, NewState=0x328a0*(PrivilegesCount=0x17, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x8, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x9, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xa, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xb, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xc, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xd, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xe, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xf, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x13, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x16, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x18, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x19, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x1c, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x1e, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x21, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x22, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x23, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0044.274] free (_Block=0x328a0) [0044.274] CloseHandle (hObject=0x114) returned 1 [0044.274] malloc (_Size=0x40) returned 0x328a0 [0044.274] malloc (_Size=0x40) returned 0x328e8 [0044.274] malloc (_Size=0x40) returned 0x32930 [0044.274] malloc (_Size=0x20a) returned 0x32978 [0044.274] GetSystemDirectoryW (in: lpBuffer=0x32978, uSize=0x105 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.274] free (_Block=0x32978) [0044.274] malloc (_Size=0xc) returned 0x33fc0 [0044.274] malloc (_Size=0xc) returned 0x32978 [0044.274] malloc (_Size=0xc) returned 0x32990 [0044.274] SysStringLen (param_1="C:\\Windows\\system32") returned 0x13 [0044.274] SysStringLen (param_1="\\kernel32.dll") returned 0xd [0044.274] free (_Block=0x33fc0) [0044.274] free (_Block=0x32978) [0044.274] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\kernel32.dll") returned 0x76c20000 [0044.275] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadUILanguage") returned 0x76c4a84f [0044.275] SetThreadUILanguage (LangId=0x0) returned 0x409 [0044.275] FreeLibrary (hLibModule=0x76c20000) returned 1 [0044.275] free (_Block=0x32990) [0044.275] _vsnwprintf (in: _Buffer=0x32930, _BufferCount=0x1f, _Format="ms_%x", _ArgList=0x27fa0c | out: _Buffer="ms_409") returned 6 [0044.276] malloc (_Size=0x20) returned 0x33fc0 [0044.276] GetComputerNameW (in: lpBuffer=0x33fc0, nSize=0x27fa64 | out: lpBuffer="XDUWTFONO", nSize=0x27fa64) returned 1 [0044.276] lstrlenW (lpString="XDUWTFONO") returned 9 [0044.276] malloc (_Size=0x14) returned 0x32978 [0044.276] lstrlenW (lpString="XDUWTFONO") returned 9 [0044.276] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x0, nSize=0x27faa0 | out: lpNameBuffer=0x0, nSize=0x27faa0) returned 0x0 [0044.277] GetLastError () returned 0xea [0044.277] malloc (_Size=0x40) returned 0x32998 [0044.277] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x32998, nSize=0x27faa0 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x27faa0) returned 0x1 [0044.277] lstrlenW (lpString="") returned 0 [0044.277] lstrlenW (lpString="XDUWTFONO") returned 9 [0044.277] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2="", cchCount2=0) returned 3 [0044.279] lstrlenW (lpString=".") returned 1 [0044.279] lstrlenW (lpString="XDUWTFONO") returned 9 [0044.279] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2=".", cchCount2=1) returned 3 [0044.279] lstrlenW (lpString="LOCALHOST") returned 9 [0044.279] lstrlenW (lpString="XDUWTFONO") returned 9 [0044.279] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2="LOCALHOST", cchCount2=9) returned 3 [0044.279] lstrlenW (lpString="XDUWTFONO") returned 9 [0044.279] lstrlenW (lpString="XDUWTFONO") returned 9 [0044.279] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2="XDUWTFONO", cchCount2=9) returned 2 [0044.279] free (_Block=0x32978) [0044.279] lstrlenW (lpString="XDUWTFONO") returned 9 [0044.279] malloc (_Size=0x14) returned 0x32978 [0044.279] lstrlenW (lpString="XDUWTFONO") returned 9 [0044.280] lstrlenW (lpString="XDUWTFONO") returned 9 [0044.280] malloc (_Size=0x14) returned 0x329e0 [0044.280] lstrlenW (lpString="XDUWTFONO") returned 9 [0044.280] malloc (_Size=0x4) returned 0x32a00 [0044.280] malloc (_Size=0xc) returned 0x32a10 [0044.280] malloc (_Size=0x18) returned 0x32a28 [0044.280] malloc (_Size=0xc) returned 0x32a48 [0044.280] SysStringLen (param_1="IDENTIFY") returned 0x8 [0044.280] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0044.280] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0044.280] SysStringLen (param_1="IDENTIFY") returned 0x8 [0044.280] malloc (_Size=0x18) returned 0x32a60 [0044.280] malloc (_Size=0xc) returned 0x32a80 [0044.280] SysStringLen (param_1="IMPERSONATE") returned 0xb [0044.280] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0044.280] SysStringLen (param_1="IMPERSONATE") returned 0xb [0044.280] SysStringLen (param_1="IDENTIFY") returned 0x8 [0044.280] SysStringLen (param_1="IDENTIFY") returned 0x8 [0044.280] SysStringLen (param_1="IMPERSONATE") returned 0xb [0044.280] malloc (_Size=0x18) returned 0x32a98 [0044.280] malloc (_Size=0xc) returned 0x32ab8 [0044.280] SysStringLen (param_1="DELEGATE") returned 0x8 [0044.280] SysStringLen (param_1="IDENTIFY") returned 0x8 [0044.281] SysStringLen (param_1="DELEGATE") returned 0x8 [0044.281] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0044.281] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0044.281] SysStringLen (param_1="DELEGATE") returned 0x8 [0044.281] malloc (_Size=0x18) returned 0x32ad0 [0044.281] malloc (_Size=0xc) returned 0x32af0 [0044.281] malloc (_Size=0x18) returned 0x32b08 [0044.281] malloc (_Size=0xc) returned 0x32b28 [0044.281] SysStringLen (param_1="NONE") returned 0x4 [0044.281] SysStringLen (param_1="DEFAULT") returned 0x7 [0044.281] SysStringLen (param_1="DEFAULT") returned 0x7 [0044.281] SysStringLen (param_1="NONE") returned 0x4 [0044.281] malloc (_Size=0x18) returned 0x32b40 [0044.281] malloc (_Size=0xc) returned 0x32b60 [0044.282] SysStringLen (param_1="CONNECT") returned 0x7 [0044.282] SysStringLen (param_1="DEFAULT") returned 0x7 [0044.282] malloc (_Size=0x18) returned 0x32b78 [0044.282] malloc (_Size=0xc) returned 0x32b98 [0044.282] SysStringLen (param_1="CALL") returned 0x4 [0044.282] SysStringLen (param_1="DEFAULT") returned 0x7 [0044.282] SysStringLen (param_1="CALL") returned 0x4 [0044.282] SysStringLen (param_1="CONNECT") returned 0x7 [0044.282] malloc (_Size=0x18) returned 0x3e868 [0044.282] malloc (_Size=0xc) returned 0x32fb0 [0044.283] SysStringLen (param_1="PKT") returned 0x3 [0044.283] SysStringLen (param_1="DEFAULT") returned 0x7 [0044.283] SysStringLen (param_1="PKT") returned 0x3 [0044.283] SysStringLen (param_1="NONE") returned 0x4 [0044.283] SysStringLen (param_1="NONE") returned 0x4 [0044.283] SysStringLen (param_1="PKT") returned 0x3 [0044.283] malloc (_Size=0x18) returned 0x3e888 [0044.283] malloc (_Size=0xc) returned 0x32fc8 [0044.283] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0044.283] SysStringLen (param_1="DEFAULT") returned 0x7 [0044.283] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0044.283] SysStringLen (param_1="NONE") returned 0x4 [0044.283] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0044.283] SysStringLen (param_1="PKT") returned 0x3 [0044.283] SysStringLen (param_1="PKT") returned 0x3 [0044.283] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0044.283] malloc (_Size=0x18) returned 0x3e8a8 [0044.283] malloc (_Size=0xc) returned 0x32fe0 [0044.283] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0044.283] SysStringLen (param_1="DEFAULT") returned 0x7 [0044.283] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0044.283] SysStringLen (param_1="PKT") returned 0x3 [0044.283] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0044.284] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0044.284] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0044.284] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0044.284] malloc (_Size=0x18) returned 0x3e8c8 [0044.284] malloc (_Size=0x40) returned 0x32ff8 [0044.284] malloc (_Size=0x20a) returned 0x33040 [0044.284] GetSystemDirectoryW (in: lpBuffer=0x33040, uSize=0x105 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.284] free (_Block=0x33040) [0044.284] malloc (_Size=0xc) returned 0x33040 [0044.284] malloc (_Size=0xc) returned 0x33058 [0044.284] malloc (_Size=0xc) returned 0x33070 [0044.284] SysStringLen (param_1="C:\\Windows\\system32") returned 0x13 [0044.284] SysStringLen (param_1="\\wbem\\") returned 0x6 [0044.284] free (_Block=0x33040) [0044.284] free (_Block=0x33058) [0044.284] SysStringByteLen (bstr="C:\\Windows\\system32\\wbem\\") returned 0x32 [0044.284] free (_Block=0x33070) [0044.284] malloc (_Size=0xc) returned 0x33040 [0044.284] malloc (_Size=0xc) returned 0x33058 [0044.285] malloc (_Size=0xc) returned 0x33070 [0044.285] SysStringLen (param_1="C:\\Windows\\system32\\wbem\\") returned 0x19 [0044.285] SysStringLen (param_1="XSL-Mappings.xml") returned 0x10 [0044.285] free (_Block=0x33040) [0044.285] free (_Block=0x33058) [0044.285] GetCurrentThreadId () returned 0xb90 [0044.285] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Wbem\\CIMOM", ulOptions=0x0, samDesired=0x1, phkResult=0x27f5bc | out: phkResult=0x27f5bc*=0x118) returned 0x0 [0044.285] RegQueryValueExW (in: hKey=0x118, lpValueName="Logging", lpReserved=0x0, lpType=0x0, lpData=0x27f5c8, lpcbData=0x27f5c4*=0x400 | out: lpType=0x0, lpData=0x27f5c8*=0x30, lpcbData=0x27f5c4*=0x4) returned 0x0 [0044.285] _wcsicmp (_String1="0", _String2="1") returned -1 [0044.285] _wcsicmp (_String1="0", _String2="2") returned -2 [0044.285] RegQueryValueExW (in: hKey=0x118, lpValueName="Logging Directory", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x27f5c4*=0x4 | out: lpType=0x0, lpData=0x0, lpcbData=0x27f5c4*=0x42) returned 0x0 [0044.286] malloc (_Size=0x86) returned 0x33088 [0044.286] RegQueryValueExW (in: hKey=0x118, lpValueName="Logging Directory", lpReserved=0x0, lpType=0x0, lpData=0x33088, lpcbData=0x27f5c4*=0x42 | out: lpType=0x0, lpData=0x33088*=0x25, lpcbData=0x27f5c4*=0x42) returned 0x0 [0044.286] lstrlenW (lpString="%systemroot%\\system32\\wbem\\Logs\\") returned 32 [0044.286] malloc (_Size=0x42) returned 0x33118 [0044.286] lstrlenW (lpString="%systemroot%\\system32\\wbem\\Logs\\") returned 32 [0044.286] RegQueryValueExW (in: hKey=0x118, lpValueName="Log File Max Size", lpReserved=0x0, lpType=0x0, lpData=0x27f5c8, lpcbData=0x27f5c4*=0x400 | out: lpType=0x0, lpData=0x27f5c8*=0x36, lpcbData=0x27f5c4*=0xc) returned 0x0 [0044.286] _wtol (_String="65536") returned 65536 [0044.286] free (_Block=0x33088) [0044.286] RegCloseKey (hKey=0x0) returned 0x6 [0044.286] CoCreateInstance (in: rclsid=0x1a6d40*(Data1=0xf6d90f12, Data2=0x9c73, Data3=0x11d3, Data4=([0]=0xb3, [1]=0x2e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0xb, [7]=0xb4)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x1a6d20*(Data1=0x2933bf95, Data2=0x7b36, Data3=0x11d2, Data4=([0]=0xb2, [1]=0xe, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x98, [6]=0x3e, [7]=0x60)), ppv=0x27fa58 | out: ppv=0x27fa58*=0x2274630) returned 0x0 [0044.302] FreeThreadedDOMDocument:IXMLDOMDocument:load (in: This=0x2274630, xmlSource=0x27f9dc*(varType=0x8, wReserved1=0xffff, wReserved2=0x387a, wReserved3=0x7716, varVal1="C:\\Windows\\system32\\wbem\\XSL-Mappings.xml", varVal2=0x0), isSuccessful=0x27fa40 | out: isSuccessful=0x27fa40*=0xffff) returned 0x0 [0044.435] FreeThreadedDOMDocument:IXMLDOMDocument:get_documentElement (in: This=0x2274630, DOMElement=0x27fa54 | out: DOMElement=0x27fa54*=0x2278c58) returned 0x0 [0044.436] malloc (_Size=0xc) returned 0x33040 [0044.436] IXMLDOMElement:getElementsByTagName (in: This=0x2278c58, tagName="XSLFORMAT", resultList=0x27fa50 | out: resultList=0x27fa50*=0x2278e80) returned 0x0 [0044.436] free (_Block=0x33040) [0044.436] IXMLDOMNodeList:get_length (in: This=0x2278e80, listLength=0x27fa38 | out: listLength=0x27fa38*=21) returned 0x0 [0044.436] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=0, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.436] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="texttable.xsl") returned 0x0 [0044.436] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.437] malloc (_Size=0xc) returned 0x33040 [0044.437] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.437] free (_Block=0x33040) [0044.437] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="TABLE", varVal2=0x0)) returned 0x0 [0044.437] malloc (_Size=0xc) returned 0x33040 [0044.437] malloc (_Size=0xc) returned 0x33058 [0044.437] malloc (_Size=0x18) returned 0x3e8e8 [0044.437] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.437] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.437] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.437] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=1, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.437] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="textvaluelist.xsl") returned 0x0 [0044.437] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.437] malloc (_Size=0xc) returned 0x33278 [0044.438] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.438] free (_Block=0x33278) [0044.438] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="VALUE", varVal2=0x0)) returned 0x0 [0044.438] malloc (_Size=0xc) returned 0x33278 [0044.438] malloc (_Size=0xc) returned 0x33290 [0044.438] SysStringLen (param_1="VALUE") returned 0x5 [0044.438] SysStringLen (param_1="TABLE") returned 0x5 [0044.438] SysStringLen (param_1="TABLE") returned 0x5 [0044.438] SysStringLen (param_1="VALUE") returned 0x5 [0044.438] malloc (_Size=0x18) returned 0x3e908 [0044.438] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.438] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.438] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.438] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=2, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.438] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="textvaluelist.xsl") returned 0x0 [0044.438] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.438] malloc (_Size=0xc) returned 0x332a8 [0044.438] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.439] free (_Block=0x332a8) [0044.439] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="LIST", varVal2=0x0)) returned 0x0 [0044.439] malloc (_Size=0xc) returned 0x3fac8 [0044.439] malloc (_Size=0xc) returned 0x3fae0 [0044.439] SysStringLen (param_1="LIST") returned 0x4 [0044.439] SysStringLen (param_1="TABLE") returned 0x5 [0044.439] malloc (_Size=0x18) returned 0x3e928 [0044.439] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.439] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.439] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.439] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=3, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.439] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="rawxml.xsl") returned 0x0 [0044.439] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.439] malloc (_Size=0xc) returned 0x3faf8 [0044.439] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.439] free (_Block=0x3faf8) [0044.439] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="RAWXML", varVal2=0x0)) returned 0x0 [0044.439] malloc (_Size=0xc) returned 0x3faf8 [0044.440] malloc (_Size=0xc) returned 0x3fb10 [0044.440] SysStringLen (param_1="RAWXML") returned 0x6 [0044.440] SysStringLen (param_1="TABLE") returned 0x5 [0044.440] SysStringLen (param_1="RAWXML") returned 0x6 [0044.440] SysStringLen (param_1="LIST") returned 0x4 [0044.440] SysStringLen (param_1="LIST") returned 0x4 [0044.440] SysStringLen (param_1="RAWXML") returned 0x6 [0044.440] malloc (_Size=0x18) returned 0x3e948 [0044.440] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.440] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.440] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.440] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=4, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.440] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="htable.xsl") returned 0x0 [0044.440] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.440] malloc (_Size=0xc) returned 0x3fb28 [0044.440] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.440] free (_Block=0x3fb28) [0044.440] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="HTABLE", varVal2=0x0)) returned 0x0 [0044.440] malloc (_Size=0xc) returned 0x3fb28 [0044.440] malloc (_Size=0xc) returned 0x3fb40 [0044.441] SysStringLen (param_1="HTABLE") returned 0x6 [0044.441] SysStringLen (param_1="TABLE") returned 0x5 [0044.441] SysStringLen (param_1="HTABLE") returned 0x6 [0044.441] SysStringLen (param_1="LIST") returned 0x4 [0044.441] malloc (_Size=0x18) returned 0x3e968 [0044.441] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.441] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.441] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.441] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=5, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.441] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="hform.xsl") returned 0x0 [0044.441] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.441] malloc (_Size=0xc) returned 0x3fb58 [0044.441] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.441] free (_Block=0x3fb58) [0044.441] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="HFORM", varVal2=0x0)) returned 0x0 [0044.441] malloc (_Size=0xc) returned 0x3fb58 [0044.441] malloc (_Size=0xc) returned 0x3fb70 [0044.441] SysStringLen (param_1="HFORM") returned 0x5 [0044.441] SysStringLen (param_1="TABLE") returned 0x5 [0044.442] SysStringLen (param_1="HFORM") returned 0x5 [0044.442] SysStringLen (param_1="LIST") returned 0x4 [0044.442] SysStringLen (param_1="HFORM") returned 0x5 [0044.442] SysStringLen (param_1="HTABLE") returned 0x6 [0044.442] malloc (_Size=0x18) returned 0x3e988 [0044.442] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.442] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.442] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.442] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=6, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.442] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="xml.xsl") returned 0x0 [0044.442] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.442] malloc (_Size=0xc) returned 0x3fb88 [0044.442] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.442] free (_Block=0x3fb88) [0044.442] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="XML", varVal2=0x0)) returned 0x0 [0044.442] malloc (_Size=0xc) returned 0x3fb88 [0044.442] malloc (_Size=0xc) returned 0x3fba0 [0044.442] SysStringLen (param_1="XML") returned 0x3 [0044.442] SysStringLen (param_1="TABLE") returned 0x5 [0044.442] SysStringLen (param_1="XML") returned 0x3 [0044.442] SysStringLen (param_1="VALUE") returned 0x5 [0044.443] SysStringLen (param_1="VALUE") returned 0x5 [0044.443] SysStringLen (param_1="XML") returned 0x3 [0044.443] malloc (_Size=0x18) returned 0x3e9a8 [0044.443] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.443] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.443] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.443] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=7, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.443] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="mof.xsl") returned 0x0 [0044.443] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.443] malloc (_Size=0xc) returned 0x3fbb8 [0044.443] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.443] free (_Block=0x3fbb8) [0044.443] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="MOF", varVal2=0x0)) returned 0x0 [0044.443] malloc (_Size=0xc) returned 0x3fbb8 [0044.443] malloc (_Size=0xc) returned 0x3fbd0 [0044.443] SysStringLen (param_1="MOF") returned 0x3 [0044.443] SysStringLen (param_1="TABLE") returned 0x5 [0044.443] SysStringLen (param_1="MOF") returned 0x3 [0044.443] SysStringLen (param_1="LIST") returned 0x4 [0044.443] SysStringLen (param_1="MOF") returned 0x3 [0044.444] SysStringLen (param_1="RAWXML") returned 0x6 [0044.444] SysStringLen (param_1="LIST") returned 0x4 [0044.444] SysStringLen (param_1="MOF") returned 0x3 [0044.444] malloc (_Size=0x18) returned 0x3e9c8 [0044.444] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.444] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.444] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.444] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=8, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.444] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="csv.xsl") returned 0x0 [0044.444] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.444] malloc (_Size=0xc) returned 0x3fbe8 [0044.444] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.444] free (_Block=0x3fbe8) [0044.444] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="CSV", varVal2=0x0)) returned 0x0 [0044.444] malloc (_Size=0xc) returned 0x3fbe8 [0044.444] malloc (_Size=0xc) returned 0x3fc00 [0044.444] SysStringLen (param_1="CSV") returned 0x3 [0044.444] SysStringLen (param_1="TABLE") returned 0x5 [0044.444] SysStringLen (param_1="CSV") returned 0x3 [0044.444] SysStringLen (param_1="LIST") returned 0x4 [0044.444] SysStringLen (param_1="CSV") returned 0x3 [0044.445] SysStringLen (param_1="HTABLE") returned 0x6 [0044.445] SysStringLen (param_1="CSV") returned 0x3 [0044.445] SysStringLen (param_1="HFORM") returned 0x5 [0044.445] malloc (_Size=0x18) returned 0x3e9e8 [0044.445] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.445] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.445] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.445] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=9, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.445] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="texttable.xsl") returned 0x0 [0044.445] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.445] malloc (_Size=0xc) returned 0x3fc18 [0044.445] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.445] free (_Block=0x3fc18) [0044.445] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="texttablewsys.xsl", varVal2=0x0)) returned 0x0 [0044.445] malloc (_Size=0xc) returned 0x3fc18 [0044.445] malloc (_Size=0xc) returned 0x3fc30 [0044.445] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.445] SysStringLen (param_1="TABLE") returned 0x5 [0044.445] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.445] SysStringLen (param_1="VALUE") returned 0x5 [0044.446] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.446] SysStringLen (param_1="XML") returned 0x3 [0044.446] SysStringLen (param_1="XML") returned 0x3 [0044.446] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.446] malloc (_Size=0x18) returned 0x3ea08 [0044.446] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.446] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.446] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.446] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=10, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.446] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="texttable.xsl") returned 0x0 [0044.446] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.446] malloc (_Size=0xc) returned 0x3fc48 [0044.446] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.446] free (_Block=0x3fc48) [0044.446] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="texttablewsys", varVal2=0x0)) returned 0x0 [0044.446] malloc (_Size=0xc) returned 0x3fc48 [0044.446] malloc (_Size=0xc) returned 0x3fc60 [0044.446] SysStringLen (param_1="texttablewsys") returned 0xd [0044.446] SysStringLen (param_1="TABLE") returned 0x5 [0044.446] SysStringLen (param_1="texttablewsys") returned 0xd [0044.447] SysStringLen (param_1="XML") returned 0x3 [0044.447] SysStringLen (param_1="texttablewsys") returned 0xd [0044.447] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.447] SysStringLen (param_1="XML") returned 0x3 [0044.447] SysStringLen (param_1="texttablewsys") returned 0xd [0044.447] malloc (_Size=0x18) returned 0x3ea28 [0044.447] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.447] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.447] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.447] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=11, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.447] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="texttable.xsl") returned 0x0 [0044.447] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.447] malloc (_Size=0xc) returned 0x3fc78 [0044.447] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.447] free (_Block=0x3fc78) [0044.447] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="wmiclitableformat.xsl", varVal2=0x0)) returned 0x0 [0044.447] malloc (_Size=0xc) returned 0x3fc78 [0044.447] malloc (_Size=0xc) returned 0x3fc90 [0044.447] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0044.447] SysStringLen (param_1="TABLE") returned 0x5 [0044.448] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0044.448] SysStringLen (param_1="XML") returned 0x3 [0044.448] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0044.448] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.448] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.448] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0044.448] malloc (_Size=0x18) returned 0x3ea48 [0044.448] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.448] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.448] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.448] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=12, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.448] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="texttable.xsl") returned 0x0 [0044.448] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.448] malloc (_Size=0xc) returned 0x3fca8 [0044.448] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.448] free (_Block=0x3fca8) [0044.448] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="wmiclitableformat", varVal2=0x0)) returned 0x0 [0044.448] malloc (_Size=0xc) returned 0x3fca8 [0044.448] malloc (_Size=0xc) returned 0x3fcc0 [0044.448] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0044.448] SysStringLen (param_1="TABLE") returned 0x5 [0044.449] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0044.449] SysStringLen (param_1="XML") returned 0x3 [0044.449] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0044.449] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.449] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0044.449] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0044.449] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.449] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0044.449] malloc (_Size=0x18) returned 0x3ea68 [0044.449] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.449] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.449] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.449] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=13, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.449] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="texttable.xsl") returned 0x0 [0044.449] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.449] malloc (_Size=0xc) returned 0x3fcd8 [0044.449] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.449] free (_Block=0x3fcd8) [0044.449] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="wmiclitableformatnosys.xsl", varVal2=0x0)) returned 0x0 [0044.449] malloc (_Size=0xc) returned 0x3fcd8 [0044.449] malloc (_Size=0xc) returned 0x3fcf0 [0044.450] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0044.450] SysStringLen (param_1="TABLE") returned 0x5 [0044.450] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0044.450] SysStringLen (param_1="XML") returned 0x3 [0044.450] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0044.450] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.450] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0044.450] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0044.450] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0044.450] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0044.450] malloc (_Size=0x18) returned 0x3ea88 [0044.450] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.450] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.450] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.450] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=14, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.450] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="texttable.xsl") returned 0x0 [0044.450] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.450] malloc (_Size=0xc) returned 0x3fd08 [0044.450] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.450] free (_Block=0x3fd08) [0044.450] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="wmiclitableformatnosys", varVal2=0x0)) returned 0x0 [0044.450] malloc (_Size=0xc) returned 0x3fd08 [0044.451] malloc (_Size=0xc) returned 0x3fd20 [0044.451] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0044.451] SysStringLen (param_1="TABLE") returned 0x5 [0044.451] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0044.451] SysStringLen (param_1="XML") returned 0x3 [0044.451] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0044.451] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.451] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0044.451] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0044.451] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0044.451] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0044.451] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0044.451] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0044.451] malloc (_Size=0x18) returned 0x3eaa8 [0044.451] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.451] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.451] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.451] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=15, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.451] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="htable.xsl") returned 0x0 [0044.451] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.451] malloc (_Size=0xc) returned 0x3fd38 [0044.451] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.452] free (_Block=0x3fd38) [0044.452] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="htable-sortby.xsl", varVal2=0x0)) returned 0x0 [0044.452] malloc (_Size=0xc) returned 0x3fd38 [0044.452] malloc (_Size=0xc) returned 0x3fd50 [0044.452] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0044.452] SysStringLen (param_1="TABLE") returned 0x5 [0044.452] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0044.452] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.452] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0044.452] SysStringLen (param_1="XML") returned 0x3 [0044.452] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0044.452] SysStringLen (param_1="texttablewsys") returned 0xd [0044.452] SysStringLen (param_1="XML") returned 0x3 [0044.452] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0044.452] malloc (_Size=0x18) returned 0x3eac8 [0044.452] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.452] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.452] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.452] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=16, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.452] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="htable.xsl") returned 0x0 [0044.452] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.452] malloc (_Size=0xc) returned 0x3fd68 [0044.453] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.453] free (_Block=0x3fd68) [0044.453] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="htable-sortby", varVal2=0x0)) returned 0x0 [0044.453] malloc (_Size=0xc) returned 0x3fd68 [0044.453] malloc (_Size=0xc) returned 0x3fd80 [0044.453] SysStringLen (param_1="htable-sortby") returned 0xd [0044.453] SysStringLen (param_1="TABLE") returned 0x5 [0044.453] SysStringLen (param_1="htable-sortby") returned 0xd [0044.453] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.453] SysStringLen (param_1="htable-sortby") returned 0xd [0044.453] SysStringLen (param_1="XML") returned 0x3 [0044.453] SysStringLen (param_1="htable-sortby") returned 0xd [0044.453] SysStringLen (param_1="texttablewsys") returned 0xd [0044.453] SysStringLen (param_1="htable-sortby") returned 0xd [0044.453] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0044.453] SysStringLen (param_1="XML") returned 0x3 [0044.453] SysStringLen (param_1="htable-sortby") returned 0xd [0044.453] malloc (_Size=0x18) returned 0x3eae8 [0044.453] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.453] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.453] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.453] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=17, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.453] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="mof.xsl") returned 0x0 [0044.454] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.454] malloc (_Size=0xc) returned 0x3fd98 [0044.454] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.454] free (_Block=0x3fd98) [0044.454] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="wmiclimofformat.xsl", varVal2=0x0)) returned 0x0 [0044.454] malloc (_Size=0xc) returned 0x3fd98 [0044.454] malloc (_Size=0xc) returned 0x3fdb0 [0044.454] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0044.454] SysStringLen (param_1="TABLE") returned 0x5 [0044.454] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0044.454] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.454] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0044.454] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0044.454] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0044.454] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0044.454] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.454] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0044.454] malloc (_Size=0x18) returned 0x3eb08 [0044.455] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.455] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.455] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.455] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=18, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.455] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="mof.xsl") returned 0x0 [0044.455] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.455] malloc (_Size=0xc) returned 0x3fdc8 [0044.455] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.455] free (_Block=0x3fdc8) [0044.455] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="wmiclimofformat", varVal2=0x0)) returned 0x0 [0044.455] malloc (_Size=0xc) returned 0x3fdc8 [0044.455] malloc (_Size=0xc) returned 0x3fde0 [0044.455] SysStringLen (param_1="wmiclimofformat") returned 0xf [0044.455] SysStringLen (param_1="TABLE") returned 0x5 [0044.455] SysStringLen (param_1="wmiclimofformat") returned 0xf [0044.455] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.455] SysStringLen (param_1="wmiclimofformat") returned 0xf [0044.455] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0044.455] SysStringLen (param_1="wmiclimofformat") returned 0xf [0044.455] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0044.455] SysStringLen (param_1="wmiclimofformat") returned 0xf [0044.456] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0044.456] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.456] SysStringLen (param_1="wmiclimofformat") returned 0xf [0044.456] malloc (_Size=0x18) returned 0x3eb28 [0044.456] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.456] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.456] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.456] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=19, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.456] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="textvaluelist.xsl") returned 0x0 [0044.456] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.456] malloc (_Size=0xc) returned 0x3fdf8 [0044.456] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.456] free (_Block=0x3fdf8) [0044.456] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="wmiclivalueformat.xsl", varVal2=0x0)) returned 0x0 [0044.456] malloc (_Size=0xc) returned 0x3fdf8 [0044.456] malloc (_Size=0xc) returned 0x3fe10 [0044.456] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0044.456] SysStringLen (param_1="TABLE") returned 0x5 [0044.456] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0044.456] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.457] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0044.457] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0044.457] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0044.457] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0044.457] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0044.457] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0044.457] malloc (_Size=0x18) returned 0x3eb48 [0044.457] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.457] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.457] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.457] IXMLDOMNodeList:get_item (in: This=0x2278e80, index=20, listItem=0x27fa6c | out: listItem=0x27fa6c*=0x2274b20) returned 0x0 [0044.457] IXMLDOMNode:get_text (in: This=0x2274b20, text=0x27fa74 | out: text=0x27fa74*="textvaluelist.xsl") returned 0x0 [0044.457] IXMLDOMNode:get_attributes (in: This=0x2274b20, attributeMap=0x27fa68 | out: attributeMap=0x27fa68*=0x2278cf8) returned 0x0 [0044.457] malloc (_Size=0xc) returned 0x3fe28 [0044.457] IXMLDOMNamedNodeMap:getNamedItem (in: This=0x2278cf8, name="KEYWORD", namedItem=0x27fa64 | out: namedItem=0x27fa64*=0x2278c98) returned 0x0 [0044.457] free (_Block=0x3fe28) [0044.457] IXMLDOMNode:get_nodeValue (in: This=0x2278c98, value=0x27fa10 | out: value=0x27fa10*(varType=0x8, wReserved1=0x3, wReserved2=0x3058, wReserved3=0x3, varVal1="wmiclivalueformat", varVal2=0x0)) returned 0x0 [0044.457] malloc (_Size=0xc) returned 0x3fe28 [0044.457] malloc (_Size=0xc) returned 0x3fe40 [0044.457] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0044.458] SysStringLen (param_1="TABLE") returned 0x5 [0044.458] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0044.458] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0044.458] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0044.458] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0044.458] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0044.458] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0044.458] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0044.458] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0044.458] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0044.458] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0044.458] malloc (_Size=0x18) returned 0x3eb68 [0044.458] IUnknown:Release (This=0x2274b20) returned 0x0 [0044.458] IUnknown:Release (This=0x2278cf8) returned 0x0 [0044.458] IUnknown:Release (This=0x2278c98) returned 0x0 [0044.458] IUnknown:Release (This=0x2278e80) returned 0x0 [0044.458] FreeThreadedDOMDocument:IUnknown:Release (This=0x2278c58) returned 0x1 [0044.458] FreeThreadedDOMDocument:IUnknown:Release (This=0x2274630) returned 0x0 [0044.458] free (_Block=0x33070) [0044.458] GetCommandLineW () returned="WMIC PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128" [0044.458] malloc (_Size=0x80) returned 0x23f04a0 [0044.458] memcpy_s (in: _Destination=0x23f04a0, _DestinationSize=0x7e, _Source=0x321976, _SourceSize=0x72 | out: _Destination=0x23f04a0) returned 0x0 [0044.458] malloc (_Size=0xc) returned 0x3fe58 [0044.458] malloc (_Size=0xc) returned 0x3fe70 [0044.459] malloc (_Size=0xc) returned 0x3fe88 [0044.459] malloc (_Size=0xc) returned 0x23f2060 [0044.459] malloc (_Size=0x80) returned 0x23f0528 [0044.459] GetLocalTime (in: lpSystemTime=0x27fa1c | out: lpSystemTime=0x27fa1c*(wYear=0x7e3, wMonth=0xa, wDayOfWeek=0x4, wDay=0x3, wHour=0x2, wMinute=0x1f, wSecond=0xc, wMilliseconds=0x2d4)) [0044.459] _vsnwprintf (in: _Buffer=0x23f0528, _BufferCount=0x3f, _Format="%.2d-%.2d-%.4dT%.2d:%.2d:%.2d", _ArgList=0x27f9fc | out: _Buffer="10-03-2019T02:31:12") returned 19 [0044.459] lstrlenW (lpString=" PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128") returned 53 [0044.459] malloc (_Size=0x6c) returned 0x3feb0 [0044.459] lstrlenW (lpString=" PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128") returned 53 [0044.459] lstrlenW (lpString=" PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128") returned 53 [0044.459] malloc (_Size=0x6c) returned 0x3ff28 [0044.459] lstrlenW (lpString=" PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128") returned 53 [0044.459] lstrlenW (lpString=" PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128") returned 53 [0044.459] lstrlenW (lpString=" PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128") returned 53 [0044.459] malloc (_Size=0x10) returned 0x23f2078 [0044.459] lstrlenW (lpString="PROCESS") returned 7 [0044.459] _wcsicmp (_String1="PROCESS", _String2="\"NULL\"") returned 78 [0044.459] malloc (_Size=0x10) returned 0x23f2090 [0044.459] malloc (_Size=0x4) returned 0x33070 [0044.459] free (_Block=0x0) [0044.459] free (_Block=0x23f2078) [0044.459] lstrlenW (lpString=" PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128") returned 53 [0044.459] malloc (_Size=0xc) returned 0x23f2078 [0044.459] lstrlenW (lpString="WHERE") returned 5 [0044.459] _wcsicmp (_String1="WHERE", _String2="\"NULL\"") returned 85 [0044.459] malloc (_Size=0xc) returned 0x23f20a8 [0044.459] malloc (_Size=0x8) returned 0x332a8 [0044.459] memmove_s (in: _Destination=0x332a8, _DestinationSize=0x4, _Source=0x33070, _SourceSize=0x4 | out: _Destination=0x332a8) returned 0x0 [0044.459] free (_Block=0x33070) [0044.459] free (_Block=0x0) [0044.459] free (_Block=0x23f2078) [0044.459] lstrlenW (lpString=" PROCESS WHERE Name=\\\"sam.exe\\\" call SetPriority 128") returned 53 [0044.459] lstrlenW (lpString="WHERE") returned 5 [0044.459] lstrlenW (lpString="WHERE") returned 5 [0044.460] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="WHERE", cchCount1=5, lpString2="WHERE", cchCount2=5) returned 2 [0044.460] malloc (_Size=0x4e) returned 0x23f2448 [0044.460] lstrlenW (lpString="Name=\\\"sam.exe\\\" call SetPriority 128") returned 37 [0044.460] _wcsicmp (_String1="Name=\\\"sam.exe\\\" call SetPriority 128", _String2="\"NULL\"") returned 76 [0044.460] ??0CHString@@QAE@PBG@Z () returned 0x27f9bc [0044.460] ??0CHString@@QAE@ABV0@@Z () returned 0x27f958 [0044.460] ?Empty@CHString@@QAEXXZ () returned 0x74ab0510 [0044.460] ?GetData@CHString@@IBEPAUCHStringData@@XZ () returned 0x23f24a0 [0044.460] ?Find@CHString@@QBEHPBG@Z () returned 0x5 [0044.460] ?Left@CHString@@QBE?AV1@H@Z () returned 0x27f93c [0044.460] ??YCHString@@QAEABV0@ABV0@@Z () returned 0x27f9bc [0044.460] ??1CHString@@QAE@XZ () returned 0x6e0001 [0044.460] ?Mid@CHString@@QBE?AV1@H@Z () returned 0x27f930 [0044.460] ??4CHString@@QAEABV0@ABV0@@Z () returned 0x27f958 [0044.460] ??1CHString@@QAE@XZ () returned 0x1 [0044.460] ?GetData@CHString@@IBEPAUCHStringData@@XZ () returned 0x23f2500 [0044.460] ?Find@CHString@@QBEHPBG@Z () returned 0x8 [0044.460] ?Left@CHString@@QBE?AV1@H@Z () returned 0x27f93c [0044.460] ??YCHString@@QAEABV0@ABV0@@Z () returned 0x27f9bc [0044.460] ??1CHString@@QAE@XZ () returned 0x1 [0044.460] ?Mid@CHString@@QBE?AV1@H@Z () returned 0x27f930 [0044.460] ??4CHString@@QAEABV0@ABV0@@Z () returned 0x27f958 [0044.460] ??1CHString@@QAE@XZ () returned 0x1 [0044.460] ?GetData@CHString@@IBEPAUCHStringData@@XZ () returned 0x3ffa0 [0044.460] ?Find@CHString@@QBEHPBG@Z () returned 0xffffffff [0044.460] ??YCHString@@QAEABV0@ABV0@@Z () returned 0x27f9bc [0044.460] ?Empty@CHString@@QAEXXZ () returned 0x74ab0510 [0044.460] ?GetData@CHString@@IBEPAUCHStringData@@XZ () returned 0x74ab0504 [0044.460] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.460] ??1CHString@@QAE@XZ () returned 0x1 [0044.460] malloc (_Size=0x4e) returned 0x23f24a0 [0044.460] malloc (_Size=0xc) returned 0x23f2078 [0044.460] memmove_s (in: _Destination=0x23f2078, _DestinationSize=0x8, _Source=0x332a8, _SourceSize=0x8 | out: _Destination=0x23f2078) returned 0x0 [0044.460] free (_Block=0x332a8) [0044.460] free (_Block=0x0) [0044.460] free (_Block=0x23f2448) [0044.460] malloc (_Size=0xc) returned 0x23f20c0 [0044.461] lstrlenW (lpString="QUIT") returned 4 [0044.461] lstrlenW (lpString="PROCESS") returned 7 [0044.461] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="PROCESS", cchCount1=7, lpString2="QUIT", cchCount2=4) returned 1 [0044.461] lstrlenW (lpString="EXIT") returned 4 [0044.461] lstrlenW (lpString="PROCESS") returned 7 [0044.461] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="PROCESS", cchCount1=7, lpString2="EXIT", cchCount2=4) returned 3 [0044.461] free (_Block=0x23f20c0) [0044.461] WbemLocator:IUnknown:AddRef (This=0x1cb0828) returned 0x2 [0044.461] malloc (_Size=0xc) returned 0x23f20c0 [0044.461] lstrlenW (lpString="/") returned 1 [0044.461] lstrlenW (lpString="PROCESS") returned 7 [0044.461] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="PROCESS", cchCount1=7, lpString2="/", cchCount2=1) returned 3 [0044.461] lstrlenW (lpString="-") returned 1 [0044.461] lstrlenW (lpString="PROCESS") returned 7 [0044.461] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="PROCESS", cchCount1=7, lpString2="-", cchCount2=1) returned 3 [0044.461] lstrlenW (lpString="CLASS") returned 5 [0044.461] lstrlenW (lpString="PROCESS") returned 7 [0044.461] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="PROCESS", cchCount1=7, lpString2="CLASS", cchCount2=5) returned 3 [0044.461] lstrlenW (lpString="PATH") returned 4 [0044.461] lstrlenW (lpString="PROCESS") returned 7 [0044.461] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="PROCESS", cchCount1=7, lpString2="PATH", cchCount2=4) returned 3 [0044.461] lstrlenW (lpString="CONTEXT") returned 7 [0044.461] lstrlenW (lpString="PROCESS") returned 7 [0044.461] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="PROCESS", cchCount1=7, lpString2="CONTEXT", cchCount2=7) returned 3 [0044.461] lstrlenW (lpString="PROCESS") returned 7 [0044.461] malloc (_Size=0x10) returned 0x23f20d8 [0044.461] lstrlenW (lpString="PROCESS") returned 7 [0044.461] GetCurrentThreadId () returned 0xb90 [0044.461] ??0CHString@@QAE@XZ () returned 0x27f970 [0044.461] malloc (_Size=0xc) returned 0x23f20f0 [0044.461] malloc (_Size=0xc) returned 0x23f2108 [0044.461] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1cb0828, strNetworkResource="root\\cli", strUser=0x0, strPassword=0x0, strLocale="ms_409", lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x1ec1e0 | out: ppNamespace=0x1ec1e0*=0x1cbd00c) returned 0x0 [0044.496] free (_Block=0x23f2108) [0044.496] free (_Block=0x23f20f0) [0044.496] CoSetProxyBlanket (pProxy=0x1cbd00c, dwAuthnSvc=0xffffffff, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x0) returned 0x0 [0044.497] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.497] GetCurrentThreadId () returned 0xb90 [0044.497] ??0CHString@@QAE@XZ () returned 0x27f908 [0044.497] malloc (_Size=0xc) returned 0x23f20f0 [0044.497] malloc (_Size=0xc) returned 0x23f2108 [0044.497] malloc (_Size=0xc) returned 0x23f2120 [0044.497] malloc (_Size=0xc) returned 0x23f2138 [0044.497] SysStringLen (param_1="root\\cli") returned 0x8 [0044.497] SysStringLen (param_1="\\") returned 0x1 [0044.497] malloc (_Size=0xc) returned 0x23f2150 [0044.497] SysStringLen (param_1="root\\cli\\") returned 0x9 [0044.497] SysStringLen (param_1="ms_409") returned 0x6 [0044.497] free (_Block=0x23f2138) [0044.497] free (_Block=0x23f2120) [0044.497] free (_Block=0x23f2108) [0044.498] free (_Block=0x23f20f0) [0044.498] malloc (_Size=0xc) returned 0x23f20f0 [0044.498] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1cb0828, strNetworkResource="root\\cli\\ms_409", strUser=0x0, strPassword=0x0, strLocale="ms_409", lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x1ec1e4 | out: ppNamespace=0x1ec1e4*=0x1cbd064) returned 0x0 [0044.502] free (_Block=0x23f20f0) [0044.502] free (_Block=0x23f2150) [0044.502] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.502] GetCurrentThreadId () returned 0xb90 [0044.502] ??0CHString@@QAE@XZ () returned 0x27f974 [0044.502] malloc (_Size=0xc) returned 0x23f2150 [0044.502] malloc (_Size=0xc) returned 0x23f20f0 [0044.502] malloc (_Size=0xc) returned 0x23f2108 [0044.502] lstrlenA (lpString="MSFT_CliAlias.FriendlyName='") returned 28 [0044.502] malloc (_Size=0x3a) returned 0x3ffa0 [0044.502] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1a1f7c, cbMultiByte=-1, lpWideCharStr=0x3ffa0, cchWideChar=29 | out: lpWideCharStr="MSFT_CliAlias.FriendlyName='") returned 29 [0044.502] free (_Block=0x3ffa0) [0044.502] malloc (_Size=0xc) returned 0x23f2120 [0044.502] SysStringLen (param_1="MSFT_CliAlias.FriendlyName='") returned 0x1c [0044.502] SysStringLen (param_1="PROCESS") returned 0x7 [0044.502] malloc (_Size=0xc) returned 0x23f2138 [0044.502] SysStringLen (param_1="MSFT_CliAlias.FriendlyName='PROCESS") returned 0x23 [0044.502] SysStringLen (param_1="'") returned 0x1 [0044.502] free (_Block=0x23f2120) [0044.503] free (_Block=0x23f2108) [0044.503] free (_Block=0x23f20f0) [0044.503] free (_Block=0x23f2150) [0044.503] IWbemServices:GetObject (in: This=0x1cbd00c, strObjectPath="MSFT_CliAlias.FriendlyName='PROCESS'", lFlags=0, pCtx=0x0, ppObject=0x27f970*=0x0, ppCallResult=0x0 | out: ppObject=0x27f970*=0x1ce0890, ppCallResult=0x0) returned 0x0 [0044.528] malloc (_Size=0xc) returned 0x23f2150 [0044.528] IWbemClassObject:Get (in: This=0x1ce0890, wszName="Target", lFlags=0, pVal=0x27f930*(varType=0x0, wReserved1=0x27, wReserved2=0xe58c, wReserved3=0x1d, varVal1=0xffffffff, varVal2=0x1aa03c), pType=0x0, plFlavor=0x0 | out: pVal=0x27f930*(varType=0x8, wReserved1=0x27, wReserved2=0xe58c, wReserved3=0x1d, varVal1="Select * from Win32_Process", varVal2=0x1aa03c), pType=0x0, plFlavor=0x0) returned 0x0 [0044.528] free (_Block=0x23f2150) [0044.528] lstrlenW (lpString="Select * from Win32_Process") returned 27 [0044.528] malloc (_Size=0x38) returned 0x3ffa0 [0044.528] lstrlenW (lpString="Select * from Win32_Process") returned 27 [0044.528] malloc (_Size=0xc) returned 0x23f2150 [0044.529] IWbemClassObject:Get (in: This=0x1ce0890, wszName="PWhere", lFlags=0, pVal=0x27f930*(varType=0x0, wReserved1=0x27, wReserved2=0xe58c, wReserved3=0x1d, varVal1=0x37109c, varVal2=0x1aa03c), pType=0x0, plFlavor=0x0 | out: pVal=0x27f930*(varType=0x8, wReserved1=0x27, wReserved2=0xe58c, wReserved3=0x1d, varVal1="WHERE ProcessId='#'", varVal2=0x1aa03c), pType=0x0, plFlavor=0x0) returned 0x0 [0044.529] free (_Block=0x23f2150) [0044.529] lstrlenW (lpString="WHERE ProcessId='#'") returned 19 [0044.529] malloc (_Size=0x28) returned 0x23f2448 [0044.529] lstrlenW (lpString="WHERE ProcessId='#'") returned 19 [0044.529] malloc (_Size=0xc) returned 0x23f2150 [0044.529] IWbemClassObject:Get (in: This=0x1ce0890, wszName="Connection", lFlags=0, pVal=0x27f930*(varType=0x0, wReserved1=0x27, wReserved2=0xe58c, wReserved3=0x1d, varVal1=0x374954, varVal2=0x1aa03c), pType=0x0, plFlavor=0x0 | out: pVal=0x27f930*(varType=0xd, wReserved1=0x27, wReserved2=0xe58c, wReserved3=0x1d, varVal1=0x1ce0c50, varVal2=0x1aa03c), pType=0x0, plFlavor=0x0) returned 0x0 [0044.529] free (_Block=0x23f2150) [0044.529] IUnknown:QueryInterface (in: This=0x1ce0c50, riid=0x1a6b50*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x27f968 | out: ppvObject=0x27f968*=0x1ce0c50) returned 0x0 [0044.529] GetCurrentThreadId () returned 0xb90 [0044.529] ??0CHString@@QAE@XZ () returned 0x27f8e4 [0044.529] malloc (_Size=0xc) returned 0x23f2150 [0044.529] IWbemClassObject:Get (in: This=0x1ce0c50, wszName="Namespace", lFlags=0, pVal=0x27f8b4*(varType=0x0, wReserved1=0x0, wReserved2=0x2150, wReserved3=0x23f, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x27f8b4*(varType=0x8, wReserved1=0x0, wReserved2=0x2150, wReserved3=0x23f, varVal1="ROOT\\CIMV2", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0044.529] free (_Block=0x23f2150) [0044.529] lstrlenW (lpString="ROOT\\CIMV2") returned 10 [0044.529] malloc (_Size=0x16) returned 0x3eba8 [0044.529] lstrlenW (lpString="ROOT\\CIMV2") returned 10 [0044.530] malloc (_Size=0xc) returned 0x23f2150 [0044.530] IWbemClassObject:Get (in: This=0x1ce0c50, wszName="Locale", lFlags=0, pVal=0x27f8b4*(varType=0x0, wReserved1=0x0, wReserved2=0x2150, wReserved3=0x23f, varVal1=0x3843e4, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x27f8b4*(varType=0x8, wReserved1=0x0, wReserved2=0x2150, wReserved3=0x23f, varVal1="ms_409", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0044.530] free (_Block=0x23f2150) [0044.530] lstrlenW (lpString="ms_409") returned 6 [0044.530] malloc (_Size=0xe) returned 0x23f2150 [0044.530] lstrlenW (lpString="ms_409") returned 6 [0044.530] malloc (_Size=0xc) returned 0x23f20f0 [0044.530] IWbemClassObject:Get (in: This=0x1ce0c50, wszName="User", lFlags=0, pVal=0x27f8b4*(varType=0x0, wReserved1=0x0, wReserved2=0x2150, wReserved3=0x23f, varVal1=0x3843e4, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x27f8b4*(varType=0x1, wReserved1=0x0, wReserved2=0x2150, wReserved3=0x23f, varVal1=0x3843e4, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0044.530] free (_Block=0x23f20f0) [0044.530] malloc (_Size=0xc) returned 0x23f20f0 [0044.530] IWbemClassObject:Get (in: This=0x1ce0c50, wszName="Password", lFlags=0, pVal=0x27f8b4*(varType=0x1, wReserved1=0x0, wReserved2=0x2150, wReserved3=0x23f, varVal1=0x3843e4, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x27f8b4*(varType=0x1, wReserved1=0x0, wReserved2=0x2150, wReserved3=0x23f, varVal1=0x3843e4, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0044.530] free (_Block=0x23f20f0) [0044.530] malloc (_Size=0xc) returned 0x23f20f0 [0044.530] IWbemClassObject:Get (in: This=0x1ce0c50, wszName="Server", lFlags=0, pVal=0x27f8b4*(varType=0x1, wReserved1=0x0, wReserved2=0x2150, wReserved3=0x23f, varVal1=0x3843e4, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x27f8b4*(varType=0x8, wReserved1=0x0, wReserved2=0x2150, wReserved3=0x23f, varVal1=".", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0044.530] free (_Block=0x23f20f0) [0044.530] lstrlenW (lpString=".") returned 1 [0044.530] malloc (_Size=0x4) returned 0x33070 [0044.530] lstrlenW (lpString=".") returned 1 [0044.530] malloc (_Size=0xc) returned 0x23f20f0 [0044.530] IWbemClassObject:Get (in: This=0x1ce0c50, wszName="Authority", lFlags=0, pVal=0x27f8b4*(varType=0x0, wReserved1=0x0, wReserved2=0x2150, wReserved3=0x23f, varVal1=0x3843e4, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x27f8b4*(varType=0x1, wReserved1=0x0, wReserved2=0x2150, wReserved3=0x23f, varVal1=0x3843e4, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0044.530] free (_Block=0x23f20f0) [0044.530] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.531] IUnknown:Release (This=0x1ce0c50) returned 0x1 [0044.531] GetCurrentThreadId () returned 0xb90 [0044.531] ??0CHString@@QAE@XZ () returned 0x27f8dc [0044.531] malloc (_Size=0xc) returned 0x23f20f0 [0044.531] IWbemClassObject:Get (in: This=0x1ce0890, wszName="__RELPATH", lFlags=0, pVal=0x27f8bc*(varType=0x0, wReserved1=0x749c, wReserved2=0x0, wReserved3=0x1cb, varVal1=0x0, varVal2=0x1ce0c50), pType=0x0, plFlavor=0x0 | out: pVal=0x27f8bc*(varType=0x8, wReserved1=0x749c, wReserved2=0x0, wReserved3=0x1cb, varVal1="MSFT_CliAlias.FriendlyName=\"Process\"", varVal2=0x1ce0c50), pType=0x0, plFlavor=0x0) returned 0x0 [0044.531] free (_Block=0x23f20f0) [0044.531] malloc (_Size=0xc) returned 0x23f20f0 [0044.531] GetCurrentThreadId () returned 0xb90 [0044.531] ??0CHString@@QAE@XZ () returned 0x27f86c [0044.531] ??0CHString@@QAE@PBG@Z () returned 0x27f858 [0044.531] ??0CHString@@QAE@ABV0@@Z () returned 0x27f7f8 [0044.531] ?Empty@CHString@@QAEXXZ () returned 0x74ab0510 [0044.531] ?GetData@CHString@@IBEPAUCHStringData@@XZ () returned 0x23f24f8 [0044.531] ?Find@CHString@@QBEHPBG@Z () returned 0x1b [0044.531] ?Left@CHString@@QBE?AV1@H@Z () returned 0x27f7d8 [0044.531] ??H@YG?AVCHString@@ABV0@PBG@Z () returned 0x27f7dc [0044.531] ??YCHString@@QAEABV0@ABV0@@Z () returned 0x27f858 [0044.531] ??1CHString@@QAE@XZ () returned 0x1 [0044.531] ??1CHString@@QAE@XZ () returned 0x1 [0044.531] ?Mid@CHString@@QBE?AV1@H@Z () returned 0x27f7d4 [0044.531] ??4CHString@@QAEABV0@ABV0@@Z () returned 0x27f7f8 [0044.531] ??1CHString@@QAE@XZ () returned 0x1 [0044.531] ?GetData@CHString@@IBEPAUCHStringData@@XZ () returned 0x23f2478 [0044.531] ?Find@CHString@@QBEHPBG@Z () returned 0x7 [0044.531] ?Left@CHString@@QBE?AV1@H@Z () returned 0x27f7d8 [0044.531] ??H@YG?AVCHString@@ABV0@PBG@Z () returned 0x27f7dc [0044.531] ??YCHString@@QAEABV0@ABV0@@Z () returned 0x27f858 [0044.531] ??1CHString@@QAE@XZ () returned 0x1 [0044.531] ??1CHString@@QAE@XZ () returned 0x1 [0044.532] ?Mid@CHString@@QBE?AV1@H@Z () returned 0x27f7d4 [0044.532] ??4CHString@@QAEABV0@ABV0@@Z () returned 0x27f7f8 [0044.532] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.532] ?GetData@CHString@@IBEPAUCHStringData@@XZ () returned 0x74ab0504 [0044.532] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.532] malloc (_Size=0xc) returned 0x23f2108 [0044.532] malloc (_Size=0xc) returned 0x23f2120 [0044.532] malloc (_Size=0xc) returned 0x23f2168 [0044.532] malloc (_Size=0xc) returned 0x23f2180 [0044.532] malloc (_Size=0xc) returned 0x23f2198 [0044.532] SysStringLen (param_1="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=") returned 0x3c [0044.532] SysStringLen (param_1="\"Description\",RelPath=\"") returned 0x17 [0044.532] malloc (_Size=0xc) returned 0x23f21b0 [0044.532] SysStringLen (param_1="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=\"Description\",RelPath=\"") returned 0x53 [0044.532] SysStringLen (param_1="MSFT_CliAlias.FriendlyName=\\\"Process\\\"") returned 0x26 [0044.532] malloc (_Size=0xc) returned 0x23f21c8 [0044.532] SysStringLen (param_1="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=\"Description\",RelPath=\"MSFT_CliAlias.FriendlyName=\\\"Process\\\"") returned 0x79 [0044.532] SysStringLen (param_1="\"") returned 0x1 [0044.533] free (_Block=0x23f21b0) [0044.533] free (_Block=0x23f2198) [0044.533] free (_Block=0x23f2180) [0044.533] free (_Block=0x23f2168) [0044.533] free (_Block=0x23f2120) [0044.533] free (_Block=0x23f2108) [0044.533] IWbemServices:GetObject (in: This=0x1cbd064, strObjectPath="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=\"Description\",RelPath=\"MSFT_CliAlias.FriendlyName=\\\"Process\\\"\"", lFlags=0, pCtx=0x0, ppObject=0x27f874*=0x0, ppCallResult=0x0 | out: ppObject=0x27f874*=0x1ce0cd8, ppCallResult=0x0) returned 0x0 [0044.571] malloc (_Size=0xc) returned 0x23f2108 [0044.571] IWbemClassObject:Get (in: This=0x1ce0cd8, wszName="Text", lFlags=0, pVal=0x27f820*(varType=0x0, wReserved1=0x34, wReserved2=0x4fdc, wReserved3=0x34, varVal1=0x48, varVal2=0x1ec1e0), pType=0x0, plFlavor=0x0 | out: pVal=0x27f820*(varType=0x2008, wReserved1=0x34, wReserved2=0x4fdc, wReserved3=0x34, varVal1=0x367608*(cDims=0x1, fFeatures=0x180, cbElements=0x4, cLocks=0x0, pvData=0x377218, rgsabound=((cElements=0x1, lLbound=0))), varVal2=0x1ec1e0), pType=0x0, plFlavor=0x0) returned 0x0 [0044.571] free (_Block=0x23f2108) [0044.572] SafeArrayGetLBound (in: psa=0x367608, nDim=0x1, plLbound=0x27f838 | out: plLbound=0x27f838) returned 0x0 [0044.572] SafeArrayGetUBound (in: psa=0x367608, nDim=0x1, plUbound=0x27f834 | out: plUbound=0x27f834) returned 0x0 [0044.572] SafeArrayGetElement (in: psa=0x367608, rgIndices=0x27f898, pv=0x27f860 | out: pv=0x27f860) returned 0x0 [0044.572] malloc (_Size=0xc) returned 0x23f2108 [0044.572] malloc (_Size=0xc) returned 0x23f2120 [0044.572] SysStringLen (param_1="Process management. ") returned 0x14 [0044.572] free (_Block=0x23f2108) [0044.572] IUnknown:Release (This=0x1ce0cd8) returned 0x0 [0044.572] free (_Block=0x23f21c8) [0044.572] ??1CHString@@QAE@XZ () returned 0x1 [0044.572] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.572] free (_Block=0x23f20f0) [0044.572] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.572] lstrlenW (lpString="Process management. ") returned 20 [0044.572] malloc (_Size=0x2a) returned 0x23f24f8 [0044.572] lstrlenW (lpString="Process management. ") returned 20 [0044.572] free (_Block=0x23f2120) [0044.572] IUnknown:Release (This=0x1ce0890) returned 0x0 [0044.572] free (_Block=0x23f2138) [0044.572] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.572] lstrlenW (lpString="PATH") returned 4 [0044.572] lstrlenW (lpString="WHERE") returned 5 [0044.573] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="WHERE", cchCount1=5, lpString2="PATH", cchCount2=4) returned 3 [0044.573] lstrlenW (lpString="WHERE") returned 5 [0044.573] lstrlenW (lpString="WHERE") returned 5 [0044.573] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="WHERE", cchCount1=5, lpString2="WHERE", cchCount2=5) returned 2 [0044.573] lstrlenW (lpString="/") returned 1 [0044.573] lstrlenW (lpString="Name=\"sam.exe\" call SetPriority 128") returned 35 [0044.573] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="Name=\"sam.exe\" call SetPriority 128", cchCount1=35, lpString2="/", cchCount2=1) returned 3 [0044.573] lstrlenW (lpString="-") returned 1 [0044.573] lstrlenW (lpString="Name=\"sam.exe\" call SetPriority 128") returned 35 [0044.573] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="Name=\"sam.exe\" call SetPriority 128", cchCount1=35, lpString2="-", cchCount2=1) returned 3 [0044.573] lstrlenW (lpString="Name=\"sam.exe\" call SetPriority 128") returned 35 [0044.573] malloc (_Size=0x48) returned 0x23f2530 [0044.573] lstrlenW (lpString="Name=\"sam.exe\" call SetPriority 128") returned 35 [0044.573] lstrlenW (lpString="Select * from Win32_Process") returned 27 [0044.573] malloc (_Size=0x38) returned 0x23f2580 [0044.573] lstrlenW (lpString="Select * from Win32_Process") returned 27 [0044.573] wcstok (in: _String="Select * from Win32_Process", _Delimiter=" ", _Context=0x1988b81e | out: _String="Select", _Context=0x1988b81e) returned="Select" [0044.573] malloc (_Size=0xc) returned 0x23f2138 [0044.573] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x1988b81e | out: _String=0x0, _Context=0x1988b81e) returned="*" [0044.573] lstrlenW (lpString="FROM") returned 4 [0044.573] lstrlenW (lpString="*") returned 1 [0044.573] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="*", cchCount1=1, lpString2="FROM", cchCount2=4) returned 1 [0044.573] malloc (_Size=0xc) returned 0x23f2120 [0044.573] free (_Block=0x23f2138) [0044.573] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x1988b81e | out: _String=0x0, _Context=0x1988b81e) returned="from" [0044.574] lstrlenW (lpString="FROM") returned 4 [0044.574] lstrlenW (lpString="from") returned 4 [0044.574] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="from", cchCount1=4, lpString2="FROM", cchCount2=4) returned 2 [0044.574] malloc (_Size=0xc) returned 0x23f2138 [0044.574] free (_Block=0x23f2120) [0044.574] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x1988b81e | out: _String=0x0, _Context=0x1988b81e) returned="Win32_Process" [0044.574] malloc (_Size=0xc) returned 0x23f2120 [0044.574] free (_Block=0x23f2138) [0044.574] free (_Block=0x23f2580) [0044.574] free (_Block=0x23f2120) [0044.574] lstrlenW (lpString="SET") returned 3 [0044.574] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1=0x0, cchCount1=0, lpString2="SET", cchCount2=3) returned 0 [0044.574] lstrlenW (lpString="CREATE") returned 6 [0044.574] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1=0x0, cchCount1=0, lpString2="CREATE", cchCount2=6) returned 0 [0044.574] free (_Block=0x23f20c0) [0044.574] malloc (_Size=0x4) returned 0x23f2478 [0044.574] lstrlenW (lpString="GET") returned 3 [0044.574] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1=0x0, cchCount1=0, lpString2="GET", cchCount2=3) returned 0 [0044.574] lstrlenW (lpString="LIST") returned 4 [0044.574] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1=0x0, cchCount1=0, lpString2="LIST", cchCount2=4) returned 0 [0044.574] lstrlenW (lpString="ASSOC") returned 5 [0044.574] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1=0x0, cchCount1=0, lpString2="ASSOC", cchCount2=5) returned 0 [0044.574] free (_Block=0x23f2060) [0044.574] malloc (_Size=0xc) returned 0x23f2060 [0044.575] free (_Block=0x3fe88) [0044.575] malloc (_Size=0xc) returned 0x3fe88 [0044.575] ??0CHString@@QAE@XZ () returned 0x27fa9c [0044.575] malloc (_Size=0xc) returned 0x23f20c0 [0044.575] malloc (_Size=0x20) returned 0x332a8 [0044.575] memcpy_s (in: _Destination=0x332a8, _DestinationSize=0x1e, _Source=0x384614, _SourceSize=0x12 | out: _Destination=0x332a8) returned 0x0 [0044.575] lstrlenW (lpString="&") returned 1 [0044.575] lstrlenW (lpString="&") returned 5 [0044.575] lstrlenW (lpString="<") returned 1 [0044.575] lstrlenW (lpString="<") returned 4 [0044.575] lstrlenW (lpString=">") returned 1 [0044.575] lstrlenW (lpString=">") returned 4 [0044.575] lstrlenW (lpString="'") returned 1 [0044.575] lstrlenW (lpString="'") returned 6 [0044.575] lstrlenW (lpString="\"") returned 1 [0044.575] lstrlenW (lpString=""") returned 6 [0044.575] malloc (_Size=0xc) returned 0x23f2120 [0044.575] free (_Block=0x23f20c0) [0044.575] free (_Block=0x332a8) [0044.575] ?Format@CHString@@QAAXPBGZZ () returned 0x23f258c [0044.575] malloc (_Size=0xc) returned 0x23f20c0 [0044.575] malloc (_Size=0xc) returned 0x23f2138 [0044.575] SysStringLen (param_1="") returned 0x0 [0044.575] SysStringLen (param_1="") returned 0x1a [0044.576] free (_Block=0x3fe88) [0044.576] free (_Block=0x23f20c0) [0044.576] free (_Block=0x23f2120) [0044.576] ??1CHString@@QAE@XZ () returned 0x1 [0044.576] WbemLocator:IUnknown:AddRef (This=0x1cb0828) returned 0x3 [0044.576] free (_Block=0x32978) [0044.576] lstrlenW (lpString="") returned 0 [0044.576] lstrlenW (lpString="XDUWTFONO") returned 9 [0044.576] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="XDUWTFONO", cchCount1=9, lpString2="", cchCount2=0) returned 3 [0044.576] lstrlenW (lpString="XDUWTFONO") returned 9 [0044.576] malloc (_Size=0x14) returned 0x3eb88 [0044.576] lstrlenW (lpString="XDUWTFONO") returned 9 [0044.576] GetCurrentThreadId () returned 0xb90 [0044.576] GetCurrentProcess () returned 0xffffffff [0044.576] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x28, TokenHandle=0x27f9dc | out: TokenHandle=0x27f9dc*=0x270) returned 1 [0044.576] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x3, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x27f9d8 | out: TokenInformation=0x0, ReturnLength=0x27f9d8) returned 0 [0044.576] malloc (_Size=0x118) returned 0x23f2580 [0044.576] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x3, TokenInformation=0x23f2580, TokenInformationLength=0x118, ReturnLength=0x27f9d8 | out: TokenInformation=0x23f2580, ReturnLength=0x27f9d8) returned 1 [0044.576] AdjustTokenPrivileges (in: TokenHandle=0x270, DisableAllPrivileges=0, NewState=0x23f2580*(PrivilegesCount=0x17, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x8, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x9, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xa, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xb, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xc, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xd, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xe, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0xf, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x11, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x12, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x13, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x16, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x17, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x18, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x19, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x1c, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x1e, Luid.HighPart=0, Attributes=0x3), (Luid.LowPart=0x21, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x22, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x23, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0044.576] free (_Block=0x23f2580) [0044.576] CloseHandle (hObject=0x270) returned 1 [0044.576] lstrlenW (lpString="GET") returned 3 [0044.576] malloc (_Size=0x8) returned 0x23f2488 [0044.576] lstrlenW (lpString="GET") returned 3 [0044.576] malloc (_Size=0xc) returned 0x23f2120 [0044.576] lstrlenA (lpString="") returned 0 [0044.576] malloc (_Size=0x2) returned 0x32978 [0044.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1a26a2, cbMultiByte=-1, lpWideCharStr=0x32978, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0044.577] free (_Block=0x32978) [0044.577] malloc (_Size=0xc) returned 0x23f20c0 [0044.577] lstrlenA (lpString="") returned 0 [0044.577] malloc (_Size=0x2) returned 0x32978 [0044.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1a26a2, cbMultiByte=-1, lpWideCharStr=0x32978, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0044.577] free (_Block=0x32978) [0044.577] malloc (_Size=0xc) returned 0x23f20f0 [0044.577] lstrlenA (lpString="") returned 0 [0044.577] malloc (_Size=0x2) returned 0x32978 [0044.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1a26a2, cbMultiByte=-1, lpWideCharStr=0x32978, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0044.577] free (_Block=0x32978) [0044.577] malloc (_Size=0xc) returned 0x23f21c8 [0044.577] lstrlenA (lpString="") returned 0 [0044.577] malloc (_Size=0x2) returned 0x32978 [0044.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1a26a2, cbMultiByte=-1, lpWideCharStr=0x32978, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0044.577] free (_Block=0x32978) [0044.577] free (_Block=0x23f2120) [0044.577] malloc (_Size=0xc) returned 0x23f2120 [0044.577] lstrlenW (lpString="Select * from Win32_Process") returned 27 [0044.577] malloc (_Size=0x38) returned 0x23f2580 [0044.577] lstrlenW (lpString="Select * from Win32_Process") returned 27 [0044.577] wcstok (in: _String="Select * from Win32_Process", _Delimiter=" ", _Context=0x1988f8f2 | out: _String="Select", _Context=0x1988f8f2) returned="Select" [0044.577] malloc (_Size=0xc) returned 0x23f2108 [0044.577] free (_Block=0x23f20c0) [0044.578] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x1988f8f2 | out: _String=0x0, _Context=0x1988f8f2) returned="*" [0044.578] lstrlenW (lpString="FROM") returned 4 [0044.578] lstrlenW (lpString="*") returned 1 [0044.578] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="*", cchCount1=1, lpString2="FROM", cchCount2=4) returned 1 [0044.578] malloc (_Size=0xc) returned 0x23f20c0 [0044.578] free (_Block=0x23f2108) [0044.578] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x1988f8f2 | out: _String=0x0, _Context=0x1988f8f2) returned="from" [0044.578] lstrlenW (lpString="FROM") returned 4 [0044.578] lstrlenW (lpString="from") returned 4 [0044.578] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="from", cchCount1=4, lpString2="FROM", cchCount2=4) returned 2 [0044.578] malloc (_Size=0xc) returned 0x23f2108 [0044.578] free (_Block=0x23f20c0) [0044.578] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x1988f8f2 | out: _String=0x0, _Context=0x1988f8f2) returned="Win32_Process" [0044.578] malloc (_Size=0xc) returned 0x23f20c0 [0044.578] free (_Block=0x23f2108) [0044.578] free (_Block=0x23f2580) [0044.578] malloc (_Size=0xc) returned 0x23f2108 [0044.579] lstrlenA (lpString=" FROM ") returned 6 [0044.579] malloc (_Size=0xe) returned 0x23f2168 [0044.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1a3ac8, cbMultiByte=-1, lpWideCharStr=0x23f2168, cchWideChar=7 | out: lpWideCharStr=" FROM ") returned 7 [0044.579] free (_Block=0x23f2168) [0044.579] malloc (_Size=0xc) returned 0x23f2168 [0044.579] lstrlenA (lpString="SELECT ") returned 7 [0044.579] malloc (_Size=0x10) returned 0x23f2180 [0044.579] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1a3ab0, cbMultiByte=-1, lpWideCharStr=0x23f2180, cchWideChar=8 | out: lpWideCharStr="SELECT ") returned 8 [0044.579] free (_Block=0x23f2180) [0044.579] malloc (_Size=0xc) returned 0x23f2180 [0044.579] SysStringLen (param_1="SELECT ") returned 0x7 [0044.579] SysStringLen (param_1="*") returned 0x1 [0044.579] malloc (_Size=0xc) returned 0x23f2198 [0044.579] SysStringLen (param_1="SELECT *") returned 0x8 [0044.579] SysStringLen (param_1=" FROM ") returned 0x6 [0044.579] malloc (_Size=0xc) returned 0x23f21b0 [0044.579] SysStringLen (param_1="SELECT * FROM ") returned 0xe [0044.579] SysStringLen (param_1="Win32_Process") returned 0xd [0044.579] free (_Block=0x23f20f0) [0044.580] free (_Block=0x23f2198) [0044.580] free (_Block=0x23f2180) [0044.580] free (_Block=0x23f2168) [0044.580] free (_Block=0x23f2108) [0044.580] malloc (_Size=0xc) returned 0x23f2108 [0044.580] malloc (_Size=0xc) returned 0x23f2168 [0044.580] lstrlenA (lpString=" WHERE ") returned 7 [0044.580] malloc (_Size=0x10) returned 0x23f2180 [0044.580] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1a3a8c, cbMultiByte=-1, lpWideCharStr=0x23f2180, cchWideChar=8 | out: lpWideCharStr=" WHERE ") returned 8 [0044.580] free (_Block=0x23f2180) [0044.580] malloc (_Size=0xc) returned 0x23f2180 [0044.580] SysStringLen (param_1=" WHERE ") returned 0x7 [0044.580] SysStringLen (param_1="Name=\"sam.exe\" call SetPriority 128") returned 0x23 [0044.580] malloc (_Size=0xc) returned 0x23f2198 [0044.580] SysStringLen (param_1="SELECT * FROM Win32_Process") returned 0x1b [0044.580] SysStringLen (param_1=" WHERE Name=\"sam.exe\" call SetPriority 128") returned 0x2a [0044.580] free (_Block=0x23f21b0) [0044.580] free (_Block=0x23f2180) [0044.580] free (_Block=0x23f2168) [0044.581] free (_Block=0x23f2108) [0044.581] ??0CHString@@QAE@XZ () returned 0x27b920 [0044.581] GetCurrentThreadId () returned 0xb90 [0044.581] CoCreateInstance (in: rclsid=0x1a6ce0*(Data1=0x8d1c559d, Data2=0x84f0, Data3=0x4bb3, Data4=([0]=0xa7, [1]=0xd5, [2]=0x56, [3]=0xa7, [4]=0x43, [5]=0x5a, [6]=0x9b, [7]=0xa6)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x1a6d00*(Data1=0xbfbf883a, Data2=0xcad7, Data3=0x11d3, Data4=([0]=0xa1, [1]=0x1b, [2]=0x0, [3]=0x10, [4]=0x5a, [5]=0x1f, [6]=0x51, [7]=0x5a)), ppv=0x1ec1fc | out: ppv=0x1ec1fc*=0x1cbc7c8) returned 0x0 [0044.585] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.585] ??0CHString@@QAE@XZ () returned 0x27b920 [0044.585] GetCurrentThreadId () returned 0xb90 [0044.585] malloc (_Size=0xc) returned 0x23f2108 [0044.585] malloc (_Size=0xc) returned 0x23f2168 [0044.585] malloc (_Size=0xc) returned 0x23f2180 [0044.585] malloc (_Size=0xc) returned 0x23f21b0 [0044.585] malloc (_Size=0xc) returned 0x23f20f0 [0044.585] SysStringLen (param_1="\\\\") returned 0x2 [0044.585] SysStringLen (param_1="XDUWTFONO") returned 0x9 [0044.585] malloc (_Size=0xc) returned 0x23f21e0 [0044.585] SysStringLen (param_1="\\\\XDUWTFONO") returned 0xb [0044.585] SysStringLen (param_1="\\") returned 0x1 [0044.585] malloc (_Size=0xc) returned 0x23f21f8 [0044.585] SysStringLen (param_1="\\\\XDUWTFONO\\") returned 0xc [0044.585] SysStringLen (param_1="ROOT\\CIMV2") returned 0xa [0044.586] free (_Block=0x23f21e0) [0044.586] free (_Block=0x23f20f0) [0044.586] free (_Block=0x23f21b0) [0044.586] free (_Block=0x23f2180) [0044.586] free (_Block=0x23f2168) [0044.586] free (_Block=0x23f2108) [0044.586] malloc (_Size=0xc) returned 0x23f2108 [0044.586] malloc (_Size=0xc) returned 0x23f2168 [0044.586] malloc (_Size=0xc) returned 0x23f2180 [0044.586] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1cb0828, strNetworkResource="\\\\XDUWTFONO\\ROOT\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="ms_409", lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x1ec204 | out: ppNamespace=0x1ec204*=0x1cbd0bc) returned 0x0 [0044.621] free (_Block=0x23f2180) [0044.621] free (_Block=0x23f2168) [0044.621] free (_Block=0x23f2108) [0044.621] CoSetProxyBlanket (pProxy=0x1cbd0bc, dwAuthnSvc=0xffffffff, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x0) returned 0x0 [0044.621] free (_Block=0x23f21f8) [0044.621] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.621] ??0CHString@@QAE@XZ () returned 0x27b90c [0044.621] GetCurrentThreadId () returned 0xb90 [0044.621] free (_Block=0x23f21c8) [0044.621] malloc (_Size=0xc) returned 0x23f21c8 [0044.621] ??0CHString@@QAE@XZ () returned 0x27b88c [0044.621] GetCurrentThreadId () returned 0xb90 [0044.621] CoCreateInstanceEx (in: Clsid=0x1a6c70*(Data1=0x674b6698, Data2=0xee92, Data3=0x11d0, Data4=([0]=0xad, [1]=0x71, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd8, [6]=0xfd, [7]=0xff)), punkOuter=0x0, dwClsCtx=0x1, pServerInfo=0x0, dwCount=0x1, pResults=0x27b878 | out: pResults=((pIID=0x1a6bd0*(Data1=0x44aca674, Data2=0xe8fc, Data3=0x11d0, Data4=([0]=0xa0, [1]=0x7c, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), pItf=0x1cbc6c8, hr=0x0))) returned 0x0 [0044.621] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.622] malloc (_Size=0xc) returned 0x23f21f8 [0044.622] IWbemServices:ExecQuery (in: This=0x1cbd0bc, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_Process WHERE Name=\"sam.exe\" call SetPriority 128", lFlags=48, pCtx=0x0, ppEnum=0x27b908 | out: ppEnum=0x27b908*=0x1cbd15c) returned 0x0 [0044.633] free (_Block=0x23f21f8) [0044.633] malloc (_Size=0xc) returned 0x23f21f8 [0044.633] WbemContext:IWbemContext:SetValue (This=0x1cbc6c8, wszName="ExcludeSystemProperties", lFlags=0, pValue=0x27b8c0*(varType=0xb, wReserved1=0x23f, wReserved2=0xb938, wReserved3=0x27, varVal1=0x1affff, varVal2=0x1)) returned 0x0 [0044.633] free (_Block=0x23f21f8) [0044.633] CoSetProxyBlanket (pProxy=0x1cbd15c, dwAuthnSvc=0xffffffff, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x0) returned 0x0 [0044.657] IEnumWbemClassObject:Next (in: This=0x1cbd15c, lTimeout=-1, uCount=0x1, apObjects=0x27b904, puReturned=0x27b8fc | out: apObjects=0x27b904*=0x0, puReturned=0x27b8fc*=0x0) returned 0x80041017 [0044.671] _CxxThrowException () [0044.672] IUnknown:Release (This=0x1cbd15c) returned 0x0 [0044.674] malloc (_Size=0x10) returned 0x23f21f8 [0044.674] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.674] free (_Block=0x23f21c8) [0044.674] free (_Block=0x23f2198) [0044.674] free (_Block=0x23f20c0) [0044.675] free (_Block=0x23f2120) [0044.675] LoadStringW (in: hInstance=0x0, uID=0xb7f5, lpBuffer=0x27f218, cchBufferMax=1024 | out: lpBuffer="Node - %1\r\n") returned 0xb [0044.675] FormatMessageW (in: dwFlags=0x2500, lpSource=0x27f218, dwMessageId=0x0, dwLanguageId=0x400, lpBuffer=0x27f214, nSize=0x0, Arguments=0x27f200 | out: lpBuffer="⦈8Node - %1\r\n") returned 0x12 [0044.675] malloc (_Size=0xc) returned 0x23f2120 [0044.675] LocalFree (hMem=0x382988) returned 0x0 [0044.675] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="Node - XDUWTFONO\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0044.675] malloc (_Size=0x13) returned 0x3ebc8 [0044.675] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="Node - XDUWTFONO\r\n", cchWideChar=-1, lpMultiByteStr=0x3ebc8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Node - XDUWTFONO\r\n", lpUsedDefaultChar=0x0) returned 19 [0044.675] fprintf (in: _File=0x74eb2940, _Format="%s" | out: _File=0x74eb2940) returned 18 [0044.675] fflush (in: _File=0x74eb2940 | out: _File=0x74eb2940) returned 0 [0044.675] free (_Block=0x3ebc8) [0044.675] malloc (_Size=0xc) returned 0x23f20c0 [0044.675] ??0CHString@@QAE@XZ () returned 0x27f9b8 [0044.675] ?Format@CHString@@QAAXPBGZZ () returned 0x23f3594 [0044.675] malloc (_Size=0xc) returned 0x23f2198 [0044.676] malloc (_Size=0xc) returned 0x23f21c8 [0044.676] SysStringLen (param_1="") returned 0x7 [0044.676] SysStringLen (param_1="0x80041017") returned 0x1d [0044.676] free (_Block=0x23f20c0) [0044.676] free (_Block=0x23f2198) [0044.676] CoCreateInstance (in: rclsid=0x1a6cb0*(Data1=0xeb87e1bd, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x1a6c00*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppv=0x1ec21c | out: ppv=0x1ec21c*=0x1cbcfa0) returned 0x0 [0044.678] WbemStatusCodeText:IWbemStatusCodeText:GetErrorCodeText (in: This=0x1cbcfa0, hRes=0x80041017, LocaleId=0x0, lFlags=0, MessageText=0x27f9d0 | out: MessageText=0x27f9d0*="Invalid query\r\n") returned 0x0 [0044.679] malloc (_Size=0xc) returned 0x23f2198 [0044.679] malloc (_Size=0xc) returned 0x23f20c0 [0044.679] SysStringLen (param_1="0x80041017") returned 0x24 [0044.679] SysStringLen (param_1="") returned 0xd [0044.679] free (_Block=0x23f21c8) [0044.679] free (_Block=0x23f2198) [0044.679] malloc (_Size=0xc) returned 0x23f2198 [0044.679] malloc (_Size=0xc) returned 0x23f21c8 [0044.679] SysStringLen (param_1="0x80041017") returned 0x31 [0044.679] SysStringLen (param_1="Invalid query\r\n") returned 0xf [0044.679] free (_Block=0x23f20c0) [0044.679] free (_Block=0x23f2198) [0044.679] malloc (_Size=0xc) returned 0x23f2198 [0044.679] malloc (_Size=0xc) returned 0x23f20c0 [0044.680] SysStringLen (param_1="0x80041017Invalid query\r\n") returned 0x40 [0044.680] SysStringLen (param_1="") returned 0xe [0044.680] free (_Block=0x23f21c8) [0044.680] free (_Block=0x23f2198) [0044.680] WbemStatusCodeText:IWbemStatusCodeText:GetFacilityCodeText (in: This=0x1cbcfa0, hRes=0x80041017, LocaleId=0x0, lFlags=0, MessageText=0x27f9f4 | out: MessageText=0x27f9f4*="WMI") returned 0x0 [0044.680] malloc (_Size=0xc) returned 0x23f2198 [0044.680] malloc (_Size=0xc) returned 0x23f21c8 [0044.680] SysStringLen (param_1="0x80041017Invalid query\r\n") returned 0x4e [0044.680] SysStringLen (param_1="") returned 0xe [0044.680] free (_Block=0x23f20c0) [0044.680] free (_Block=0x23f2198) [0044.680] malloc (_Size=0xc) returned 0x23f2198 [0044.680] malloc (_Size=0xc) returned 0x23f20c0 [0044.680] SysStringLen (param_1="0x80041017Invalid query\r\n") returned 0x5c [0044.680] SysStringLen (param_1="WMI") returned 0x3 [0044.680] free (_Block=0x23f21c8) [0044.681] free (_Block=0x23f2198) [0044.681] malloc (_Size=0xc) returned 0x23f2198 [0044.681] malloc (_Size=0xc) returned 0x23f21c8 [0044.681] SysStringLen (param_1="0x80041017Invalid query\r\nWMI") returned 0x5f [0044.681] SysStringLen (param_1="") returned 0xf [0044.681] free (_Block=0x23f20c0) [0044.681] free (_Block=0x23f2198) [0044.681] lstrlenW (lpString="WMI") returned 3 [0044.681] lstrlenW (lpString="Wbem") returned 4 [0044.681] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="Wbem", cchCount1=4, lpString2="WMI", cchCount2=3) returned 1 [0044.681] lstrlenW (lpString="WMI") returned 3 [0044.681] lstrlenW (lpString="WMI") returned 3 [0044.681] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="WMI", cchCount1=3, lpString2="WMI", cchCount2=3) returned 2 [0044.681] WbemStatusCodeText:IUnknown:Release (This=0x1cbcfa0) returned 0x0 [0044.681] ??1CHString@@QAE@XZ () returned 0x1 [0044.681] malloc (_Size=0xc) returned 0x23f2198 [0044.681] malloc (_Size=0xc) returned 0x23f20c0 [0044.681] SysStringLen (param_1="0x80041017Invalid query\r\nWMI") returned 0x6e [0044.681] SysStringLen (param_1="") returned 0x8 [0044.681] free (_Block=0x23f21c8) [0044.681] free (_Block=0x23f2198) [0044.682] ??0CHString@@QAE@XZ () returned 0x27f930 [0044.682] malloc (_Size=0xc) returned 0x23f2198 [0044.682] malloc (_Size=0xc) returned 0x23f21c8 [0044.682] SysStringLen (param_1="") returned 0x0 [0044.682] free (_Block=0x23f2198) [0044.682] CoCreateInstance (in: rclsid=0x1a6cb0*(Data1=0xeb87e1bd, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x1a6c00*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppv=0x1ec21c | out: ppv=0x1ec21c*=0x1cbcfa0) returned 0x0 [0044.682] WbemStatusCodeText:IWbemStatusCodeText:GetErrorCodeText (in: This=0x1cbcfa0, hRes=0x80041017, LocaleId=0x0, lFlags=0, MessageText=0x27f948 | out: MessageText=0x27f948*="Invalid query\r\n") returned 0x0 [0044.682] free (_Block=0x23f21c8) [0044.682] malloc (_Size=0xc) returned 0x23f21c8 [0044.682] WbemStatusCodeText:IWbemStatusCodeText:GetFacilityCodeText (in: This=0x1cbcfa0, hRes=0x80041017, LocaleId=0x0, lFlags=0, MessageText=0x27f96c | out: MessageText=0x27f96c*="WMI") returned 0x0 [0044.682] malloc (_Size=0xc) returned 0x23f2198 [0044.682] lstrlenW (lpString="WMI") returned 3 [0044.682] lstrlenW (lpString="Wbem") returned 4 [0044.682] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="Wbem", cchCount1=4, lpString2="WMI", cchCount2=3) returned 1 [0044.682] lstrlenW (lpString="WMI") returned 3 [0044.682] lstrlenW (lpString="WMI") returned 3 [0044.682] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="WMI", cchCount1=3, lpString2="WMI", cchCount2=3) returned 2 [0044.682] WbemStatusCodeText:IUnknown:Release (This=0x1cbcfa0) returned 0x0 [0044.682] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.682] LoadStringW (in: hInstance=0x0, uID=0xb7f3, lpBuffer=0x27f198, cchBufferMax=1024 | out: lpBuffer="ERROR:\r\nDescription = %1") returned 0x18 [0044.682] FormatMessageW (in: dwFlags=0x2500, lpSource=0x27f198, dwMessageId=0x0, dwLanguageId=0x400, lpBuffer=0x27f194, nSize=0x0, Arguments=0x27f180 | out: lpBuffer="Ɉ7ERROR:\r\nDescription = %1") returned 0x25 [0044.682] malloc (_Size=0xc) returned 0x23f2108 [0044.682] LocalFree (hMem=0x370248) returned 0x0 [0044.683] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="ERROR:\r\nDescription = Invalid query\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0044.683] malloc (_Size=0x26) returned 0x23f3588 [0044.683] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="ERROR:\r\nDescription = Invalid query\r\n", cchWideChar=-1, lpMultiByteStr=0x23f3588, cbMultiByte=38, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ERROR:\r\nDescription = Invalid query\r\n", lpUsedDefaultChar=0x0) returned 38 [0044.683] fprintf (in: _File=0x74eb2940, _Format="%s" | out: _File=0x74eb2940) returned 37 [0044.683] fflush (in: _File=0x74eb2940 | out: _File=0x74eb2940) returned 0 [0044.683] free (_Block=0x23f3588) [0044.683] free (_Block=0x23f2108) [0044.683] free (_Block=0x23f2198) [0044.683] free (_Block=0x23f21c8) [0044.683] malloc (_Size=0xc) returned 0x23f21c8 [0044.683] SysStringLen (param_1="") returned 0x1a [0044.683] SysStringLen (param_1="0x80041017Invalid query\r\nWMI") returned 0x76 [0044.683] free (_Block=0x23f2138) [0044.683] free (_Block=0x23f20c0) [0044.683] free (_Block=0x23f2120) [0044.683] ??0CHString@@QAE@PBG@Z () returned 0x27fa30 [0044.683] ??YCHString@@QAEABV0@PBG@Z () returned 0x27fa30 [0044.683] GetCurrentThreadId () returned 0xb90 [0044.683] ??1CHString@@QAE@XZ () returned 0x1 [0044.683] malloc (_Size=0xc) returned 0x23f2120 [0044.683] malloc (_Size=0xc) returned 0x23f20c0 [0044.683] SysStringLen (param_1="0x80041017Invalid query\r\nWMI") returned 0x90 [0044.683] SysStringLen (param_1="") returned 0xa [0044.684] free (_Block=0x23f21c8) [0044.684] free (_Block=0x23f2120) [0044.684] ??0CHString@@QAE@XZ () returned 0x27fa0c [0044.684] malloc (_Size=0xc) returned 0x23f2120 [0044.684] malloc (_Size=0x20) returned 0x332a8 [0044.684] memcpy_s (in: _Destination=0x332a8, _DestinationSize=0x1e, _Source=0x3846dc, _SourceSize=0x12 | out: _Destination=0x332a8) returned 0x0 [0044.684] lstrlenW (lpString="&") returned 1 [0044.684] lstrlenW (lpString="&") returned 5 [0044.684] lstrlenW (lpString="<") returned 1 [0044.684] lstrlenW (lpString="<") returned 4 [0044.684] lstrlenW (lpString=">") returned 1 [0044.684] lstrlenW (lpString=">") returned 4 [0044.684] lstrlenW (lpString="'") returned 1 [0044.684] lstrlenW (lpString="'") returned 6 [0044.684] lstrlenW (lpString="\"") returned 1 [0044.684] lstrlenW (lpString=""") returned 6 [0044.684] malloc (_Size=0xc) returned 0x23f21c8 [0044.684] free (_Block=0x23f2120) [0044.684] free (_Block=0x332a8) [0044.684] ?Format@CHString@@QAAXPBGZZ () returned 0x23f3594 [0044.684] malloc (_Size=0xc) returned 0x23f2120 [0044.684] free (_Block=0x23f2060) [0044.685] free (_Block=0x23f21c8) [0044.685] ??1CHString@@QAE@XZ () returned 0x1 [0044.685] ??0CHString@@QAE@XZ () returned 0x27fa08 [0044.685] malloc (_Size=0xc) returned 0x23f21c8 [0044.685] malloc (_Size=0xc) returned 0x23f2060 [0044.685] malloc (_Size=0x70) returned 0x23f3588 [0044.685] memcpy_s (in: _Destination=0x23f3588, _DestinationSize=0x6e, _Source=0x373e94, _SourceSize=0x6a | out: _Destination=0x23f3588) returned 0x0 [0044.685] lstrlenW (lpString="&") returned 1 [0044.685] lstrlenW (lpString="&") returned 5 [0044.685] lstrlenW (lpString="<") returned 1 [0044.685] lstrlenW (lpString="<") returned 4 [0044.685] lstrlenW (lpString=">") returned 1 [0044.685] lstrlenW (lpString=">") returned 4 [0044.685] lstrlenW (lpString="'") returned 1 [0044.685] lstrlenW (lpString="'") returned 6 [0044.685] lstrlenW (lpString="\"") returned 1 [0044.685] lstrlenW (lpString=""") returned 6 [0044.685] malloc (_Size=0xa6) returned 0x23f3600 [0044.685] memcpy_s (in: _Destination=0x23f3600, _DestinationSize=0xa6, _Source=0x23f3588, _SourceSize=0x6a | out: _Destination=0x23f3600) returned 0x0 [0044.685] free (_Block=0x23f3588) [0044.685] memmove_s (in: _Destination=0x23f3638, _DestinationSize=0x6c, _Source=0x23f362e, _SourceSize=0x3c | out: _Destination=0x23f3638) returned 0x0 [0044.685] memcpy_s (in: _Destination=0x23f362c, _DestinationSize=0x78, _Source=0x1a587c, _SourceSize=0xc | out: _Destination=0x23f362c) returned 0x0 [0044.685] memmove_s (in: _Destination=0x23f3654, _DestinationSize=0x50, _Source=0x23f364a, _SourceSize=0x2a | out: _Destination=0x23f3654) returned 0x0 [0044.685] memcpy_s (in: _Destination=0x23f3648, _DestinationSize=0x5c, _Source=0x1a587c, _SourceSize=0xc | out: _Destination=0x23f3648) returned 0x0 [0044.685] malloc (_Size=0xc) returned 0x23f2138 [0044.685] free (_Block=0x23f2060) [0044.685] free (_Block=0x23f3600) [0044.685] ?Format@CHString@@QAAXPBGZZ () returned 0x23f3594 [0044.685] malloc (_Size=0xc) returned 0x23f2060 [0044.685] malloc (_Size=0xc) returned 0x23f2198 [0044.685] SysStringLen (param_1="") returned 0x9 [0044.686] SysStringLen (param_1=" PROCESS WHERE Name=\\"sam.exe\\" call SetPriority 128") returned 0x5a [0044.686] free (_Block=0x23f21c8) [0044.686] free (_Block=0x23f2060) [0044.686] ??0CHString@@QAE@XZ () returned 0x27f9d0 [0044.686] malloc (_Size=0xc) returned 0x23f2060 [0044.686] ??0CHString@@QAE@XZ () returned 0x27f964 [0044.686] malloc (_Size=0xc) returned 0x23f21c8 [0044.686] malloc (_Size=0x4) returned 0x32978 [0044.686] memmove_s (in: _Destination=0x32978, _DestinationSize=0x4, _Source=0x32a00, _SourceSize=0x4 | out: _Destination=0x32978) returned 0x0 [0044.686] malloc (_Size=0xc) returned 0x23f2108 [0044.686] malloc (_Size=0x20) returned 0x332a8 [0044.686] memcpy_s (in: _Destination=0x332a8, _DestinationSize=0x1e, _Source=0x3843e4, _SourceSize=0x12 | out: _Destination=0x332a8) returned 0x0 [0044.686] lstrlenW (lpString="&") returned 1 [0044.686] lstrlenW (lpString="&") returned 5 [0044.686] lstrlenW (lpString="<") returned 1 [0044.686] lstrlenW (lpString="<") returned 4 [0044.686] lstrlenW (lpString=">") returned 1 [0044.686] lstrlenW (lpString=">") returned 4 [0044.686] lstrlenW (lpString="'") returned 1 [0044.686] lstrlenW (lpString="'") returned 6 [0044.686] lstrlenW (lpString="\"") returned 1 [0044.686] lstrlenW (lpString=""") returned 6 [0044.686] malloc (_Size=0xc) returned 0x23f2168 [0044.686] free (_Block=0x23f2108) [0044.687] free (_Block=0x332a8) [0044.687] ?Format@CHString@@QAAXPBGZZ () returned 0x23f3954 [0044.687] malloc (_Size=0xc) returned 0x23f2108 [0044.687] malloc (_Size=0xc) returned 0x23f2180 [0044.687] SysStringLen (param_1="") returned 0xa [0044.687] SysStringLen (param_1="XDUWTFONO") returned 0x16 [0044.687] free (_Block=0x23f21c8) [0044.687] free (_Block=0x23f2108) [0044.687] malloc (_Size=0xc) returned 0x23f2108 [0044.687] malloc (_Size=0xc) returned 0x23f21c8 [0044.687] SysStringLen (param_1="XDUWTFONO") returned 0x20 [0044.687] SysStringLen (param_1="") returned 0xb [0044.687] free (_Block=0x23f2180) [0044.687] free (_Block=0x23f2108) [0044.687] free (_Block=0x23f2168) [0044.687] free (_Block=0x32978) [0044.687] ??1CHString@@QAE@XZ () returned 0x1 [0044.687] malloc (_Size=0xc) returned 0x23f2168 [0044.687] SysStringLen (param_1="") returned 0x17 [0044.687] SysStringLen (param_1="XDUWTFONO") returned 0x2b [0044.688] free (_Block=0x23f2060) [0044.688] lstrlenW (lpString="LIST") returned 4 [0044.688] lstrlenW (lpString="GET") returned 3 [0044.688] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="GET", cchCount1=3, lpString2="LIST", cchCount2=4) returned 1 [0044.688] malloc (_Size=0xc) returned 0x23f2060 [0044.688] malloc (_Size=0xc) returned 0x23f2108 [0044.688] SysStringLen (param_1="XDUWTFONO") returned 0x42 [0044.688] SysStringLen (param_1="") returned 0x18 [0044.688] free (_Block=0x23f2168) [0044.688] free (_Block=0x23f2060) [0044.688] free (_Block=0x23f21c8) [0044.688] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0044.688] malloc (_Size=0xc) returned 0x23f21c8 [0044.688] SysStringLen (param_1=" PROCESS WHERE Name=\\"sam.exe\\" call SetPriority 128") returned 0x63 [0044.688] SysStringLen (param_1="XDUWTFONO") returned 0x5a [0044.688] free (_Block=0x23f2198) [0044.688] ??0CHString@@QAE@XZ () returned 0x27f998 [0044.688] malloc (_Size=0xc) returned 0x23f2198 [0044.688] malloc (_Size=0xc) returned 0x23f2060 [0044.688] malloc (_Size=0xc) returned 0x23f2168 [0044.688] malloc (_Size=0xc) returned 0x23f2180 [0044.689] malloc (_Size=0xc) returned 0x23f21b0 [0044.689] malloc (_Size=0xc) returned 0x23f20f0 [0044.689] malloc (_Size=0xc) returned 0x23f21e0 [0044.689] malloc (_Size=0xc) returned 0x23f2210 [0044.689] memcpy_s (in: _Destination=0x27f928, _DestinationSize=0xe, _Source=0x38472c, _SourceSize=0xc | out: _Destination=0x27f928) returned 0x0 [0044.689] lstrlenW (lpString="&") returned 1 [0044.689] lstrlenW (lpString="&") returned 5 [0044.689] lstrlenW (lpString="<") returned 1 [0044.689] lstrlenW (lpString="<") returned 4 [0044.689] lstrlenW (lpString=">") returned 1 [0044.689] lstrlenW (lpString=">") returned 4 [0044.689] lstrlenW (lpString="'") returned 1 [0044.689] lstrlenW (lpString="'") returned 6 [0044.689] lstrlenW (lpString="\"") returned 1 [0044.689] lstrlenW (lpString=""") returned 6 [0044.689] malloc (_Size=0xc) returned 0x23f2228 [0044.689] free (_Block=0x23f2210) [0044.689] malloc (_Size=0xc) returned 0x23f2210 [0044.689] memcpy_s (in: _Destination=0x27f928, _DestinationSize=0xe, _Source=0x38472c, _SourceSize=0xc | out: _Destination=0x27f928) returned 0x0 [0044.689] lstrlenW (lpString="&") returned 1 [0044.689] lstrlenW (lpString="&") returned 5 [0044.689] lstrlenW (lpString="<") returned 1 [0044.689] lstrlenW (lpString="<") returned 4 [0044.689] lstrlenW (lpString=">") returned 1 [0044.689] lstrlenW (lpString=">") returned 4 [0044.689] lstrlenW (lpString="'") returned 1 [0044.689] lstrlenW (lpString="'") returned 6 [0044.689] lstrlenW (lpString="\"") returned 1 [0044.690] lstrlenW (lpString=""") returned 6 [0044.690] malloc (_Size=0xc) returned 0x23f2240 [0044.690] free (_Block=0x23f2210) [0044.690] malloc (_Size=0xc) returned 0x23f2210 [0044.690] memcpy_s (in: _Destination=0x27f928, _DestinationSize=0xe, _Source=0x38472c, _SourceSize=0x6 | out: _Destination=0x27f928) returned 0x0 [0044.690] lstrlenW (lpString="&") returned 1 [0044.690] lstrlenW (lpString="&") returned 5 [0044.690] lstrlenW (lpString="<") returned 1 [0044.690] lstrlenW (lpString="<") returned 4 [0044.690] lstrlenW (lpString=">") returned 1 [0044.690] lstrlenW (lpString=">") returned 4 [0044.690] lstrlenW (lpString="'") returned 1 [0044.690] lstrlenW (lpString="'") returned 6 [0044.690] lstrlenW (lpString="\"") returned 1 [0044.690] lstrlenW (lpString=""") returned 6 [0044.690] malloc (_Size=0xc) returned 0x23f2258 [0044.690] free (_Block=0x23f2210) [0044.690] malloc (_Size=0xc) returned 0x23f2210 [0044.690] memcpy_s (in: _Destination=0x27f928, _DestinationSize=0xe, _Source=0x38472c, _SourceSize=0x6 | out: _Destination=0x27f928) returned 0x0 [0044.690] lstrlenW (lpString="&") returned 1 [0044.690] lstrlenW (lpString="&") returned 5 [0044.690] lstrlenW (lpString="<") returned 1 [0044.690] lstrlenW (lpString="<") returned 4 [0044.690] lstrlenW (lpString=">") returned 1 [0044.690] lstrlenW (lpString=">") returned 4 [0044.690] lstrlenW (lpString="'") returned 1 [0044.690] lstrlenW (lpString="'") returned 6 [0044.690] lstrlenW (lpString="\"") returned 1 [0044.691] lstrlenW (lpString=""") returned 6 [0044.691] malloc (_Size=0xc) returned 0x23f2270 [0044.691] free (_Block=0x23f2210) [0044.691] malloc (_Size=0xc) returned 0x23f2210 [0044.691] malloc (_Size=0x20) returned 0x332a8 [0044.691] memcpy_s (in: _Destination=0x332a8, _DestinationSize=0x1e, _Source=0x38472c, _SourceSize=0x14 | out: _Destination=0x332a8) returned 0x0 [0044.691] lstrlenW (lpString="&") returned 1 [0044.691] lstrlenW (lpString="&") returned 5 [0044.691] lstrlenW (lpString="<") returned 1 [0044.691] lstrlenW (lpString="<") returned 4 [0044.691] lstrlenW (lpString=">") returned 1 [0044.691] lstrlenW (lpString=">") returned 4 [0044.691] lstrlenW (lpString="'") returned 1 [0044.691] lstrlenW (lpString="'") returned 6 [0044.691] lstrlenW (lpString="\"") returned 1 [0044.691] lstrlenW (lpString=""") returned 6 [0044.691] malloc (_Size=0xc) returned 0x23f2288 [0044.691] free (_Block=0x23f2210) [0044.691] free (_Block=0x332a8) [0044.691] malloc (_Size=0xc) returned 0x23f2210 [0044.691] malloc (_Size=0x20) returned 0x332a8 [0044.691] memcpy_s (in: _Destination=0x332a8, _DestinationSize=0x1e, _Source=0x38472c, _SourceSize=0x10 | out: _Destination=0x332a8) returned 0x0 [0044.691] lstrlenW (lpString="&") returned 1 [0044.691] lstrlenW (lpString="&") returned 5 [0044.691] lstrlenW (lpString="<") returned 1 [0044.691] lstrlenW (lpString="<") returned 4 [0044.691] lstrlenW (lpString=">") returned 1 [0044.691] lstrlenW (lpString=">") returned 4 [0044.691] lstrlenW (lpString="'") returned 1 [0044.692] lstrlenW (lpString="'") returned 6 [0044.692] lstrlenW (lpString="\"") returned 1 [0044.692] lstrlenW (lpString=""") returned 6 [0044.692] malloc (_Size=0xc) returned 0x23f22a0 [0044.692] free (_Block=0x23f2210) [0044.692] free (_Block=0x332a8) [0044.692] malloc (_Size=0xc) returned 0x23f2210 [0044.692] memcpy_s (in: _Destination=0x27f928, _DestinationSize=0xe, _Source=0x38472c, _SourceSize=0xc | out: _Destination=0x27f928) returned 0x0 [0044.692] lstrlenW (lpString="&") returned 1 [0044.692] lstrlenW (lpString="&") returned 5 [0044.692] lstrlenW (lpString="<") returned 1 [0044.692] lstrlenW (lpString="<") returned 4 [0044.692] lstrlenW (lpString=">") returned 1 [0044.692] lstrlenW (lpString=">") returned 4 [0044.692] lstrlenW (lpString="'") returned 1 [0044.692] lstrlenW (lpString="'") returned 6 [0044.692] lstrlenW (lpString="\"") returned 1 [0044.692] lstrlenW (lpString=""") returned 6 [0044.692] malloc (_Size=0xc) returned 0x23f22b8 [0044.692] free (_Block=0x23f2210) [0044.692] ?Format@CHString@@QAAXPBGZZ () returned 0x23f3954 [0044.693] malloc (_Size=0xc) returned 0x23f2210 [0044.693] ??1CHString@@QAE@XZ () returned 0x1 [0044.693] free (_Block=0x23f22b8) [0044.693] free (_Block=0x23f22a0) [0044.693] free (_Block=0x23f2288) [0044.693] free (_Block=0x23f21e0) [0044.693] free (_Block=0x23f2270) [0044.693] free (_Block=0x23f2228) [0044.693] free (_Block=0x23f2240) [0044.693] free (_Block=0x23f20f0) [0044.693] free (_Block=0x23f21b0) [0044.694] free (_Block=0x23f2258) [0044.694] free (_Block=0x23f2180) [0044.694] free (_Block=0x23f2168) [0044.694] free (_Block=0x23f2198) [0044.694] free (_Block=0x23f2060) [0044.694] malloc (_Size=0xc) returned 0x23f2060 [0044.694] SysStringLen (param_1=" PROCESS WHERE Name=\\"sam.exe\\" call SetPriority 128XDUWTFONO") returned 0xbd [0044.694] SysStringLen (param_1="root\\cimv2root\\cliIMPERSONATEPKTPRIVACYms_409ENABLEOFFN/AOFFOFFSTDOUTSTDOUTN/AON") returned 0x173 [0044.694] free (_Block=0x23f21c8) [0044.694] malloc (_Size=0xc) returned 0x23f21c8 [0044.694] malloc (_Size=0xc) returned 0x23f2198 [0044.694] SysStringLen (param_1=" PROCESS WHERE Name=\\"sam.exe\\" call SetPriority 128XDUWTFONOroot\\cimv2root\\cliIMPERSONATEPKTPRIVACYms_409ENABLEOFFN/AOFFOFFSTDOUTSTDOUTN/AON") returned 0x230 [0044.694] SysStringLen (param_1="") returned 0xa [0044.694] free (_Block=0x23f2060) [0044.694] free (_Block=0x23f21c8) [0044.694] free (_Block=0x23f2138) [0044.694] free (_Block=0x23f2108) [0044.695] free (_Block=0x23f2210) [0044.695] ??1CHString@@QAE@XZ () returned 0x1 [0044.695] malloc (_Size=0xc) returned 0x23f2210 [0044.695] SysStringLen (param_1="") returned 0x0 [0044.695] SysStringLen (param_1="") returned 0x5f [0044.695] free (_Block=0x3fe58) [0044.695] malloc (_Size=0xc) returned 0x3fe58 [0044.695] SysStringLen (param_1="") returned 0x5f [0044.695] SysStringLen (param_1=" PROCESS WHERE Name=\\"sam.exe\\" call SetPriority 128XDUWTFONOroot\\cimv2root\\cliIMPERSONATEPKTPRIVACYms_409ENABLEOFFN/AOFFOFFSTDOUTSTDOUTN/AON") returned 0x23a [0044.695] free (_Block=0x23f2210) [0044.695] WbemLocator:IUnknown:Release (This=0x1cbd0bc) returned 0x0 [0044.695] ?Empty@CHString@@QAEXXZ () returned 0x74ab0504 [0044.695] free (_Block=0x23f21f8) [0044.695] malloc (_Size=0xc) returned 0x23f21f8 [0044.696] SysStringLen (param_1="") returned 0x0 [0044.696] SysStringLen (param_1="0x80041017Invalid query\r\nWMI") returned 0x9a [0044.696] free (_Block=0x3fe70) [0044.697] _kbhit () returned 0x0 [0044.698] malloc (_Size=0xc) returned 0x3fe70 [0044.698] SysStringLen (param_1=" PROCESS WHERE Name=\\"sam.exe\\" call SetPriority 128XDUWTFONOroot\\cimv2root\\cliIMPERSONATEPKTPRIVACYms_409ENABLEOFFN/AOFFOFFSTDOUTSTDOUTN/AON") returned 0x299 [0044.698] SysStringLen (param_1="0x80041017Invalid query\r\nWMI") returned 0x9a [0044.699] free (_Block=0x3fe58) [0044.699] malloc (_Size=0xc) returned 0x3fe58 [0044.699] malloc (_Size=0xc) returned 0x3fe88 [0044.699] SysStringLen (param_1=" PROCESS WHERE Name=\\"sam.exe\\" call SetPriority 128XDUWTFONOroot\\cimv2root\\cliIMPERSONATEPKTPRIVACYms_409ENABLEOFFN/AOFFOFFSTDOUTSTDOUTN/AON0x80041017Invalid query\r\nWMI") returned 0x333 [0044.699] SysStringLen (param_1="") returned 0xa [0044.699] free (_Block=0x3fe70) [0044.699] free (_Block=0x3fe58) [0044.699] GetCurrentThreadId () returned 0xb90 [0044.699] ??0CHString@@QAE@PBG@Z () returned 0x27fa10 [0044.699] ??YCHString@@QAEABV0@PBG@Z () returned 0x27fa10 [0044.699] lstrlenW (lpString="LIST") returned 4 [0044.699] lstrlenW (lpString="GET") returned 3 [0044.699] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="GET", cchCount1=3, lpString2="LIST", cchCount2=4) returned 1 [0044.699] lstrlenW (lpString="ASSOC") returned 5 [0044.699] lstrlenW (lpString="GET") returned 3 [0044.699] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="GET", cchCount1=3, lpString2="ASSOC", cchCount2=5) returned 3 [0044.699] lstrlenW (lpString="GET") returned 3 [0044.699] lstrlenW (lpString="GET") returned 3 [0044.699] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="GET", cchCount1=3, lpString2="GET", cchCount2=3) returned 2 [0044.700] malloc (_Size=0x20a) returned 0x23f3620 [0044.700] GetSystemDirectoryW (in: lpBuffer=0x23f3620, uSize=0x105 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0044.700] free (_Block=0x23f3620) [0044.700] malloc (_Size=0xc) returned 0x3fe58 [0044.700] malloc (_Size=0xc) returned 0x3fe70 [0044.700] malloc (_Size=0xc) returned 0x23f2210 [0044.700] SysStringLen (param_1="C:\\Windows\\system32") returned 0x13 [0044.700] SysStringLen (param_1="\\wbem\\") returned 0x6 [0044.700] free (_Block=0x3fe58) [0044.700] free (_Block=0x3fe70) [0044.700] SysStringByteLen (bstr="C:\\Windows\\system32\\wbem\\") returned 0x32 [0044.700] free (_Block=0x23f2210) [0044.700] malloc (_Size=0xc) returned 0x23f2210 [0044.700] malloc (_Size=0xc) returned 0x23f2108 [0044.700] malloc (_Size=0xc) returned 0x23f2138 [0044.700] malloc (_Size=0xc) returned 0x23f21c8 [0044.700] malloc (_Size=0xc) returned 0x23f2060 [0044.700] malloc (_Size=0xc) returned 0x23f2168 [0044.700] lstrlenW (lpString="TABLE") returned 5 [0044.700] lstrlenW (lpString="CSV") returned 3 [0044.700] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="CSV", cchCount1=3, lpString2="TABLE", cchCount2=5) returned 1 [0044.700] lstrlenW (lpString="TABLE") returned 5 [0044.700] lstrlenW (lpString="HFORM") returned 5 [0044.701] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="HFORM", cchCount1=5, lpString2="TABLE", cchCount2=5) returned 1 [0044.701] lstrlenW (lpString="TABLE") returned 5 [0044.701] lstrlenW (lpString="HTABLE") returned 6 [0044.701] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="HTABLE", cchCount1=6, lpString2="TABLE", cchCount2=5) returned 1 [0044.701] lstrlenW (lpString="TABLE") returned 5 [0044.701] lstrlenW (lpString="LIST") returned 4 [0044.701] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="LIST", cchCount1=4, lpString2="TABLE", cchCount2=5) returned 1 [0044.701] lstrlenW (lpString="TABLE") returned 5 [0044.701] lstrlenW (lpString="MOF") returned 3 [0044.701] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="MOF", cchCount1=3, lpString2="TABLE", cchCount2=5) returned 1 [0044.701] lstrlenW (lpString="TABLE") returned 5 [0044.701] lstrlenW (lpString="RAWXML") returned 6 [0044.701] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="RAWXML", cchCount1=6, lpString2="TABLE", cchCount2=5) returned 1 [0044.701] lstrlenW (lpString="TABLE") returned 5 [0044.701] lstrlenW (lpString="TABLE") returned 5 [0044.701] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="TABLE", cchCount1=5, lpString2="TABLE", cchCount2=5) returned 2 [0044.701] SysStringLen (param_1="texttable.xsl") returned 0xd [0044.701] SysStringLen (param_1="hform.xsl") returned 0x9 [0044.701] SysStringLen (param_1="texttable.xsl") returned 0xd [0044.701] SysStringLen (param_1="htable.xsl") returned 0xa [0044.701] SysStringLen (param_1="texttable.xsl") returned 0xd [0044.701] SysStringLen (param_1="csv.xsl") returned 0x7 [0044.701] SysStringLen (param_1="texttable.xsl") returned 0xd [0044.701] SysStringLen (param_1="mof.xsl") returned 0x7 [0044.701] SysStringLen (param_1="texttable.xsl") returned 0xd [0044.701] SysStringLen (param_1="xml.xsl") returned 0x7 [0044.701] malloc (_Size=0xc) returned 0x23f2180 [0044.701] malloc (_Size=0xc) returned 0x23f2258 [0044.701] SysStringLen (param_1="C:\\Windows\\system32\\wbem\\") returned 0x19 [0044.701] SysStringLen (param_1="\\") returned 0x1 [0044.702] free (_Block=0x23f2180) [0044.702] malloc (_Size=0xc) returned 0x23f2180 [0044.702] SysStringLen (param_1="C:\\Windows\\system32\\wbem\\\\") returned 0x1a [0044.702] SysStringLen (param_1="texttable.xsl") returned 0xd [0044.702] free (_Block=0x23f2258) [0044.702] CreateFileW (lpFileName="C:\\Windows\\system32\\wbem\\\\texttable.xsl" (normalized: "c:\\windows\\system32\\wbem\\texttable.xsl"), dwDesiredAccess=0x0, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274 [0044.714] CloseHandle (hObject=0x274) returned 1 [0044.714] malloc (_Size=0x18) returned 0x3ebc8 [0044.714] malloc (_Size=0x18) returned 0x3ebe8 [0044.714] ??0CHString@@QAE@PBG@Z () returned 0x27f924 [0044.714] ?Right@CHString@@QBE?AV1@H@Z () returned 0x27f928 [0044.714] ??0CHString@@QAE@PBG@Z () returned 0x27f92c [0044.714] _wcsicmp (_String1=".xsl", _String2=".xsl") returned 0 [0044.714] ??1CHString@@QAE@XZ () returned 0x7e0001 [0044.714] ??1CHString@@QAE@XZ () returned 0x7a0001 [0044.714] ??1CHString@@QAE@XZ () returned 0x1 [0044.714] malloc (_Size=0x18) returned 0x3ec08 [0044.714] malloc (_Size=0x10) returned 0x23f2258 [0044.714] malloc (_Size=0x18) returned 0x3ec28 [0044.714] free (_Block=0x3ec08) [0044.714] free (_Block=0x3ebe8) [0044.715] free (_Block=0x3ebc8) [0044.715] free (_Block=0x23f2168) [0044.715] free (_Block=0x23f2060) [0044.715] free (_Block=0x23f21c8) [0044.715] free (_Block=0x23f2138) [0044.715] free (_Block=0x23f2108) [0044.715] free (_Block=0x23f2210) [0044.715] GetCurrentThreadId () returned 0xb90 [0044.715] ??0CHString@@QAE@XZ () returned 0x27f984 [0044.715] CoCreateInstance (in: rclsid=0x1a6d40*(Data1=0xf6d90f12, Data2=0x9c73, Data3=0x11d3, Data4=([0]=0xb3, [1]=0x2e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0xb, [7]=0xb4)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x1a6d20*(Data1=0x2933bf95, Data2=0x7b36, Data3=0x11d2, Data4=([0]=0xb2, [1]=0xe, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x98, [6]=0x3e, [7]=0x60)), ppv=0x1ec214 | out: ppv=0x1ec214*=0x2279bc8) returned 0x0 [0044.716] FreeThreadedDOMDocument:IXMLDOMDocument:loadXML (in: This=0x2279bc8, bstrXML=" PROCESS WHERE Name=\\"sam.exe\\" call SetPriority 128XDUWTFONOroot\\cimv2root\\cliIMPERSONATEPKTPRIVACYms_409ENABLEOFFN/AOFFOFFSTDOUTSTDOUTN/AON0x80041017Invalid query\r\nWMI", isSuccessful=0x27f980 | out: isSuccessful=0x27f980*=0xffff) returned 0x0 [0044.716] ??0CHString@@QAE@XZ () returned 0x27f92c [0044.716] GetCurrentThreadId () returned 0xb90 [0044.716] malloc (_Size=0x10) returned 0x23f2210 [0044.716] malloc (_Size=0x18) returned 0x3ebc8 [0044.716] CoCreateInstance (in: rclsid=0x1a6d50*(Data1=0x2933bf94, Data2=0x7b36, Data3=0x11d2, Data4=([0]=0xb2, [1]=0xe, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x98, [6]=0x3e, [7]=0x60)), pUnkOuter=0x0, dwClsContext=0x15, riid=0x1a6d30*(Data1=0x2933bf93, Data2=0x7b36, Data3=0x11d2, Data4=([0]=0xb2, [1]=0xe, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x98, [6]=0x3e, [7]=0x60)), ppv=0x27f91c | out: ppv=0x27f91c*=0x2278848) returned 0x0 [0044.733] CoCreateInstance (in: rclsid=0x1a6d40*(Data1=0xf6d90f12, Data2=0x9c73, Data3=0x11d3, Data4=([0]=0xb3, [1]=0x2e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0xb, [7]=0xb4)), pUnkOuter=0x0, dwClsContext=0x15, riid=0x1a6d20*(Data1=0x2933bf95, Data2=0x7b36, Data3=0x11d2, Data4=([0]=0xb2, [1]=0xe, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x98, [6]=0x3e, [7]=0x60)), ppv=0x27f918 | out: ppv=0x27f918*=0x2278af0) returned 0x0 [0044.733] FreeThreadedDOMDocument:IXMLDOMDocument:put_async (This=0x2278af0, async=0) returned 0x0 [0044.733] SysStringByteLen (bstr="C:\\Windows\\system32\\wbem\\\\texttable.xsl") returned 0x4e [0044.733] FreeThreadedDOMDocument:IXMLDOMDocument:load (in: This=0x2278af0, xmlSource=0x27f850*(varType=0x8, wReserved1=0x18c9, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Windows\\system32\\wbem\\\\texttable.xsl", varVal2=0x101), isSuccessful=0x27f90c | out: isSuccessful=0x27f90c*=0xffff) returned 0x0 [0044.737] XSLTemplate:IXSLTemplate:putref_stylesheet (This=0x2278848, stylesheet=0x2278af0) returned 0x0 [0045.066] malloc (_Size=0x80) returned 0x23f07d0 [0045.066] __dllonexit () returned 0x743b7164 [0045.066] __dllonexit () returned 0x743b717e [0045.066] __dllonexit () returned 0x743b7198 [0045.066] GetUserDefaultLCID () returned 0x409 [0045.066] GetVersion () returned 0x1db10106 [0045.067] DllGetClassObject (in: rclsid=0x342b18*(Data1=0xb54f3741, Data2=0x5b07, Data3=0x11cf, Data4=([0]=0xa4, [1]=0xb0, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4a, [6]=0x55, [7]=0xe8)), riid=0x7562ee84*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x27e8e4 | out: ppv=0x27e8e4*=0x23f3620) returned 0x0 [0045.096] ??2@YAPAXI@Z () returned 0x23f3620 [0045.096] VBScriptEngine5:IClassFactory:CreateInstance (in: This=0x23f3620, pUnkOuter=0x0, riid=0x27f290*(Data1=0xbb1a2ae1, Data2=0xa4f9, Data3=0x11cf, Data4=([0]=0x8f, [1]=0x20, [2]=0x0, [3]=0x80, [4]=0x5f, [5]=0x2c, [6]=0xd0, [7]=0x64)), ppvObject=0x27e8d0 | out: ppvObject=0x27e8d0*=0x23f3660) returned 0x0 [0045.096] ??2@YAPAXI@Z () returned 0x23f3660 [0045.096] GetUserDefaultLCID () returned 0x409 [0045.096] GetACP () returned 0x4e4 [0045.097] VBScriptEngine5:IUnknown:AddRef (This=0x23f3660) returned 0x2 [0045.097] VBScriptEngine5:IUnknown:Release (This=0x23f3660) returned 0x1 [0045.097] VBScriptEngine5:IUnknown:Release (This=0x23f3620) returned 0x0 [0045.097] ??3@YAXPAX@Z () returned 0x1 [0045.097] VBScriptEngine5:IUnknown:QueryInterface (in: This=0x23f3660, riid=0x747d1034*(Data1=0xbb1a2ae1, Data2=0xa4f9, Data3=0x11cf, Data4=([0]=0x8f, [1]=0x20, [2]=0x0, [3]=0x80, [4]=0x5f, [5]=0x2c, [6]=0xd0, [7]=0x64)), ppvObject=0x27f5b8 | out: ppvObject=0x27f5b8*=0x23f3660) returned 0x0 [0045.097] VBScriptEngine5:IUnknown:Release (This=0x23f3660) returned 0x1 [0045.097] VBScriptEngine5:IUnknown:QueryInterface (in: This=0x23f3660, riid=0x747d1044*(Data1=0xbb1a2ae2, Data2=0xa4f9, Data3=0x11cf, Data4=([0]=0x8f, [1]=0x20, [2]=0x0, [3]=0x80, [4]=0x5f, [5]=0x2c, [6]=0xd0, [7]=0x64)), ppvObject=0x261caac | out: ppvObject=0x261caac*=0x23f3664) returned 0x0 [0045.097] VBScriptEngine5:IUnknown:QueryInterface (in: This=0x23f3660, riid=0x74795634*(Data1=0xcb5bdc81, Data2=0x93c1, Data3=0x11cf, Data4=([0]=0x8f, [1]=0x20, [2]=0x0, [3]=0x80, [4]=0x5f, [5]=0x2c, [6]=0xd0, [7]=0x64)), ppvObject=0x27f5d0 | out: ppvObject=0x27f5d0*=0x23f3690) returned 0x0 [0045.139] VBScriptEngine5:IUnknown:Release (This=0x23f3690) returned 0x2 [0045.139] VBScriptEngine5:IActiveScript:SetScriptSite (This=0x23f3660, pass=0x227a870) returned 0x0 [0045.139] GetCurrentThreadId () returned 0xb90 [0045.139] ??2@YAPAXI@Z () returned 0x23f3868 [0045.139] GetCurrentThreadId () returned 0xb90 [0045.139] ??2@YAPAXI@Z () returned 0x3ebe8 [0045.139] ??2@YAPAXI@Z () returned 0x332a8 [0045.139] ??2@YAPAXI@Z () returned 0x23f3928 [0045.139] ??2@YAPAXI@Z () returned 0x23f3620 [0045.139] GetCurrentThreadId () returned 0xb90 [0045.139] ??2@YAPAXI@Z () returned 0x23f39a8 [0045.139] VBScriptEngine5:IUnknown:QueryInterface (in: This=0x227a870, riid=0x743ab67c*(Data1=0x539698a0, Data2=0xcdca, Data3=0x11cf, Data4=([0]=0xa5, [1]=0xeb, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x47, [6]=0xa0, [7]=0x63)), ppvObject=0x23f397c | out: ppvObject=0x23f397c*=0x0) returned 0x80004002 [0045.139] VBScriptEngine5:IUnknown:AddRef (This=0x227a870) returned 0x2 [0045.140] IActiveScriptSite:GetLCID (in: This=0x227a870, plcid=0x27f5c4 | out: plcid=0x27f5c4*=0x409) returned 0x0 [0045.140] IsValidLocale (Locale=0x409, dwFlags=0x1) returned 1 [0045.140] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x27f594, cchData=6 | out: lpLCData="1252") returned 5 [0045.140] IsValidCodePage (CodePage=0x4e4) returned 1 [0045.140] VBScriptEngine5:IUnknown:QueryInterface (in: This=0x227a870, riid=0x743aafa4*(Data1=0x51973c11, Data2=0xcb0c, Data3=0x11d0, Data4=([0]=0xb5, [1]=0xc9, [2]=0x0, [3]=0xa0, [4]=0x24, [5]=0x4a, [6]=0xe, [7]=0x7a)), ppvObject=0x23f37ec | out: ppvObject=0x23f37ec*=0x227a884) returned 0x0 [0045.140] VBScriptEngine5:IActiveScriptSiteDebug32:GetApplication (in: This=0x227a884, ppda=0x23f37f4 | out: ppda=0x23f37f4*=0x0) returned 0x80004001 [0045.140] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x755e0000 [0045.141] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0045.141] CoCreateInstance (in: rclsid=0x743ab234*(Data1=0x6c736db1, Data2=0xbd94, Data3=0x11d0, Data4=([0]=0x8a, [1]=0x23, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xb5, [6]=0x8e, [7]=0x10)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x743ab244*(Data1=0x6c736dc1, Data2=0xab0d, Data3=0x11d0, Data4=([0]=0xa2, [1]=0xad, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x27, [7]=0xe8)), ppv=0x23f383c | out: ppv=0x23f383c*=0x3714d0) returned 0x0 [0045.141] IUnknown:AddRef (This=0x3714d0) returned 0x2 [0045.141] GetCurrentProcessId () returned 0xb8c [0045.141] GetCurrentThreadId () returned 0xb90 [0045.141] GetTickCount () returned 0x1144818 [0045.141] ISystemDebugEventFire:BeginSession (This=0x3714d0, guidSourceID=0x743ab308, strSessionName="VBScript:00002956:00002960:18106392") returned 0x0 [0045.141] VBScriptEngine5:IActiveScriptParse32:InitNew (This=0x23f3664) returned 0x0 [0045.141] IActiveScriptSite:OnStateChange (This=0x227a870, ssScriptState=5) returned 0x0 [0045.141] GetCurrentThreadId () returned 0xb90 [0045.141] realloc (_Block=0x0, _Size=0xc8) returned 0x23f39f8 [0045.142] ??2@YAPAXI@Z () returned 0x23f3ac8 [0045.142] malloc (_Size=0x804) returned 0x23f3af8 [0045.142] ??2@YAPAXI@Z () returned 0x23f4308 [0045.142] malloc (_Size=0x400) returned 0x23f4460 [0045.142] malloc (_Size=0x104) returned 0x23f4868 [0045.142] malloc (_Size=0x1004) returned 0x23f4978 [0045.143] malloc (_Size=0x204) returned 0x23f5988 [0045.143] malloc (_Size=0x404) returned 0x23f5b98 [0045.144] malloc (_Size=0x804) returned 0x23f5fa8 [0045.163] malloc (_Size=0x1004) returned 0x23f67b8 [0045.165] malloc (_Size=0x2004) returned 0x23f77c8 [0045.167] malloc (_Size=0x2004) returned 0x23f97d8 [0045.168] malloc (_Size=0x4004) returned 0x23fb7e8 [0045.169] ??3@YAXPAX@Z () returned 0x1 [0045.169] malloc (_Size=0x320) returned 0x23ff7f8 [0045.169] realloc (_Block=0x23ff7f8, _Size=0x4b0) returned 0x23ff7f8 [0045.169] malloc (_Size=0x3fe8) returned 0x23ffcb0 [0045.171] ??2@YAPAXI@Z () returned 0x23f3648 [0045.171] free (_Block=0x23f97d8) [0045.171] free (_Block=0x23f4978) [0045.171] free (_Block=0x23f3af8) [0045.171] ??3@YAXPAX@Z () returned 0x1 [0045.171] free (_Block=0x23f4460) [0045.171] free (_Block=0x23ff7f8) [0045.171] free (_Block=0x23fb7e8) [0045.171] free (_Block=0x23f77c8) [0045.171] free (_Block=0x23f67b8) [0045.171] free (_Block=0x23f5fa8) [0045.171] free (_Block=0x23f5b98) [0045.171] free (_Block=0x23f5988) [0045.171] free (_Block=0x23f4868) [0045.171] ??2@YAPAXI@Z () returned 0x2403ca0 [0045.171] ??2@YAPAXI@Z () returned 0x3ec08 [0045.171] malloc (_Size=0xc) returned 0x23f2108 [0045.172] free (_Block=0x23f39f8) [0045.172] VBScriptEngine5:IActiveScript:SetScriptState (This=0x23f3660, ss=0) returned 0x0 [0045.174] GetUserDefaultLCID () returned 0x409 [0045.175] GetACP () returned 0x4e4 [0045.175] ??3@YAXPAX@Z () returned 0x1 [0045.175] ISystemDebugEventFire:EndSession (This=0x3714d0) returned 0x0 [0045.175] IUnknown:Release (This=0x3714d0) returned 0x1 [0045.175] ??3@YAXPAX@Z () returned 0x1 [0045.175] ??3@YAXPAX@Z () returned 0x1 [0045.175] VBScriptEngine5:IUnknown:Release (This=0x227a884) returned 0x2 [0045.175] IUnknown:Release (This=0x3714d0) returned 0x0 [0045.175] IActiveScriptSite:OnStateChange (This=0x227a870, ssScriptState=0) returned 0x0 [0045.175] VBScriptEngine5:IUnknown:Release (This=0x227a870) returned 0x1 [0045.175] XSLTemplate:IXSLTemplate:createProcessor (in: This=0x2278848, ppProcessor=0x27f924 | out: ppProcessor=0x27f924*=0x227a728) returned 0x0 [0045.175] FreeThreadedDOMDocument:IUnknown:AddRef (This=0x2279bc8) returned 0x2 [0045.176] IXSLProcessor:put_input (This=0x227a728, input=0x27f854*(varType=0x9, wReserved1=0x0, wReserved2=0x9b22, wReserved3=0x35, varVal1=0x2279bc8, varVal2=0x27f8f0)) returned 0x0 [0045.176] GetStdHandle (nStdHandle=0xfffffff5) returned 0xe0 [0045.176] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xe0, lpConsoleScreenBufferInfo=0x27f80c | out: lpConsoleScreenBufferInfo=0x27f80c) returned 0 [0045.176] GetStdHandle (nStdHandle=0xfffffff5) returned 0xe0 [0045.176] GetFileType (hFile=0xe0) returned 0x3 [0045.176] IXSLProcessor:transform (in: This=0x227a728, pDone=0x27f90c | out: pDone=0x27f90c*=0xffff) returned 0x0 [0045.181] VBScriptEngine5:IUnknown:QueryInterface (in: This=0x23f3660, riid=0x74795634*(Data1=0xcb5bdc81, Data2=0x93c1, Data3=0x11cf, Data4=([0]=0x8f, [1]=0x20, [2]=0x0, [3]=0x80, [4]=0x5f, [5]=0x2c, [6]=0xd0, [7]=0x64)), ppvObject=0x27f734 | out: ppvObject=0x27f734*=0x23f3690) returned 0x0 [0045.181] VBScriptEngine5:IUnknown:Release (This=0x23f3690) returned 0x3 [0045.181] VBScriptEngine5:IActiveScript:SetScriptSite (This=0x23f3660, pass=0x227a870) returned 0x0 [0045.181] GetCurrentThreadId () returned 0xb90 [0045.181] ??2@YAPAXI@Z () returned 0x2403cd0 [0045.181] ??2@YAPAXI@Z () returned 0x23f3620 [0045.181] GetCurrentThreadId () returned 0xb90 [0045.181] ??2@YAPAXI@Z () returned 0x2403d50 [0045.181] VBScriptEngine5:IUnknown:QueryInterface (in: This=0x227a870, riid=0x743ab67c*(Data1=0x539698a0, Data2=0xcdca, Data3=0x11cf, Data4=([0]=0xa5, [1]=0xeb, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x47, [6]=0xa0, [7]=0x63)), ppvObject=0x2403d24 | out: ppvObject=0x2403d24*=0x0) returned 0x80004002 [0045.181] VBScriptEngine5:IUnknown:AddRef (This=0x227a870) returned 0x2 [0045.181] IActiveScriptSite:GetLCID (in: This=0x227a870, plcid=0x27f728 | out: plcid=0x27f728*=0x409) returned 0x0 [0045.181] IsValidLocale (Locale=0x409, dwFlags=0x1) returned 1 [0045.182] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x27f6f8, cchData=6 | out: lpLCData="1252") returned 5 [0045.182] IsValidCodePage (CodePage=0x4e4) returned 1 [0045.182] IActiveScriptSite:OnStateChange (This=0x227a870, ssScriptState=5) returned 0x0 [0045.182] VBScriptEngine5:IUnknown:QueryInterface (in: This=0x227a870, riid=0x743aafa4*(Data1=0x51973c11, Data2=0xcb0c, Data3=0x11d0, Data4=([0]=0xb5, [1]=0xc9, [2]=0x0, [3]=0xa0, [4]=0x24, [5]=0x4a, [6]=0xe, [7]=0x7a)), ppvObject=0x23f37ec | out: ppvObject=0x23f37ec*=0x227a884) returned 0x0 [0045.182] VBScriptEngine5:IActiveScriptSiteDebug32:GetApplication (in: This=0x227a884, ppda=0x23f37f4 | out: ppda=0x23f37f4*=0x0) returned 0x80004001 [0045.182] CoCreateInstance (in: rclsid=0x743ab234*(Data1=0x6c736db1, Data2=0xbd94, Data3=0x11d0, Data4=([0]=0x8a, [1]=0x23, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xb5, [6]=0x8e, [7]=0x10)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x743ab244*(Data1=0x6c736dc1, Data2=0xab0d, Data3=0x11d0, Data4=([0]=0xa2, [1]=0xad, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x27, [7]=0xe8)), ppv=0x23f383c | out: ppv=0x23f383c*=0x371638) returned 0x0 [0045.182] IUnknown:AddRef (This=0x371638) returned 0x2 [0045.182] GetCurrentProcessId () returned 0xb8c [0045.182] GetCurrentThreadId () returned 0xb90 [0045.182] GetTickCount () returned 0x1144847 [0045.182] ISystemDebugEventFire:BeginSession (This=0x371638, guidSourceID=0x743ab308, strSessionName="VBScript:00002956:00002960:18106439") returned 0x0 [0045.182] VBScriptEngine5:IActiveScript:AddNamedItem (This=0x23f3660, pstrName="Context", dwFlags=0xc) returned 0x0 [0045.182] GetCurrentThreadId () returned 0xb90 [0045.182] ??2@YAPAXI@Z () returned 0x2403da0 [0045.182] IActiveScriptSite:GetItemInfo (in: This=0x227a870, pstrName="Context", dwReturnMask=0x1, ppiunkItem=0x27f6f0, ppti=0x0 | out: ppiunkItem=0x27f6f0*=0x2278b48, ppti=0x0) returned 0x0 [0045.182] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a4140*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x27f70c | out: ppvObject=0x27f70c*=0x2278b48) returned 0x0 [0045.183] IUnknown:Release (This=0x2278b48) returned 0x2 [0045.183] ??2@YAPAXI@Z () returned 0x32978 [0045.183] IUnknown:AddRef (This=0x2278b48) returned 0x3 [0045.183] IUnknown:Release (This=0x2278b48) returned 0x2 [0045.183] VBScriptEngine5:IActiveScript:SetScriptState (This=0x23f3660, ss=2) returned 0x0 [0045.183] VBScriptEngine5:IUnknown:AddRef (This=0x227a870) returned 0x4 [0045.183] ??2@YAPAXI@Z () returned 0x2403dd0 [0045.183] ISystemDebugEventFire:IsActive (This=0x371638) returned 0x1 [0045.183] IUnknown:AddRef (This=0x2278b48) returned 0x3 [0045.183] malloc (_Size=0x658) returned 0x2403df8 [0045.183] GetCurrentThreadId () returned 0xb90 [0045.183] IActiveScriptSite:OnEnterScript (This=0x227a870) returned 0x0 [0045.184] ??2@YAPAXI@Z () returned 0x2404458 [0045.184] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f368 | out: ppvObject=0x27f368*=0x0) returned 0x80004002 [0045.184] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f36c*="CountResults", cNames=0x1, lcid=0x409, rgDispId=0x27f384 | out: rgDispId=0x27f384*=-1) returned 0x80020006 [0045.397] ??2@YAPAXI@Z () returned 0x2404480 [0045.397] malloc (_Size=0x40) returned 0x2404510 [0045.397] malloc (_Size=0x104) returned 0x2404558 [0045.397] ??2@YAPAXI@Z () returned 0x2404668 [0045.397] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f368 | out: ppvObject=0x27f368*=0x0) returned 0x80004002 [0045.398] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f36c*="PadIt", cNames=0x1, lcid=0x409, rgDispId=0x27f384 | out: rgDispId=0x27f384*=-1) returned 0x80020006 [0045.398] ??2@YAPAXI@Z () returned 0x2404690 [0045.398] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f368 | out: ppvObject=0x27f368*=0x0) returned 0x80004002 [0045.398] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f36c*="GotInstance", cNames=0x1, lcid=0x409, rgDispId=0x27f384 | out: rgDispId=0x27f384*=-1) returned 0x80020006 [0045.398] ??2@YAPAXI@Z () returned 0x24046b8 [0045.398] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f368 | out: ppvObject=0x27f368*=0x0) returned 0x80004002 [0045.398] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f36c*="GetValues", cNames=0x1, lcid=0x409, rgDispId=0x27f384 | out: rgDispId=0x27f384*=-1) returned 0x80020006 [0045.398] malloc (_Size=0x204) returned 0x24046e0 [0045.398] ??2@YAPAXI@Z () returned 0x24048f0 [0045.398] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f368 | out: ppvObject=0x27f368*=0x0) returned 0x80004002 [0045.398] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f36c*="DisplayValues", cNames=0x1, lcid=0x409, rgDispId=0x27f384 | out: rgDispId=0x27f384*=-1) returned 0x80020006 [0045.398] ??2@YAPAXI@Z () returned 0x2404918 [0045.398] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f368 | out: ppvObject=0x27f368*=0x0) returned 0x80004002 [0045.399] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f36c*="getlength", cNames=0x1, lcid=0x409, rgDispId=0x27f384 | out: rgDispId=0x27f384*=-1) returned 0x80020006 [0045.399] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f3d4 | out: ppvObject=0x27f3d4*=0x0) returned 0x80004002 [0045.399] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f3d8*="sPXML", cNames=0x1, lcid=0x409, rgDispId=0x27f3f0 | out: rgDispId=0x27f3f0*=-1) returned 0x80020006 [0045.399] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f3d4 | out: ppvObject=0x27f3d4*=0x0) returned 0x80004002 [0045.399] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f3d8*="propname", cNames=0x1, lcid=0x409, rgDispId=0x27f3f0 | out: rgDispId=0x27f3f0*=-1) returned 0x80020006 [0045.399] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f3d4 | out: ppvObject=0x27f3d4*=0x0) returned 0x80004002 [0045.399] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f3d8*="lenarr", cNames=0x1, lcid=0x409, rgDispId=0x27f3f0 | out: rgDispId=0x27f3f0*=-1) returned 0x80020006 [0045.399] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f3d4 | out: ppvObject=0x27f3d4*=0x0) returned 0x80004002 [0045.399] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f3d8*="bN", cNames=0x1, lcid=0x409, rgDispId=0x27f3f0 | out: rgDispId=0x27f3f0*=-1) returned 0x80020006 [0045.399] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f3d4 | out: ppvObject=0x27f3d4*=0x0) returned 0x80004002 [0045.399] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f3d8*="iLens", cNames=0x1, lcid=0x409, rgDispId=0x27f3f0 | out: rgDispId=0x27f3f0*=-1) returned 0x80020006 [0045.400] malloc (_Size=0x404) returned 0x2404940 [0045.400] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f3d4 | out: ppvObject=0x27f3d4*=0x0) returned 0x80004002 [0045.400] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f3d8*="iLensMax", cNames=0x1, lcid=0x409, rgDispId=0x27f3f0 | out: rgDispId=0x27f3f0*=-1) returned 0x80020006 [0045.400] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f3d4 | out: ppvObject=0x27f3d4*=0x0) returned 0x80004002 [0045.400] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f3d8*="propvalue", cNames=0x1, lcid=0x409, rgDispId=0x27f3f0 | out: rgDispId=0x27f3f0*=-1) returned 0x80020006 [0045.400] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f3d4 | out: ppvObject=0x27f3d4*=0x0) returned 0x80004002 [0045.400] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f3d8*="iRow", cNames=0x1, lcid=0x409, rgDispId=0x27f3f0 | out: rgDispId=0x27f3f0*=-1) returned 0x80020006 [0045.400] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f3d4 | out: ppvObject=0x27f3d4*=0x0) returned 0x80004002 [0045.400] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f3d8*="iResultCount", cNames=0x1, lcid=0x409, rgDispId=0x27f3f0 | out: rgDispId=0x27f3f0*=-1) returned 0x80020006 [0045.400] ??2@YAPAXI@Z () returned 0x2404d50 [0045.441] IActiveScriptSite:OnEnterScript (This=0x227a870) returned 0x0 [0045.441] ??3@YAXPAX@Z () returned 0x1 [0045.441] ISystemDebugEventFire:IsActive (This=0x371638) returned 0x1 [0045.441] VBScriptEngine5:IUnknown:Release (This=0x227a870) returned 0x3 [0045.441] GetCurrentThreadId () returned 0xb90 [0045.441] IActiveScriptSite:GetItemInfo (in: This=0x227a870, pstrName="Context", dwReturnMask=0x1, ppiunkItem=0x27f6dc, ppti=0x0 | out: ppiunkItem=0x27f6dc*=0x2278b48, ppti=0x0) returned 0x0 [0045.441] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a4140*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x27f6d4 | out: ppvObject=0x27f6d4*=0x2278b48) returned 0x0 [0045.441] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743be644*(Data1=0xa7aba9c1, Data2=0x8983, Data3=0x11cf, Data4=([0]=0x8f, [1]=0x20, [2]=0x0, [3]=0x80, [4]=0x5f, [5]=0x2c, [6]=0xd0, [7]=0x64)), ppvObject=0x27f6e8 | out: ppvObject=0x27f6e8*=0x0) returned 0x80004002 [0045.441] IActiveScriptSite:GetItemInfo (in: This=0x227a870, pstrName="Context", dwReturnMask=0x2, ppiunkItem=0x0, ppti=0x27f6ec | out: ppiunkItem=0x0, ppti=0x27f6ec*=0x0) returned 0x80004003 [0045.442] IUnknown:Release (This=0x2278b48) returned 0x3 [0045.442] IUnknown:Release (This=0x2278b48) returned 0x2 [0045.442] IActiveScriptSite:OnStateChange (This=0x227a870, ssScriptState=2) returned 0x0 [0045.442] VBScriptEngine5:IActiveScriptParse32:ParseScriptText (in: This=0x23f3664, pstrCode="CountResults(this)", pstrItemName=0x0, punkContext=0x0, pstrDelimiter=0x0, dwSourceContextCookie=0x0, ulStartingLineNumber=0x1, dwFlags=0x20, pvarResult=0x27f72c, pexcepinfo=0x0 | out: pvarResult=0x27f72c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2404838, varVal2=0x0), pexcepinfo=0x0) returned 0x0 [0045.442] GetCurrentThreadId () returned 0xb90 [0045.442] realloc (_Block=0x0, _Size=0xc8) returned 0x2405080 [0045.442] ??2@YAPAXI@Z () returned 0x2405150 [0045.442] malloc (_Size=0x804) returned 0x2405180 [0045.442] ??2@YAPAXI@Z () returned 0x2405990 [0045.442] malloc (_Size=0x1004) returned 0x2405ae8 [0045.442] ??3@YAXPAX@Z () returned 0x1 [0045.443] malloc (_Size=0x204) returned 0x2406c08 [0045.443] malloc (_Size=0x40) returned 0x2405990 [0045.443] malloc (_Size=0x12c) returned 0x2406e18 [0045.443] ??2@YAPAXI@Z () returned 0x32988 [0045.443] free (_Block=0x2405ae8) [0045.443] free (_Block=0x2405180) [0045.443] ??3@YAXPAX@Z () returned 0x1 [0045.443] free (_Block=0x2405990) [0045.443] free (_Block=0x2406c08) [0045.443] free (_Block=0x2406af8) [0045.443] ??2@YAPAXI@Z () returned 0x2405150 [0045.443] realloc (_Block=0x23f2108, _Size=0x30) returned 0x2405180 [0045.443] VBScriptEngine5:IUnknown:AddRef (This=0x227a870) returned 0x4 [0045.443] ??2@YAPAXI@Z () returned 0x2403dd0 [0045.455] ISystemDebugEventFire:IsActive (This=0x371638) returned 0x1 [0045.455] IUnknown:AddRef (This=0x2278b48) returned 0x3 [0045.455] GetCurrentThreadId () returned 0xb90 [0045.455] IActiveScriptSite:OnEnterScript (This=0x227a870) returned 0x0 [0045.455] IUnknown:QueryInterface (in: This=0x2278b48, riid=0x743a19c4*(Data1=0xa6ef9860, Data2=0xc720, Data3=0x11d0, Data4=([0]=0x93, [1]=0x37, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xd, [6]=0xca, [7]=0xa9)), ppvObject=0x27f2d0 | out: ppvObject=0x27f2d0*=0x0) returned 0x80004002 [0045.455] IDispatch:GetIDsOfNames (in: This=0x2278b48, riid=0x743a190c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x27f2d4*="this", cNames=0x1, lcid=0x409, rgDispId=0x27f2ec | out: rgDispId=0x27f2ec*=-1) returned 0x80020006 [0045.455] IUnknown:AddRef (This=0x2278b48) returned 0x4 [0045.456] IActiveScriptSite:OnEnterScript (This=0x227a870) returned 0x0 [0045.456] ??3@YAXPAX@Z () returned 0x1 [0045.456] ISystemDebugEventFire:IsActive (This=0x371638) returned 0x1 [0045.456] ??3@YAXPAX@Z () returned 0x1 [0045.456] ??3@YAXPAX@Z () returned 0x1 [0045.456] VBScriptEngine5:IUnknown:Release (This=0x227a870) returned 0x3 [0045.456] free (_Block=0x2405080) [0045.456] VBScriptEngine5:IActiveScriptParse32:ParseScriptText (in: This=0x23f3664, pstrCode="DisplayValues(this)", pstrItemName=0x0, punkContext=0x0, pstrDelimiter=0x0, dwSourceContextCookie=0x0, ulStartingLineNumber=0x1, dwFlags=0x20, pvarResult=0x27f72c, pexcepinfo=0x0 | out: pvarResult=0x27f72c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\r\n", varVal2=0x0), pexcepinfo=0x0) returned 0x0 [0045.456] GetCurrentThreadId () returned 0xb90 [0045.457] realloc (_Block=0x0, _Size=0xc8) returned 0x2405080 [0045.457] ??2@YAPAXI@Z () returned 0x2405150 [0045.457] malloc (_Size=0x804) returned 0x24051b8 [0045.457] ??2@YAPAXI@Z () returned 0x24059c8 [0045.457] malloc (_Size=0x1004) returned 0x2405b20 [0045.457] ??3@YAXPAX@Z () returned 0x1 [0045.457] malloc (_Size=0x204) returned 0x2406c40 [0045.457] malloc (_Size=0x40) returned 0x24059c8 [0045.457] malloc (_Size=0x12c) returned 0x2406e50 [0045.457] ??2@YAPAXI@Z () returned 0x32988 [0045.457] free (_Block=0x2405b20) [0045.457] free (_Block=0x24051b8) [0045.457] ??3@YAXPAX@Z () returned 0x1 [0045.457] free (_Block=0x24059c8) [0045.457] free (_Block=0x2406c40) [0045.457] free (_Block=0x2406b30) [0045.457] ??2@YAPAXI@Z () returned 0x2405150 [0045.457] VBScriptEngine5:IUnknown:AddRef (This=0x227a870) returned 0x4 [0045.458] ??2@YAPAXI@Z () returned 0x2403dd0 [0045.458] ISystemDebugEventFire:IsActive (This=0x371638) returned 0x1 [0045.458] IUnknown:AddRef (This=0x2278b48) returned 0x3 [0045.458] GetCurrentThreadId () returned 0xb90 [0045.458] IActiveScriptSite:OnEnterScript (This=0x227a870) returned 0x0 [0045.458] IUnknown:AddRef (This=0x2278b48) returned 0x4 [0045.459] IActiveScriptSite:OnEnterScript (This=0x227a870) returned 0x0 [0045.460] ??3@YAXPAX@Z () returned 0x1 [0045.460] ISystemDebugEventFire:IsActive (This=0x371638) returned 0x1 [0045.460] ??3@YAXPAX@Z () returned 0x1 [0045.460] ??3@YAXPAX@Z () returned 0x1 [0045.460] VBScriptEngine5:IUnknown:Release (This=0x227a870) returned 0x3 [0045.460] free (_Block=0x2405080) [0045.460] VBScriptEngine5:IActiveScript:SetScriptState (This=0x23f3660, ss=0) returned 0x0 [0045.460] GetCurrentThreadId () returned 0xb90 [0045.460] GetCurrentThreadId () returned 0xb90 [0045.460] IUnknown:Release (This=0x371638) returned 0x1 [0045.460] IActiveScriptSite:OnStateChange (This=0x227a870, ssScriptState=3) returned 0x0 [0045.460] IActiveScriptSite:OnStateChange (This=0x227a870, ssScriptState=5) returned 0x0 [0045.460] GetUserDefaultLCID () returned 0x409 [0045.460] GetACP () returned 0x4e4 [0045.460] IUnknown:Release (This=0x2278b48) returned 0x1 [0045.460] ??3@YAXPAX@Z () returned 0x1 [0045.460] ??3@YAXPAX@Z () returned 0x1 [0045.460] ??3@YAXPAX@Z () returned 0x1 [0045.460] ??3@YAXPAX@Z () returned 0x1 [0045.461] ??3@YAXPAX@Z () returned 0x1 [0045.461] ??3@YAXPAX@Z () returned 0x1 [0045.461] ??3@YAXPAX@Z () returned 0x1 [0045.480] free (_Block=0x2404510) [0045.480] free (_Block=0x2404940) [0045.480] free (_Block=0x24046e0) [0045.480] free (_Block=0x2404558) [0045.480] ??3@YAXPAX@Z () returned 0x1 [0045.480] ??3@YAXPAX@Z () returned 0x1 [0045.481] ISystemDebugEventFire:EndSession (This=0x371638) returned 0x0 [0045.481] IUnknown:Release (This=0x371638) returned 0x0 [0045.481] ??3@YAXPAX@Z () returned 0x1 [0045.481] ??3@YAXPAX@Z () returned 0x1 [0045.481] ??3@YAXPAX@Z () returned 0x1 [0045.481] VBScriptEngine5:IUnknown:Release (This=0x227a884) returned 0x2 [0045.481] IActiveScriptSite:OnStateChange (This=0x227a870, ssScriptState=0) returned 0x0 [0045.481] VBScriptEngine5:IUnknown:Release (This=0x227a870) returned 0x1 [0045.481] IXSLProcessor:get_output (in: This=0x227a728, pOutput=0x27f8c4 | out: pOutput=0x27f8c4*(varType=0x8, wReserved1=0x7478, wReserved2=0x5e0a, wReserved3=0x18c9, varVal1="\r\n", varVal2=0x2279bc8)) returned 0x0 [0045.481] malloc (_Size=0xc) returned 0x23f2108 [0045.481] XSLTemplate:IUnknown:Release (This=0x227a728) returned 0x0 [0045.481] FreeThreadedDOMDocument:IUnknown:Release (This=0x2278af0) returned 0x2 [0045.481] XSLTemplate:IUnknown:Release (This=0x2278848) returned 0x0 [0045.481] VBScriptEngine5:IActiveScript:Close (This=0x23f3660) returned 0x0 [0045.482] ??3@YAXPAX@Z () returned 0x1 [0045.482] ??3@YAXPAX@Z () returned 0x1 [0045.482] ??3@YAXPAX@Z () returned 0x7e0001 [0045.482] VBScriptEngine5:IUnknown:Release (This=0x23f3660) returned 0x1 [0045.482] VBScriptEngine5:IUnknown:Release (This=0x23f3664) returned 0x0 [0045.482] ??3@YAXPAX@Z () returned 0x1 [0045.482] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0045.482] free (_Block=0x3ebc8) [0045.482] fprintf (in: _File=0x74eb2920, _Format="%s" | out: _File=0x74eb2920) returned 2 [0045.482] fflush (in: _File=0x74eb2920 | out: _File=0x74eb2920) returned 0 [0045.482] free (_Block=0x32978) [0045.482] malloc (_Size=0x800) returned 0x2404458 [0045.482] LoadStringW (in: hInstance=0x0, uID=0xafd2, lpBuffer=0x2404458, cchBufferMax=1024 | out: lpBuffer="\r\n") returned 0x2 [0045.482] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0045.482] malloc (_Size=0x3) returned 0x32978 [0045.482] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x32978, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0045.482] fprintf (in: _File=0x74eb2920, _Format="%s" | out: _File=0x74eb2920) returned 2 [0045.482] fflush (in: _File=0x74eb2920 | out: _File=0x74eb2920) returned 0 [0045.483] free (_Block=0x32978) [0045.483] free (_Block=0x2404458) [0045.483] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0045.483] free (_Block=0x23f2108) [0045.483] ??1CHString@@QAE@XZ () returned 0x1 [0045.483] FreeThreadedDOMDocument:IUnknown:Release (This=0x2279bc8) returned 0x0 [0045.483] ?Empty@CHString@@QAEXXZ () returned 0x74ab0504 [0045.483] free (_Block=0x23f21f8) [0045.483] malloc (_Size=0xc) returned 0x23f21f8 [0045.483] free (_Block=0x3fe88) [0045.483] malloc (_Size=0xc) returned 0x3fe88 [0045.483] free (_Block=0x23f2478) [0045.483] free (_Block=0x23f2198) [0045.483] free (_Block=0x23f2120) [0045.483] free (_Block=0x23f20c0) [0045.483] free (_Block=0x23f21f8) [0045.483] free (_Block=0x3fe88) [0045.483] free (_Block=0x3feb0) [0045.483] free (_Block=0x23f20d8) [0045.483] free (_Block=0x23f24f8) [0045.483] free (_Block=0x23f2530) [0045.483] free (_Block=0x23f2488) [0045.483] free (_Block=0x3ec28) [0045.484] free (_Block=0x23f2180) [0045.484] free (_Block=0x3ffa0) [0045.484] free (_Block=0x23f2150) [0045.484] free (_Block=0x3eba8) [0045.484] free (_Block=0x33070) [0045.484] free (_Block=0x32ff8) [0045.484] free (_Block=0x23f2448) [0045.484] ?Empty@CHString@@QAEXXZ () returned 0x74ab0504 [0045.484] free (_Block=0x3ff28) [0045.484] free (_Block=0x23f2090) [0045.484] free (_Block=0x23f20a8) [0045.484] free (_Block=0x23f24a0) [0045.484] free (_Block=0x328a0) [0045.484] free (_Block=0x328e8) [0045.484] free (_Block=0x32930) [0045.484] free (_Block=0x3eb88) [0045.484] free (_Block=0x329e0) [0045.484] free (_Block=0x32fe0) [0045.484] free (_Block=0x3e8c8) [0045.484] free (_Block=0x32fc8) [0045.484] free (_Block=0x3e8a8) [0045.484] free (_Block=0x32fb0) [0045.484] free (_Block=0x3e888) [0045.484] free (_Block=0x32b28) [0045.484] free (_Block=0x32b40) [0045.484] free (_Block=0x32af0) [0045.485] free (_Block=0x32b08) [0045.485] free (_Block=0x32b60) [0045.485] free (_Block=0x32b78) [0045.485] free (_Block=0x32b98) [0045.485] free (_Block=0x3e868) [0045.485] free (_Block=0x32a80) [0045.485] free (_Block=0x32a98) [0045.485] free (_Block=0x32a48) [0045.485] free (_Block=0x32a60) [0045.485] free (_Block=0x32ab8) [0045.485] free (_Block=0x32ad0) [0045.485] free (_Block=0x32a10) [0045.485] free (_Block=0x32a28) [0045.485] free (_Block=0x32998) [0045.485] free (_Block=0x33fc0) [0045.485] free (_Block=0x23f0528) [0045.485] WbemObjectTextSrc:IUnknown:Release (This=0x1cbc7c8) returned 0x0 [0045.486] IUnknown:Release (This=0x1cbc6c8) returned 0x0 [0045.487] WbemLocator:IUnknown:Release (This=0x1cb0828) returned 0x2 [0045.487] WbemLocator:IUnknown:Release (This=0x1cbd064) returned 0x0 [0045.487] WbemLocator:IUnknown:Release (This=0x1cbd00c) returned 0x0 [0045.487] WbemLocator:IUnknown:Release (This=0x1cb0828) returned 0x1 [0045.487] ?Empty@CHString@@QAEXXZ () returned 0x74ab0504 [0045.487] WbemLocator:IUnknown:Release (This=0x1cb0828) returned 0x0 [0045.487] free (_Block=0x3fdf8) [0045.487] free (_Block=0x3fe10) [0045.487] free (_Block=0x3eb48) [0045.487] free (_Block=0x3fe28) [0045.488] free (_Block=0x3fe40) [0045.488] free (_Block=0x3eb68) [0045.488] free (_Block=0x3fcd8) [0045.488] free (_Block=0x3fcf0) [0045.488] free (_Block=0x3ea88) [0045.488] free (_Block=0x3fd08) [0045.488] free (_Block=0x3fd20) [0045.488] free (_Block=0x3eaa8) [0045.488] free (_Block=0x3fc78) [0045.488] free (_Block=0x3fc90) [0045.488] free (_Block=0x3ea48) [0045.488] free (_Block=0x3fca8) [0045.488] free (_Block=0x3fcc0) [0045.488] free (_Block=0x3ea68) [0045.488] free (_Block=0x3fd98) [0045.488] free (_Block=0x3fdb0) [0045.488] free (_Block=0x3eb08) [0045.488] free (_Block=0x3fdc8) [0045.488] free (_Block=0x3fde0) [0045.488] free (_Block=0x3eb28) [0045.489] free (_Block=0x3fc18) [0045.489] free (_Block=0x3fc30) [0045.489] free (_Block=0x3ea08) [0045.489] free (_Block=0x3fc48) [0045.489] free (_Block=0x3fc60) [0045.489] free (_Block=0x3ea28) [0045.489] free (_Block=0x3fd38) [0045.489] free (_Block=0x3fd50) [0045.489] free (_Block=0x3eac8) [0045.489] free (_Block=0x3fd68) [0045.489] free (_Block=0x3fd80) [0045.489] free (_Block=0x3eae8) [0045.489] free (_Block=0x3fb88) [0045.489] free (_Block=0x3fba0) [0045.489] free (_Block=0x3e9a8) [0045.489] free (_Block=0x33278) [0045.489] free (_Block=0x33290) [0045.489] free (_Block=0x3e908) [0045.489] free (_Block=0x33040) [0045.489] free (_Block=0x33058) [0045.489] free (_Block=0x3e8e8) [0045.490] free (_Block=0x3faf8) [0045.490] free (_Block=0x3fb10) [0045.490] free (_Block=0x3e948) [0045.490] free (_Block=0x3fbb8) [0045.490] free (_Block=0x3fbd0) [0045.490] free (_Block=0x3e9c8) [0045.490] free (_Block=0x3fac8) [0045.490] free (_Block=0x3fae0) [0045.490] free (_Block=0x3e928) [0045.490] free (_Block=0x3fb28) [0045.490] free (_Block=0x3fb40) [0045.490] free (_Block=0x3e968) [0045.490] free (_Block=0x3fb58) [0045.490] free (_Block=0x3fb70) [0045.490] free (_Block=0x3e988) [0045.490] free (_Block=0x3fbe8) [0045.491] free (_Block=0x3fc00) [0045.491] free (_Block=0x3e9e8) [0045.491] CoUninitialize () [0045.491] DllCanUnloadNow () returned 0x0 [0045.499] free (_Block=0x2403df8) [0045.499] ??3@YAXPAX@Z () returned 0x1 [0045.499] ??3@YAXPAX@Z () returned 0x320001 [0045.499] ??3@YAXPAX@Z () returned 0x1 [0045.499] ??3@YAXPAX@Z () returned 0x1 [0045.499] free (_Block=0x23f07d0) [0045.517] exit (_Code=-2147217385) [0045.517] free (_Block=0x23f04a0) [0045.517] free (_Block=0x33f18) [0045.517] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0045.517] free (_Block=0x33118) [0045.517] free (_Block=0x32a00) [0045.517] free (_Block=0x33ef8) [0045.518] free (_Block=0x33ed8) [0045.518] free (_Block=0x33ea8) [0045.518] free (_Block=0x33e88) [0045.518] free (_Block=0x33e58) [0045.518] free (_Block=0x313d8) [0045.518] free (_Block=0x313b8) [0045.518] free (_Block=0x23f2258) [0045.518] ??1CHString@@QAE@XZ () returned 0x74ab0504 [0045.518] free (_Block=0x23f2078) Thread: id = 112 os_tid = 0xb94 Thread: id = 113 os_tid = 0xb98 Thread: id = 114 os_tid = 0xb9c Thread: id = 115 os_tid = 0xba0 Thread: id = 116 os_tid = 0xba4 Process: id = "20" image_name = "vssvc.exe" filename = "c:\\windows\\system32\\vssvc.exe" page_root = "0x4d06a000" os_pid = "0xba8" os_integrity_level = "0x4000" os_privileges = "0xe60b7e890" monitor_reason = "rpc_server" parent_id = "17" os_parent_pid = "0xb50" cmd_line = "C:\\Windows\\system32\\vssvc.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0007a59d" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 117 os_tid = 0xbc4 Thread: id = 118 os_tid = 0xbc0 Thread: id = 119 os_tid = 0xbbc Thread: id = 120 os_tid = 0xbb8 [0045.051] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xe9d8e0 | out: lpSystemTimeAsFileTime=0xe9d8e0*(dwLowDateTime=0xce30a770, dwHighDateTime=0x1d5793e)) [0045.051] GetCurrentProcessId () returned 0xba8 [0045.051] GetCurrentThreadId () returned 0xbb8 [0045.051] GetTickCount () returned 0x11447bb [0045.051] QueryPerformanceCounter (in: lpPerformanceCount=0xe9d8e8 | out: lpPerformanceCount=0xe9d8e8*=16533575033) returned 1 [0045.051] malloc (_Size=0x100) returned 0x78e80 [0229.558] free (_Block=0x78e80) Thread: id = 121 os_tid = 0xbb4 Thread: id = 122 os_tid = 0xbb0 Thread: id = 123 os_tid = 0xbac Thread: id = 138 os_tid = 0xbcc Thread: id = 169 os_tid = 0x8d4 Thread: id = 211 os_tid = 0xa40 Process: id = "21" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x15f04000" os_pid = "0x3f8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "20" os_parent_pid = "0xba8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dc17" [0xc000000f], "LOCAL" [0x7] Thread: id = 124 os_tid = 0xae4 Thread: id = 125 os_tid = 0x80c Thread: id = 126 os_tid = 0x76c Thread: id = 127 os_tid = 0x758 Thread: id = 128 os_tid = 0x74c Thread: id = 129 os_tid = 0x72c Thread: id = 130 os_tid = 0x71c Thread: id = 131 os_tid = 0x718 Thread: id = 132 os_tid = 0x638 Thread: id = 133 os_tid = 0x154 Thread: id = 134 os_tid = 0x150 Thread: id = 135 os_tid = 0x12c Thread: id = 136 os_tid = 0x120 Thread: id = 137 os_tid = 0x3fc Thread: id = 165 os_tid = 0xc0 Thread: id = 208 os_tid = 0x9b8 Thread: id = 209 os_tid = 0xa14 Thread: id = 210 os_tid = 0xa48 Process: id = "22" image_name = "susupj.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\susupj.exe" page_root = "0x35605000" os_pid = "0x920" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x980" cmd_line = "SUsupj.exe -c C: /accepteula" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 170 os_tid = 0x934 [0151.455] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x76c20000 [0151.455] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0151.455] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0151.455] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="DeviceIoControl") returned 0x76c3322f [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="FormatMessageW") returned 0x76c34620 [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="ExpandEnvironmentStringsW") returned 0x76c34173 [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentDirectoryW") returned 0x76c35611 [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceW") returned 0x76c4f7aa [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="RemoveDirectoryW") returned 0x76cb44cf [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="GetFullPathNameW") returned 0x76c340d4 [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileAttributesW") returned 0x76c31b18 [0151.456] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileW") returned 0x76c49af0 [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatW") returned 0x76c534d7 [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesW") returned 0x76cb425f [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLCID") returned 0x76c33da5 [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocale") returned 0x76c4ce46 [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoW") returned 0x76c33c42 [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="OutputDebugStringW") returned 0x76c5d1d4 [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleW") returned 0x76cd739a [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0151.457] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryW") returned 0x76c3492b [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatW") returned 0x76c4f481 [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileAttributesW") returned 0x76c4d4f7 [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0151.458] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="GetNumberOfConsoleInputEvents") returned 0x76cd793f [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="PeekConsoleInputA") returned 0x76cd6f0d [0151.459] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleInputA") returned 0x76cd6f53 [0151.460] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleMode") returned 0x76c4a77d [0151.460] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0151.460] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0151.460] GetProcAddress (hModule=0x76c20000, lpProcName="FatalAppExitA") returned 0x76cb4691 [0151.460] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0151.460] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0151.460] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0151.460] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0151.460] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0151.460] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventW") returned 0x76c3183e [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0151.461] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0151.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0151.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThread") returned 0x76c317ec [0151.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0151.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0151.462] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleCtrlHandler") returned 0x76c38a09 [0151.462] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0151.462] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0151.462] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0151.462] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0151.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0151.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0151.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0151.462] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0151.462] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0151.462] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0151.463] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14 [0151.463] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0151.463] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0151.463] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyW") returned 0x74d52459 [0151.463] GetProcAddress (hModule=0x74d40000, lpProcName="RegCreateKeyW") returned 0x74d51514 [0151.463] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0151.463] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGenRandom") returned 0x74d4dfc8 [0151.463] LoadLibraryA (lpLibFileName="COMDLG32.dll") returned 0x74ec0000 [0151.463] GetProcAddress (hModule=0x74ec0000, lpProcName="PrintDlgW") returned 0x74ec33a3 [0151.463] LoadLibraryA (lpLibFileName="GDI32.dll") returned 0x75ad0000 [0151.463] GetProcAddress (hModule=0x75ad0000, lpProcName="StartPage") returned 0x75b1401a [0151.463] GetProcAddress (hModule=0x75ad0000, lpProcName="EndDoc") returned 0x75b13f29 [0151.463] GetProcAddress (hModule=0x75ad0000, lpProcName="StartDocW") returned 0x75b14c51 [0151.463] GetProcAddress (hModule=0x75ad0000, lpProcName="SetMapMode") returned 0x75aeb02f [0151.464] GetProcAddress (hModule=0x75ad0000, lpProcName="GetDeviceCaps") returned 0x75ae4de0 [0151.464] GetProcAddress (hModule=0x75ad0000, lpProcName="EndPage") returned 0x75af6bde [0151.464] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0151.464] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0151.464] GetProcAddress (hModule=0x74f40000, lpProcName="InflateRect") returned 0x74f63309 [0151.464] GetProcAddress (hModule=0x74f40000, lpProcName="GetSysColorBrush") returned 0x74f635a4 [0151.464] GetProcAddress (hModule=0x74f40000, lpProcName="SetCursor") returned 0x74f641f6 [0151.464] GetProcAddress (hModule=0x74f40000, lpProcName="SetWindowTextW") returned 0x74f620ec [0151.464] GetProcAddress (hModule=0x74f40000, lpProcName="GetDlgItem") returned 0x74f7f1ba [0151.464] GetProcAddress (hModule=0x74f40000, lpProcName="EndDialog") returned 0x74f7b99c [0151.464] GetProcAddress (hModule=0x74f40000, lpProcName="DialogBoxIndirectParamW") returned 0x74f7cbf3 [0151.464] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0151.464] LoadLibraryA (lpLibFileName="VERSION.dll") returned 0x74a30000 [0151.464] GetProcAddress (hModule=0x74a30000, lpProcName="VerQueryValueW") returned 0x74a31b51 [0151.464] GetProcAddress (hModule=0x74a30000, lpProcName="GetFileVersionInfoW") returned 0x74a319f4 [0151.464] GetProcAddress (hModule=0x74a30000, lpProcName="GetFileVersionInfoSizeW") returned 0x74a319d9 [0151.465] VirtualProtect (in: lpAddress=0x350000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0x55fa98 | out: lpflOldProtect=0x55fa98*=0x2) returned 1 [0151.471] VirtualProtect (in: lpAddress=0x350000, dwSize=0x1000, flNewProtect=0x2, lpflOldProtect=0x55fa98 | out: lpflOldProtect=0x55fa98*=0x4) returned 1 [0151.471] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x55faa8 | out: lpSystemTimeAsFileTime=0x55faa8*(dwLowDateTime=0xb690c40, dwHighDateTime=0x1d5793f)) [0151.471] GetCurrentThreadId () returned 0x934 [0151.471] GetCurrentProcessId () returned 0x920 [0151.471] QueryPerformanceCounter (in: lpPerformanceCount=0x55faa0 | out: lpPerformanceCount=0x55faa0*=27175594591) returned 1 [0151.471] GetProcessHeap () returned 0x5d0000 [0151.472] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0151.472] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0151.472] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0151.472] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0151.472] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0151.472] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0151.472] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0151.472] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0151.472] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0151.472] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0151.472] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0151.472] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0151.472] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0151.473] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0151.473] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0151.473] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0151.473] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0151.473] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0151.473] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0151.473] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0151.473] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0151.473] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0151.473] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0151.473] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0151.473] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0151.473] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0151.473] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0151.474] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0151.474] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0151.474] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0151.474] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0151.474] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0151.474] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0151.474] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0151.474] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3bc) returned 0x5e5e50 [0151.475] GetCurrentThreadId () returned 0x934 [0151.475] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x18) returned 0x5e6218 [0151.475] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x800) returned 0x5e6238 [0151.475] GetStartupInfoW (in: lpStartupInfo=0x55fa08 | out: lpStartupInfo=0x55fa08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="SUsupj.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x104, hStdOutput=0xf0, hStdError=0xe0)) [0151.475] GetStdHandle (nStdHandle=0xfffffff6) returned 0x104 [0151.475] GetFileType (hFile=0x104) returned 0x2 [0151.475] GetStdHandle (nStdHandle=0xfffffff5) returned 0xf0 [0151.475] GetFileType (hFile=0xf0) returned 0x3 [0151.475] GetStdHandle (nStdHandle=0xfffffff4) returned 0xe0 [0151.475] GetFileType (hFile=0xe0) returned 0x3 [0151.475] GetCommandLineW () returned="SUsupj.exe -c C: /accepteula" [0151.475] GetEnvironmentStringsW () returned 0x5e6a40* [0151.475] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xaca) returned 0x5e7518 [0151.475] FreeEnvironmentStringsW (penv=0x5e6a40) returned 1 [0151.475] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x385068, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SUsupj.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\susupj.exe")) returned 0x30 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4e) returned 0x5e6a40 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x98) returned 0x5e6a98 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3e) returned 0x5e8008 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x6c) returned 0x5e6b38 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x6e) returned 0x5e6bb0 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x78) returned 0x5df6d0 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x62) returned 0x5e6c28 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x2e) returned 0x5e6c98 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x48) returned 0x5e6cd0 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x28) returned 0x5e6d20 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1a) returned 0x5e5848 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x4a) returned 0x5e6d50 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x72) returned 0x5df750 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x30) returned 0x5e6da8 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x2e) returned 0x5e6de0 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1c) returned 0x5e5870 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xd2) returned 0x5e6e18 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x7c) returned 0x5e6ef8 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x36) returned 0x5e6f80 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3a) returned 0x5e8050 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x90) returned 0x5e6fc0 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x24) returned 0x5e7058 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x30) returned 0x5e7088 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x36) returned 0x5e70c0 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x48) returned 0x5e7100 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x52) returned 0x5e7150 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3c) returned 0x5e8098 [0151.476] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x82) returned 0x5e71b0 [0151.477] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x2e) returned 0x5e7240 [0151.477] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1e) returned 0x5e5898 [0151.477] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x2c) returned 0x5e7278 [0151.477] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x54) returned 0x5e72b0 [0151.477] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x52) returned 0x5e7310 [0151.477] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x2a) returned 0x5e7370 [0151.477] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3c) returned 0x5e80e0 [0151.477] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x54) returned 0x5e73a8 [0151.477] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x24) returned 0x5e7408 [0151.477] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x30) returned 0x5e7438 [0151.477] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x8c) returned 0x5e7470 [0151.477] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e7518 | out: hHeap=0x5d0000) returned 1 [0151.477] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x800) returned 0x5e7508 [0151.477] GetLastError () returned 0x0 [0151.477] SetLastError (dwErrCode=0x0) [0151.477] GetLastError () returned 0x0 [0151.477] SetLastError (dwErrCode=0x0) [0151.477] GetLastError () returned 0x0 [0151.478] SetLastError (dwErrCode=0x0) [0151.478] GetACP () returned 0x4e4 [0151.478] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x220) returned 0x5e7d10 [0151.478] GetLastError () returned 0x0 [0151.478] SetLastError (dwErrCode=0x0) [0151.478] IsValidCodePage (CodePage=0x4e4) returned 1 [0151.478] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x55f9fc | out: lpCPInfo=0x55f9fc) returned 1 [0151.478] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x55f4c4 | out: lpCPInfo=0x55f4c4) returned 1 [0151.478] GetLastError () returned 0x0 [0151.478] SetLastError (dwErrCode=0x0) [0151.478] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x55f8d8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0151.478] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x55f8d8, cbMultiByte=256, lpWideCharStr=0x55f248, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0151.478] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x55f4d8 | out: lpCharType=0x55f4d8) returned 1 [0151.478] GetLastError () returned 0x0 [0151.478] SetLastError (dwErrCode=0x0) [0151.478] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x55f8d8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0151.478] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x55f8d8, cbMultiByte=256, lpWideCharStr=0x55f218, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0151.478] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0151.478] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x55f008, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0151.478] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x55f7d8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ^ÜvY\x14úU", lpUsedDefaultChar=0x0) returned 256 [0151.478] GetLastError () returned 0x0 [0151.478] SetLastError (dwErrCode=0x0) [0151.478] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x55f8d8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0151.478] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x55f8d8, cbMultiByte=256, lpWideCharStr=0x55f228, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0151.478] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0151.478] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x55f018, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0151.478] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x55f6d8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ^ÜvY\x14úU", lpUsedDefaultChar=0x0) returned 256 [0151.479] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x80) returned 0x5e7f38 [0151.479] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0151.479] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x361189) returned 0x0 [0151.479] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e7f38) returned 0x80 [0151.479] GetLastError () returned 0x0 [0151.479] SetLastError (dwErrCode=0x0) [0151.479] GetLastError () returned 0x0 [0151.479] SetLastError (dwErrCode=0x0) [0151.479] RegCreateKeyW (in: hKey=0x80000001, lpSubKey="Software\\Sysinternals\\SDelete", phkResult=0x55f800 | out: phkResult=0x55f800*=0x94) returned 0x0 [0151.480] RegQueryValueExW (in: hKey=0x94, lpValueName="EulaAccepted", lpReserved=0x0, lpType=0x0, lpData=0x55f804, lpcbData=0x55f7fc*=0x4 | out: lpType=0x0, lpData=0x55f804*=0x0, lpcbData=0x55f7fc*=0x4) returned 0x2 [0151.480] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x55f81c, nSize=0x208 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SUsupj.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\susupj.exe")) returned 0x30 [0151.480] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SUsupj.exe", lpdwHandle=0x55f810 | out: lpdwHandle=0x55f810) returned 0x64c [0151.480] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x64c) returned 0x5e9438 [0151.480] GetFileVersionInfoW (in: lptstrFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SUsupj.exe", dwHandle=0x0, dwLen=0x64c, lpData=0x5e9438 | out: lpData=0x5e9438) returned 1 [0151.480] VerQueryValueW (in: pBlock=0x5e9438, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x55f5ec, puLen=0x55f5dc | out: lplpBuffer=0x55f5ec*=0x5e9758, puLen=0x55f5dc) returned 1 [0151.482] GetLastError () returned 0x0 [0151.482] SetLastError (dwErrCode=0x0) [0151.482] GetLastError () returned 0x0 [0151.482] SetLastError (dwErrCode=0x0) [0151.482] VerQueryValueW (in: pBlock=0x5e9438, lpSubBlock="\\StringFileInfo\\040904B0\\InternalName", lplpBuffer=0x55f5e8, puLen=0x55f5e0 | out: lplpBuffer=0x55f5e8*=0x5e95d4, puLen=0x55f5e0) returned 1 [0151.482] VerQueryValueW (in: pBlock=0x5e9438, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x55f5e4, puLen=0x55f5d4 | out: lplpBuffer=0x55f5e4*=0x5e9758, puLen=0x55f5d4) returned 1 [0151.482] GetLastError () returned 0x0 [0151.482] SetLastError (dwErrCode=0x0) [0151.482] GetLastError () returned 0x0 [0151.482] SetLastError (dwErrCode=0x0) [0151.482] VerQueryValueW (in: pBlock=0x5e9438, lpSubBlock="\\StringFileInfo\\040904B0\\FileVersion", lplpBuffer=0x55f5e0, puLen=0x55f5d8 | out: lplpBuffer=0x55f5e0*=0x5e95a8, puLen=0x55f5d8) returned 1 [0151.482] VerQueryValueW (in: pBlock=0x5e9438, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x55f5dc, puLen=0x55f5cc | out: lplpBuffer=0x55f5dc*=0x5e9758, puLen=0x55f5cc) returned 1 [0151.482] GetLastError () returned 0x0 [0151.482] SetLastError (dwErrCode=0x0) [0151.482] GetLastError () returned 0x0 [0151.483] SetLastError (dwErrCode=0x0) [0151.483] VerQueryValueW (in: pBlock=0x5e9438, lpSubBlock="\\StringFileInfo\\040904B0\\FileDescription", lplpBuffer=0x55f5d8, puLen=0x55f5d0 | out: lplpBuffer=0x55f5d8*=0x5e9560, puLen=0x55f5d0) returned 1 [0151.483] VerQueryValueW (in: pBlock=0x5e9438, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x55f5d4, puLen=0x55f5c4 | out: lplpBuffer=0x55f5d4*=0x5e9758, puLen=0x55f5c4) returned 1 [0151.483] GetLastError () returned 0x0 [0151.483] SetLastError (dwErrCode=0x0) [0151.483] GetLastError () returned 0x0 [0151.483] SetLastError (dwErrCode=0x0) [0151.483] VerQueryValueW (in: pBlock=0x5e9438, lpSubBlock="\\StringFileInfo\\040904B0\\LegalCopyright", lplpBuffer=0x55f5d0, puLen=0x55f5c8 | out: lplpBuffer=0x55f5d0*=0x5e9608, puLen=0x55f5c8) returned 1 [0151.483] VerQueryValueW (in: pBlock=0x5e9438, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x55f5cc, puLen=0x55f5bc | out: lplpBuffer=0x55f5cc*=0x5e9758, puLen=0x55f5bc) returned 1 [0151.483] GetLastError () returned 0x0 [0151.483] SetLastError (dwErrCode=0x0) [0151.483] GetLastError () returned 0x0 [0151.483] SetLastError (dwErrCode=0x0) [0151.483] VerQueryValueW (in: pBlock=0x5e9438, lpSubBlock="\\StringFileInfo\\040904B0\\CompanyName", lplpBuffer=0x55f5c8, puLen=0x55f5c0 | out: lplpBuffer=0x55f5c8*=0x5e94f0, puLen=0x55f5c0) returned 1 [0151.483] GetStdHandle (nStdHandle=0xfffffff5) returned 0xf0 [0151.483] GetFileType (hFile=0xf0) returned 0x3 [0151.483] GetLastError () returned 0x0 [0151.483] SetLastError (dwErrCode=0x0) [0151.483] GetLastError () returned 0x0 [0151.483] SetLastError (dwErrCode=0x0) [0151.483] GetLastError () returned 0x0 [0151.483] SetLastError (dwErrCode=0x0) [0151.483] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x1000) returned 0x5e9bb8 [0151.484] GetLastError () returned 0x0 [0151.484] SetLastError (dwErrCode=0x0) [0151.484] GetLastError () returned 0x0 [0151.484] SetLastError (dwErrCode=0x0) [0151.484] GetLastError () returned 0x0 [0151.484] SetLastError (dwErrCode=0x0) [0151.484] GetLastError () returned 0x0 [0151.484] SetLastError (dwErrCode=0x0) [0151.484] GetLastError () returned 0x0 [0151.484] SetLastError (dwErrCode=0x0) [0151.484] GetLastError () returned 0x0 [0151.484] SetLastError (dwErrCode=0x0) [0151.484] GetLastError () returned 0x0 [0151.484] SetLastError (dwErrCode=0x0) [0151.484] GetLastError () returned 0x0 [0151.484] SetLastError (dwErrCode=0x0) [0151.484] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.485] SetLastError (dwErrCode=0x0) [0151.485] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.486] GetLastError () returned 0x0 [0151.486] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.487] GetLastError () returned 0x0 [0151.487] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.488] GetLastError () returned 0x0 [0151.488] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.489] SetLastError (dwErrCode=0x0) [0151.489] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.490] GetLastError () returned 0x0 [0151.490] SetLastError (dwErrCode=0x0) [0151.491] GetLastError () returned 0x0 [0151.491] SetLastError (dwErrCode=0x0) [0151.491] GetLastError () returned 0x0 [0151.491] SetLastError (dwErrCode=0x0) [0151.491] GetLastError () returned 0x0 [0151.491] SetLastError (dwErrCode=0x0) [0151.491] GetLastError () returned 0x0 [0151.491] SetLastError (dwErrCode=0x0) [0151.491] GetLastError () returned 0x0 [0151.491] SetLastError (dwErrCode=0x0) [0151.491] GetLastError () returned 0x0 [0151.491] SetLastError (dwErrCode=0x0) [0151.491] GetLastError () returned 0x0 [0151.491] SetLastError (dwErrCode=0x0) [0151.491] WriteFile (in: hFile=0xf0, lpBuffer=0x55e324*, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0x55dc50, lpOverlapped=0x0 | out: lpBuffer=0x55e324*, lpNumberOfBytesWritten=0x55dc50*=0x77, lpOverlapped=0x0) returned 1 [0151.491] GetLastError () returned 0x0 [0151.491] SetLastError (dwErrCode=0x0) [0151.491] GetLastError () returned 0x0 [0151.491] SetLastError (dwErrCode=0x0) [0151.491] RegCreateKeyW (in: hKey=0x80000001, lpSubKey="Software\\Sysinternals\\SDelete", phkResult=0x55f80c | out: phkResult=0x55f80c*=0x98) returned 0x0 [0151.492] RegQueryValueExW (in: hKey=0x98, lpValueName="EulaAccepted", lpReserved=0x0, lpType=0x0, lpData=0x55fa28, lpcbData=0x55f808*=0x4 | out: lpType=0x0, lpData=0x55fa28*=0x1, lpcbData=0x55f808*=0x4) returned 0x2 [0151.492] RegSetValueExW (in: hKey=0x98, lpValueName="EulaAccepted", Reserved=0x0, dwType=0x4, lpData=0x55fa28*=0x1, cbData=0x4 | out: lpData=0x55fa28*=0x1) returned 0x0 [0151.492] RegCloseKey (hKey=0x98) returned 0x0 [0151.492] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x5e2f90 [0151.492] GetLastError () returned 0x0 [0151.492] SetLastError (dwErrCode=0x0) [0151.492] GetLastError () returned 0x0 [0151.492] SetLastError (dwErrCode=0x0) [0151.492] CryptAcquireContextW (in: phProv=0x3852a0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0x0 | out: phProv=0x3852a0*=0x5eac60) returned 1 [0151.644] GetLastError () returned 0x0 [0151.644] SetLastError (dwErrCode=0x0) [0151.644] GetVersion () returned 0x1db10106 [0151.645] GetModuleHandleW (lpModuleName="ntdll.dll") returned 0x77130000 [0151.645] GetProcAddress (hModule=0x77130000, lpProcName="NtFsControlFile") returned 0x7714fde8 [0151.645] GetModuleHandleW (lpModuleName="ntdll.dll") returned 0x77130000 [0151.645] GetProcAddress (hModule=0x77130000, lpProcName="RtlNtStatusToDosError") returned 0x771661ed [0151.645] LoadLibraryW (lpLibFileName="Kernel32.dll") returned 0x76c20000 [0151.645] GetProcAddress (hModule=0x76c20000, lpProcName="Wow64EnableWow64FsRedirection") returned 0x76c4ebe8 [0151.645] Wow64EnableWow64FsRedirection (Wow64FsEnableRedirection=0) returned 1 [0151.645] GetLastError () returned 0x0 [0151.645] SetLastError (dwErrCode=0x0) [0151.645] GetLastError () returned 0x0 [0151.645] SetLastError (dwErrCode=0x0) [0151.645] GetLastError () returned 0x0 [0151.645] SetLastError (dwErrCode=0x0) [0151.645] GetFullPathNameW (in: lpFileName="C:", nBufferLength=0x104, lpBuffer=0x55f83c, lpFilePart=0x55f838 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x55f838*="Desktop") returned 0x25 [0151.645] GetLastError () returned 0x0 [0151.645] SetLastError (dwErrCode=0x0) [0151.645] GetLastError () returned 0x0 [0151.645] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.646] SetLastError (dwErrCode=0x0) [0151.646] GetLastError () returned 0x0 [0151.647] SetLastError (dwErrCode=0x0) [0151.647] GetLastError () returned 0x0 [0151.647] SetLastError (dwErrCode=0x0) [0151.647] GetLastError () returned 0x0 [0151.647] SetLastError (dwErrCode=0x0) [0151.647] GetLastError () returned 0x0 [0151.647] SetLastError (dwErrCode=0x0) [0151.647] GetLastError () returned 0x0 [0151.647] SetLastError (dwErrCode=0x0) [0151.647] GetLastError () returned 0x0 [0151.647] SetLastError (dwErrCode=0x0) [0151.647] GetLastError () returned 0x0 [0151.647] SetLastError (dwErrCode=0x0) [0151.647] GetLastError () returned 0x0 [0151.647] SetLastError (dwErrCode=0x0) [0151.647] GetLastError () returned 0x0 [0151.647] SetLastError (dwErrCode=0x0) [0151.647] GetLastError () returned 0x0 [0151.647] SetLastError (dwErrCode=0x0) [0151.647] GetLastError () returned 0x0 [0151.647] SetLastError (dwErrCode=0x0) [0151.647] GetLastError () returned 0x0 [0151.647] SetLastError (dwErrCode=0x0) [0151.647] GetLastError () returned 0x0 [0151.647] SetLastError (dwErrCode=0x0) [0151.647] GetLastError () returned 0x0 [0151.647] SetLastError (dwErrCode=0x0) [0151.648] WriteFile (in: hFile=0xf0, lpBuffer=0x55dee0*, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0x55d80c, lpOverlapped=0x0 | out: lpBuffer=0x55dee0*, lpNumberOfBytesWritten=0x55d80c*=0x39, lpOverlapped=0x0) returned 1 [0151.648] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f37c, lpTotalNumberOfClusters=0x55f378 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f37c, lpTotalNumberOfClusters=0x55f378) returned 1 [0151.648] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0151.648] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0151.648] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f370, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f370, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0151.648] ExpandEnvironmentStringsW (in: lpSrc="%TEMP%", lpDst=0x55f3f4, nSize=0x104 | out: lpDst="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x25 [0151.648] GetLastError () returned 0x0 [0151.648] SetLastError (dwErrCode=0x0) [0151.648] GetLastError () returned 0x0 [0151.648] SetLastError (dwErrCode=0x0) [0151.648] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\SDELTEMP" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\sdeltemp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2c000002, hTemplateFile=0x0) returned 0x98 [0151.649] DeviceIoControl (in: hDevice=0x98, dwIoControlCode=0x9c040, lpInBuffer=0x55f3ac*, nInBufferSize=0x2, lpOutBuffer=0x0, nOutBufferSize=0x0, lpBytesReturned=0x55f3a8, lpOverlapped=0x0 | out: lpInBuffer=0x55f3ac*, lpOutBuffer=0x0*, lpBytesReturned=0x55f3a8*=0x0, lpOverlapped=0x0) returned 1 [0151.649] VirtualAlloc (lpAddress=0x0, dwSize=0xa00000, flAllocationType=0x1000, flProtect=0x4) returned 0x2200000 [0151.650] VirtualAlloc (lpAddress=0x0, dwSize=0xa00000, flAllocationType=0x1000, flProtect=0x4) returned 0x2c00000 [0151.886] VirtualAlloc (lpAddress=0x0, dwSize=0xa00000, flAllocationType=0x1000, flProtect=0x4) returned 0x3600000 [0151.886] CryptGenRandom (in: hProv=0x5eac60, dwLen=0xa00000, pbBuffer=0x3600000 | out: pbBuffer=0x3600000) returned 1 [0152.149] GetTickCount () returned 0x115db23 [0152.149] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.160] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x0 [0152.160] GetTickCount () returned 0x115db23 [0152.160] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.163] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x0 [0152.163] GetTickCount () returned 0x115db33 [0152.163] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.165] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.165] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.165] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.165] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.165] GetTickCount () returned 0x115db33 [0152.165] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.167] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x80000 [0152.167] GetTickCount () returned 0x115db33 [0152.167] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.168] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x80000 [0152.168] GetTickCount () returned 0x115db33 [0152.168] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.170] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.170] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.170] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.170] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.170] GetTickCount () returned 0x115db33 [0152.170] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.172] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x100000 [0152.172] GetTickCount () returned 0x115db33 [0152.172] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.173] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x100000 [0152.173] GetTickCount () returned 0x115db33 [0152.173] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.271] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.271] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.271] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.271] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.271] GetTickCount () returned 0x115dba0 [0152.271] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.273] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x180000 [0152.273] GetTickCount () returned 0x115dba0 [0152.273] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.275] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x180000 [0152.275] GetTickCount () returned 0x115dba0 [0152.275] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.277] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.277] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.277] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.277] GetTickCount () returned 0x115dba0 [0152.277] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.279] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x200000 [0152.279] GetTickCount () returned 0x115dba0 [0152.279] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.280] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x200000 [0152.280] GetTickCount () returned 0x115dba0 [0152.280] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.282] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.282] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.282] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.282] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.282] GetTickCount () returned 0x115dba0 [0152.282] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.284] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x280000 [0152.284] GetTickCount () returned 0x115dba0 [0152.284] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.285] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x280000 [0152.285] GetTickCount () returned 0x115dba0 [0152.285] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.287] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.287] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.287] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.287] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.287] GetTickCount () returned 0x115dbb0 [0152.287] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.289] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x300000 [0152.289] GetTickCount () returned 0x115dbb0 [0152.289] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.290] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x300000 [0152.290] GetTickCount () returned 0x115dbb0 [0152.290] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.291] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.291] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.291] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.291] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.291] GetTickCount () returned 0x115dbb0 [0152.292] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.293] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x380000 [0152.293] GetTickCount () returned 0x115dbb0 [0152.293] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.295] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x380000 [0152.295] GetTickCount () returned 0x115dbb0 [0152.295] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.297] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.297] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.297] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.297] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.297] GetTickCount () returned 0x115dbb0 [0152.297] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.299] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x400000 [0152.299] GetTickCount () returned 0x115dbb0 [0152.299] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.301] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x400000 [0152.301] GetTickCount () returned 0x115dbb0 [0152.301] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.302] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.302] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.302] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.302] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.302] GetTickCount () returned 0x115dbbf [0152.302] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.306] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x480000 [0152.306] GetTickCount () returned 0x115dbbf [0152.306] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.308] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x480000 [0152.308] GetTickCount () returned 0x115dbbf [0152.308] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.309] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.309] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.309] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.309] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.309] GetTickCount () returned 0x115dbbf [0152.310] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.312] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x500000 [0152.312] GetTickCount () returned 0x115dbbf [0152.312] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.313] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x500000 [0152.313] GetTickCount () returned 0x115dbbf [0152.313] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.314] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.315] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.315] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.315] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.315] GetTickCount () returned 0x115dbbf [0152.315] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.316] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x580000 [0152.317] GetTickCount () returned 0x115dbbf [0152.317] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.318] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x580000 [0152.318] GetTickCount () returned 0x115dbcf [0152.318] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.319] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.319] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.319] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.319] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.320] GetTickCount () returned 0x115dbcf [0152.320] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.321] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x600000 [0152.321] GetTickCount () returned 0x115dbcf [0152.321] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.323] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x600000 [0152.323] GetTickCount () returned 0x115dbcf [0152.323] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.324] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.324] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.324] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.324] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.324] GetTickCount () returned 0x115dbcf [0152.324] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.326] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x680000 [0152.326] GetTickCount () returned 0x115dbcf [0152.326] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.327] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x680000 [0152.327] GetTickCount () returned 0x115dbcf [0152.327] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.329] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.329] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.329] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.329] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.329] GetTickCount () returned 0x115dbcf [0152.329] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.389] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x700000 [0152.389] GetTickCount () returned 0x115dc0d [0152.389] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.390] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x700000 [0152.390] GetTickCount () returned 0x115dc0d [0152.390] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.392] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.392] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.392] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.392] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.392] GetTickCount () returned 0x115dc0d [0152.392] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.395] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x780000 [0152.395] GetTickCount () returned 0x115dc1d [0152.395] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.397] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x780000 [0152.397] GetTickCount () returned 0x115dc1d [0152.397] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.399] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.399] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.399] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.399] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.399] GetTickCount () returned 0x115dc1d [0152.399] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.496] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x800000 [0152.496] GetTickCount () returned 0x115dc7a [0152.496] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.498] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x800000 [0152.498] GetTickCount () returned 0x115dc7a [0152.498] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.511] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.511] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.511] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.511] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.511] GetTickCount () returned 0x115dc8a [0152.511] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.524] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x880000 [0152.524] GetTickCount () returned 0x115dc9a [0152.525] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.527] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x880000 [0152.527] GetTickCount () returned 0x115dc9a [0152.527] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.528] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.529] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.529] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.529] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.529] GetTickCount () returned 0x115dc9a [0152.529] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.541] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x900000 [0152.541] GetTickCount () returned 0x115dca9 [0152.541] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.544] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x900000 [0152.544] GetTickCount () returned 0x115dca9 [0152.544] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.545] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.545] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.545] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.545] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.546] GetTickCount () returned 0x115dca9 [0152.546] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.547] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x980000 [0152.548] GetTickCount () returned 0x115dca9 [0152.548] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.550] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x980000 [0152.550] GetTickCount () returned 0x115dca9 [0152.550] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.552] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.552] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.552] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.552] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.552] GetTickCount () returned 0x115dcb9 [0152.552] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.554] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xa00000 [0152.554] GetTickCount () returned 0x115dcb9 [0152.554] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.556] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xa00000 [0152.556] GetTickCount () returned 0x115dcb9 [0152.556] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.557] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.557] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.557] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.557] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.557] GetTickCount () returned 0x115dcb9 [0152.557] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.559] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xa80000 [0152.559] GetTickCount () returned 0x115dcb9 [0152.559] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.561] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xa80000 [0152.561] GetTickCount () returned 0x115dcb9 [0152.561] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.562] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.562] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.563] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.563] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.563] GetTickCount () returned 0x115dcb9 [0152.563] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.804] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xb00000 [0152.804] GetTickCount () returned 0x115ddb2 [0152.804] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.807] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xb00000 [0152.807] GetTickCount () returned 0x115ddb2 [0152.807] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.809] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.809] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.809] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.809] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.809] GetTickCount () returned 0x115ddb2 [0152.809] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.875] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xb80000 [0152.875] GetTickCount () returned 0x115de00 [0152.881] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.931] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xb80000 [0152.931] GetTickCount () returned 0x115de2f [0152.931] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.972] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.973] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.973] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.973] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.973] GetTickCount () returned 0x115de5e [0152.973] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.977] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xc00000 [0152.977] GetTickCount () returned 0x115de5e [0152.977] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.978] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xc00000 [0152.978] GetTickCount () returned 0x115de5e [0152.978] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.980] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.980] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.980] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.980] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.980] GetTickCount () returned 0x115de5e [0152.980] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.982] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xc80000 [0152.982] GetTickCount () returned 0x115de5e [0152.982] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.984] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xc80000 [0152.984] GetTickCount () returned 0x115de5e [0152.984] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.985] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.986] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.986] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.986] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.986] GetTickCount () returned 0x115de5e [0152.986] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.988] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xd00000 [0152.988] GetTickCount () returned 0x115de6e [0152.988] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.989] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xd00000 [0152.989] GetTickCount () returned 0x115de6e [0152.989] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.991] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.991] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.991] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.991] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.991] GetTickCount () returned 0x115de6e [0152.991] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.993] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xd80000 [0152.993] GetTickCount () returned 0x115de6e [0152.993] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.995] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xd80000 [0152.995] GetTickCount () returned 0x115de6e [0152.995] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.996] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0152.996] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0152.996] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0152.996] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0152.996] GetTickCount () returned 0x115de6e [0152.996] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0152.998] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xe00000 [0152.998] GetTickCount () returned 0x115de6e [0152.998] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.000] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xe00000 [0153.000] GetTickCount () returned 0x115de6e [0153.000] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.001] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.001] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.001] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.001] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.001] GetTickCount () returned 0x115de6e [0153.001] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.004] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xe80000 [0153.004] GetTickCount () returned 0x115de7d [0153.004] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.005] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xe80000 [0153.005] GetTickCount () returned 0x115de7d [0153.005] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.006] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.007] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.007] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.007] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.007] GetTickCount () returned 0x115de7d [0153.007] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.009] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xf00000 [0153.009] GetTickCount () returned 0x115de7d [0153.009] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.010] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xf00000 [0153.010] GetTickCount () returned 0x115de7d [0153.010] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.011] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.011] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.012] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.012] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.012] GetTickCount () returned 0x115de7d [0153.012] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.018] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xf80000 [0153.018] GetTickCount () returned 0x115de7d [0153.018] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.019] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0xf80000 [0153.019] GetTickCount () returned 0x115de8d [0153.019] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.021] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.021] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.021] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.021] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.021] GetTickCount () returned 0x115de8d [0153.021] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.025] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1000000 [0153.025] GetTickCount () returned 0x115de8d [0153.025] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.026] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1000000 [0153.026] GetTickCount () returned 0x115de8d [0153.026] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.027] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.028] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.028] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.028] GetTickCount () returned 0x115de8d [0153.028] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.030] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1080000 [0153.030] GetTickCount () returned 0x115de8d [0153.030] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.031] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1080000 [0153.031] GetTickCount () returned 0x115de8d [0153.031] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.033] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.033] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.033] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.033] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.033] GetTickCount () returned 0x115de8d [0153.033] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.035] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1100000 [0153.035] GetTickCount () returned 0x115de9c [0153.035] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.036] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1100000 [0153.036] GetTickCount () returned 0x115de9c [0153.037] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.038] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.038] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.038] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.038] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.038] GetTickCount () returned 0x115de9c [0153.038] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.040] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1180000 [0153.040] GetTickCount () returned 0x115de9c [0153.040] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.041] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1180000 [0153.041] GetTickCount () returned 0x115de9c [0153.041] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.043] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.043] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.043] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.043] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.043] GetTickCount () returned 0x115de9c [0153.043] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.045] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1200000 [0153.045] GetTickCount () returned 0x115de9c [0153.045] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.047] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1200000 [0153.047] GetTickCount () returned 0x115de9c [0153.047] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.048] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.048] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.048] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.048] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.048] GetTickCount () returned 0x115de9c [0153.048] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.050] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1280000 [0153.050] GetTickCount () returned 0x115deac [0153.050] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.052] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1280000 [0153.052] GetTickCount () returned 0x115deac [0153.052] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.053] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.053] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.053] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.053] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.054] GetTickCount () returned 0x115deac [0153.054] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.055] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1300000 [0153.055] GetTickCount () returned 0x115deac [0153.056] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.057] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1300000 [0153.057] GetTickCount () returned 0x115deac [0153.057] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.058] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.058] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.059] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.059] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.059] GetTickCount () returned 0x115deac [0153.059] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.061] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1380000 [0153.061] GetTickCount () returned 0x115deac [0153.061] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.062] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1380000 [0153.062] GetTickCount () returned 0x115deac [0153.062] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.064] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.064] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.064] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.064] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.064] GetTickCount () returned 0x115deac [0153.064] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.066] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1400000 [0153.066] GetTickCount () returned 0x115debc [0153.066] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.067] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1400000 [0153.067] GetTickCount () returned 0x115debc [0153.067] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.069] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.069] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.069] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.069] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.069] GetTickCount () returned 0x115debc [0153.069] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.071] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1480000 [0153.071] GetTickCount () returned 0x115debc [0153.071] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.072] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1480000 [0153.072] GetTickCount () returned 0x115debc [0153.072] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.074] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.074] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.074] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.074] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.074] GetTickCount () returned 0x115debc [0153.074] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.076] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1500000 [0153.076] GetTickCount () returned 0x115debc [0153.076] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.077] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1500000 [0153.077] GetTickCount () returned 0x115debc [0153.077] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.079] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.079] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.079] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.079] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.079] GetTickCount () returned 0x115debc [0153.079] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.082] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1580000 [0153.082] GetTickCount () returned 0x115decb [0153.082] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.083] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1580000 [0153.083] GetTickCount () returned 0x115decb [0153.083] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.085] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.085] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.085] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.085] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.085] GetTickCount () returned 0x115decb [0153.085] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.093] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1600000 [0153.093] GetTickCount () returned 0x115decb [0153.093] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.094] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1600000 [0153.094] GetTickCount () returned 0x115decb [0153.094] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.096] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.096] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.096] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.096] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.096] GetTickCount () returned 0x115decb [0153.096] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.098] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1680000 [0153.098] GetTickCount () returned 0x115dedb [0153.098] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.100] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1680000 [0153.100] GetTickCount () returned 0x115dedb [0153.100] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.101] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.101] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.101] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.101] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.101] GetTickCount () returned 0x115dedb [0153.101] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.107] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1700000 [0153.107] GetTickCount () returned 0x115dedb [0153.107] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.108] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1700000 [0153.109] GetTickCount () returned 0x115dedb [0153.109] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.110] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.110] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.110] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.110] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.110] GetTickCount () returned 0x115dedb [0153.110] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.112] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1780000 [0153.112] GetTickCount () returned 0x115dedb [0153.112] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.113] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1780000 [0153.113] GetTickCount () returned 0x115deea [0153.113] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.115] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.115] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.115] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.115] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.115] GetTickCount () returned 0x115deea [0153.115] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.125] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1800000 [0153.125] GetTickCount () returned 0x115deea [0153.125] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.127] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1800000 [0153.127] GetTickCount () returned 0x115deea [0153.127] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.128] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.128] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.128] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.128] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.128] GetTickCount () returned 0x115defa [0153.128] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.130] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1880000 [0153.130] GetTickCount () returned 0x115defa [0153.130] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.132] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1880000 [0153.132] GetTickCount () returned 0x115defa [0153.132] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.133] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.133] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.134] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.134] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.134] GetTickCount () returned 0x115defa [0153.134] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.136] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1900000 [0153.136] GetTickCount () returned 0x115defa [0153.136] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.137] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1900000 [0153.137] GetTickCount () returned 0x115defa [0153.137] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.138] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.139] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.139] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.139] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.139] GetTickCount () returned 0x115defa [0153.139] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.141] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1980000 [0153.141] GetTickCount () returned 0x115defa [0153.141] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.142] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1980000 [0153.142] GetTickCount () returned 0x115defa [0153.142] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.144] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.144] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.144] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.144] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.144] GetTickCount () returned 0x115df0a [0153.144] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.146] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1a00000 [0153.146] GetTickCount () returned 0x115df0a [0153.146] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.148] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1a00000 [0153.148] GetTickCount () returned 0x115df0a [0153.148] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.149] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.149] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.149] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.149] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.149] GetTickCount () returned 0x115df0a [0153.149] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.154] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1a80000 [0153.154] GetTickCount () returned 0x115df0a [0153.154] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.155] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1a80000 [0153.155] GetTickCount () returned 0x115df0a [0153.155] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.157] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.157] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.157] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.157] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.157] GetTickCount () returned 0x115df0a [0153.157] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.159] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1b00000 [0153.159] GetTickCount () returned 0x115df0a [0153.159] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.161] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1b00000 [0153.161] GetTickCount () returned 0x115df19 [0153.161] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.162] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.162] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.162] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.162] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.162] GetTickCount () returned 0x115df19 [0153.162] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.164] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1b80000 [0153.164] GetTickCount () returned 0x115df19 [0153.164] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.166] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1b80000 [0153.166] GetTickCount () returned 0x115df19 [0153.166] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.167] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.167] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.167] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.168] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.168] GetTickCount () returned 0x115df19 [0153.168] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.170] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1c00000 [0153.170] GetTickCount () returned 0x115df19 [0153.170] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.171] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1c00000 [0153.171] GetTickCount () returned 0x115df19 [0153.171] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.172] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.173] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.173] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.173] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.173] GetTickCount () returned 0x115df19 [0153.173] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.175] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1c80000 [0153.183] GetTickCount () returned 0x115df29 [0153.183] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.184] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1c80000 [0153.184] GetTickCount () returned 0x115df29 [0153.184] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.186] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.186] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.186] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.186] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.186] GetTickCount () returned 0x115df29 [0153.186] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.188] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1d00000 [0153.188] GetTickCount () returned 0x115df29 [0153.188] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.190] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1d00000 [0153.190] GetTickCount () returned 0x115df29 [0153.190] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.191] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.192] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.192] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.192] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.192] GetTickCount () returned 0x115df38 [0153.192] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.194] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1d80000 [0153.194] GetTickCount () returned 0x115df38 [0153.194] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.195] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1d80000 [0153.195] GetTickCount () returned 0x115df38 [0153.195] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.196] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.196] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.197] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.197] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.197] GetTickCount () returned 0x115df38 [0153.197] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.199] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1e00000 [0153.199] GetTickCount () returned 0x115df38 [0153.199] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.200] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1e00000 [0153.200] GetTickCount () returned 0x115df38 [0153.200] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.201] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.202] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.202] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.202] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.202] GetTickCount () returned 0x115df38 [0153.202] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.209] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1e80000 [0153.209] GetTickCount () returned 0x115df48 [0153.209] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.210] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1e80000 [0153.210] GetTickCount () returned 0x115df48 [0153.210] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.212] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.212] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.212] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.212] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.212] GetTickCount () returned 0x115df48 [0153.212] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.220] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1f00000 [0153.220] GetTickCount () returned 0x115df48 [0153.220] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.222] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1f00000 [0153.222] GetTickCount () returned 0x115df58 [0153.222] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.224] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.224] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.224] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.224] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.224] GetTickCount () returned 0x115df58 [0153.224] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.226] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1f80000 [0153.226] GetTickCount () returned 0x115df58 [0153.226] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.227] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x1f80000 [0153.228] GetTickCount () returned 0x115df58 [0153.228] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.229] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.229] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.229] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.229] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.229] GetTickCount () returned 0x115df58 [0153.229] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.231] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2000000 [0153.231] GetTickCount () returned 0x115df58 [0153.231] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.232] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2000000 [0153.233] GetTickCount () returned 0x115df58 [0153.233] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.234] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.234] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.234] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.234] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.234] GetTickCount () returned 0x115df58 [0153.234] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.240] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2080000 [0153.241] GetTickCount () returned 0x115df67 [0153.241] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.242] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2080000 [0153.242] GetTickCount () returned 0x115df67 [0153.242] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.243] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.243] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.243] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.243] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.244] GetTickCount () returned 0x115df67 [0153.244] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.245] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2100000 [0153.245] GetTickCount () returned 0x115df67 [0153.245] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.247] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2100000 [0153.247] GetTickCount () returned 0x115df67 [0153.247] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.248] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.248] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.248] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.248] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.248] GetTickCount () returned 0x115df67 [0153.248] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.255] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2180000 [0153.255] GetTickCount () returned 0x115df77 [0153.255] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.256] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2180000 [0153.256] GetTickCount () returned 0x115df77 [0153.256] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.257] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.258] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.258] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.258] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.258] GetTickCount () returned 0x115df77 [0153.258] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.265] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2200000 [0153.265] GetTickCount () returned 0x115df77 [0153.265] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.266] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2200000 [0153.266] GetTickCount () returned 0x115df77 [0153.266] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.267] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.267] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.267] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.267] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.268] GetTickCount () returned 0x115df77 [0153.268] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.274] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2280000 [0153.274] GetTickCount () returned 0x115df86 [0153.274] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.275] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2280000 [0153.275] GetTickCount () returned 0x115df86 [0153.275] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.277] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.277] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.277] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.277] GetTickCount () returned 0x115df86 [0153.277] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.278] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2300000 [0153.279] GetTickCount () returned 0x115df86 [0153.279] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.279] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2300000 [0153.280] GetTickCount () returned 0x115df86 [0153.280] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.283] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.284] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.284] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.284] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.284] GetTickCount () returned 0x115df86 [0153.284] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.285] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2380000 [0153.285] GetTickCount () returned 0x115df96 [0153.285] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.286] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2380000 [0153.286] GetTickCount () returned 0x115df96 [0153.286] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.287] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.287] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.287] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.287] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.287] GetTickCount () returned 0x115df96 [0153.288] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.289] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2400000 [0153.289] GetTickCount () returned 0x115df96 [0153.289] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.290] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2400000 [0153.290] GetTickCount () returned 0x115df96 [0153.290] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.291] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.291] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.291] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.291] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.291] GetTickCount () returned 0x115df96 [0153.291] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.292] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2480000 [0153.293] GetTickCount () returned 0x115df96 [0153.293] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.293] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2480000 [0153.294] GetTickCount () returned 0x115df96 [0153.294] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.295] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.295] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.295] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.295] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.295] GetTickCount () returned 0x115df96 [0153.295] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.296] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2500000 [0153.296] GetTickCount () returned 0x115df96 [0153.296] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.297] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2500000 [0153.297] GetTickCount () returned 0x115df96 [0153.297] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.299] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.299] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.299] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.299] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.299] GetTickCount () returned 0x115df96 [0153.299] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.300] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2580000 [0153.300] GetTickCount () returned 0x115dfa6 [0153.300] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.301] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2580000 [0153.301] GetTickCount () returned 0x115dfa6 [0153.301] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.302] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.303] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.303] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.303] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.303] GetTickCount () returned 0x115dfa6 [0153.303] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.304] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2600000 [0153.304] GetTickCount () returned 0x115dfa6 [0153.304] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.305] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2600000 [0153.305] GetTickCount () returned 0x115dfa6 [0153.305] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.306] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.306] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.306] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.306] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.306] GetTickCount () returned 0x115dfa6 [0153.307] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.308] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2680000 [0153.308] GetTickCount () returned 0x115dfa6 [0153.308] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.309] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2680000 [0153.309] GetTickCount () returned 0x115dfa6 [0153.309] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.310] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.310] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.310] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.310] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.310] GetTickCount () returned 0x115dfa6 [0153.310] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.311] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2700000 [0153.311] GetTickCount () returned 0x115dfa6 [0153.311] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.312] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2700000 [0153.312] GetTickCount () returned 0x115dfa6 [0153.312] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.313] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.313] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.313] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.313] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.314] GetTickCount () returned 0x115dfa6 [0153.314] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.315] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2780000 [0153.315] GetTickCount () returned 0x115dfa6 [0153.315] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.316] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2780000 [0153.316] GetTickCount () returned 0x115dfb5 [0153.316] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.317] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.317] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.317] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.317] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.318] GetTickCount () returned 0x115dfb5 [0153.318] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.319] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2800000 [0153.319] GetTickCount () returned 0x115dfb5 [0153.319] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.320] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2800000 [0153.320] GetTickCount () returned 0x115dfb5 [0153.320] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.321] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.321] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.321] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.321] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.321] GetTickCount () returned 0x115dfb5 [0153.321] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.322] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2880000 [0153.322] GetTickCount () returned 0x115dfb5 [0153.322] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.323] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2880000 [0153.324] GetTickCount () returned 0x115dfb5 [0153.324] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.324] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.325] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.325] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.325] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.325] GetTickCount () returned 0x115dfb5 [0153.325] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.326] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2900000 [0153.326] GetTickCount () returned 0x115dfb5 [0153.326] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.327] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2900000 [0153.327] GetTickCount () returned 0x115dfb5 [0153.327] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.328] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.328] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.328] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.328] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.329] GetTickCount () returned 0x115dfb5 [0153.329] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.330] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2980000 [0153.330] GetTickCount () returned 0x115dfb5 [0153.330] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.331] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2980000 [0153.331] GetTickCount () returned 0x115dfc5 [0153.331] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.332] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.332] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.332] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.332] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.333] GetTickCount () returned 0x115dfc5 [0153.333] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.334] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a00000 [0153.334] GetTickCount () returned 0x115dfc5 [0153.334] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.335] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a00000 [0153.335] GetTickCount () returned 0x115dfc5 [0153.335] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.336] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.336] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.336] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.336] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.336] GetTickCount () returned 0x115dfc5 [0153.336] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.337] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a80000 [0153.337] GetTickCount () returned 0x115dfc5 [0153.338] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.339] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a80000 [0153.339] GetTickCount () returned 0x115dfc5 [0153.339] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.340] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.340] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.340] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.340] GetTickCount () returned 0x115dfc5 [0153.340] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.341] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b00000 [0153.341] GetTickCount () returned 0x115dfc5 [0153.341] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.342] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b00000 [0153.343] GetTickCount () returned 0x115dfc5 [0153.343] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.344] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.344] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.344] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.344] GetTickCount () returned 0x115dfc5 [0153.344] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.345] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b80000 [0153.345] GetTickCount () returned 0x115dfc5 [0153.345] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.349] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b80000 [0153.349] GetTickCount () returned 0x115dfd4 [0153.349] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.350] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.350] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.350] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.350] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.350] GetTickCount () returned 0x115dfd4 [0153.350] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.351] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2c00000 [0153.351] GetTickCount () returned 0x115dfd4 [0153.351] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.352] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2c00000 [0153.352] GetTickCount () returned 0x115dfd4 [0153.352] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.353] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.354] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.354] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.354] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.354] GetTickCount () returned 0x115dfd4 [0153.354] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.355] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2c80000 [0153.355] GetTickCount () returned 0x115dfd4 [0153.355] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.356] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2c80000 [0153.356] GetTickCount () returned 0x115dfd4 [0153.356] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.357] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.358] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.358] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.358] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.358] GetTickCount () returned 0x115dfd4 [0153.358] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.359] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2d00000 [0153.359] GetTickCount () returned 0x115dfd4 [0153.359] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.360] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2d00000 [0153.360] GetTickCount () returned 0x115dfd4 [0153.360] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.361] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.361] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.361] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.361] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.361] GetTickCount () returned 0x115dfd4 [0153.361] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.363] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2d80000 [0153.363] GetTickCount () returned 0x115dfe4 [0153.363] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.365] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2d80000 [0153.365] GetTickCount () returned 0x115dfe4 [0153.365] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.366] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.366] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.366] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.367] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.367] GetTickCount () returned 0x115dfe4 [0153.367] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.368] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2e00000 [0153.368] GetTickCount () returned 0x115dfe4 [0153.368] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.370] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2e00000 [0153.370] GetTickCount () returned 0x115dfe4 [0153.370] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.371] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.371] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.371] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.371] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.372] GetTickCount () returned 0x115dfe4 [0153.372] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.373] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2e80000 [0153.373] GetTickCount () returned 0x115dfe4 [0153.373] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.374] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2e80000 [0153.374] GetTickCount () returned 0x115dfe4 [0153.374] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.376] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.376] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.376] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.376] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.376] GetTickCount () returned 0x115dfe4 [0153.376] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.378] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2f00000 [0153.378] GetTickCount () returned 0x115dff4 [0153.378] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.379] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2f00000 [0153.379] GetTickCount () returned 0x115dff4 [0153.379] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.381] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.381] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.381] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.381] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.381] GetTickCount () returned 0x115dff4 [0153.381] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.384] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2f80000 [0153.384] GetTickCount () returned 0x115dff4 [0153.384] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.386] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2f80000 [0153.386] GetTickCount () returned 0x115dff4 [0153.386] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.392] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.392] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.392] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.392] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.392] GetTickCount () returned 0x115dff4 [0153.392] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.394] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3000000 [0153.394] GetTickCount () returned 0x115e003 [0153.394] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.401] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3000000 [0153.402] GetTickCount () returned 0x115e003 [0153.402] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.403] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.403] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.403] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.403] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.403] GetTickCount () returned 0x115e003 [0153.403] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.405] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3080000 [0153.405] GetTickCount () returned 0x115e003 [0153.405] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.406] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3080000 [0153.406] GetTickCount () returned 0x115e003 [0153.406] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.407] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.408] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.408] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.408] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.408] GetTickCount () returned 0x115e003 [0153.408] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.409] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3100000 [0153.409] GetTickCount () returned 0x115e013 [0153.409] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.410] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3100000 [0153.410] GetTickCount () returned 0x115e013 [0153.410] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.414] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.414] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.414] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.414] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.414] GetTickCount () returned 0x115e013 [0153.414] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.416] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3180000 [0153.416] GetTickCount () returned 0x115e013 [0153.416] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.417] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3180000 [0153.417] GetTickCount () returned 0x115e013 [0153.417] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.419] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.419] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.419] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.419] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.419] GetTickCount () returned 0x115e013 [0153.419] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.420] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3200000 [0153.420] GetTickCount () returned 0x115e013 [0153.420] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.422] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3200000 [0153.422] GetTickCount () returned 0x115e013 [0153.422] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.423] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.423] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.423] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.423] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.423] GetTickCount () returned 0x115e013 [0153.423] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.424] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3280000 [0153.425] GetTickCount () returned 0x115e022 [0153.425] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.426] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3280000 [0153.426] GetTickCount () returned 0x115e022 [0153.426] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.428] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.428] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.428] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.428] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.428] GetTickCount () returned 0x115e022 [0153.428] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.430] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3300000 [0153.430] GetTickCount () returned 0x115e022 [0153.430] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.431] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3300000 [0153.431] GetTickCount () returned 0x115e022 [0153.431] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.432] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.432] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.433] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.433] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.433] GetTickCount () returned 0x115e022 [0153.433] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.434] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3380000 [0153.434] GetTickCount () returned 0x115e022 [0153.434] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.435] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3380000 [0153.435] GetTickCount () returned 0x115e022 [0153.435] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.436] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.436] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.437] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.437] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.437] GetTickCount () returned 0x115e022 [0153.437] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.438] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3400000 [0153.438] GetTickCount () returned 0x115e022 [0153.438] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.439] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3400000 [0153.439] GetTickCount () returned 0x115e022 [0153.439] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.440] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.442] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.442] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.442] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.442] GetTickCount () returned 0x115e032 [0153.442] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.443] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3480000 [0153.443] GetTickCount () returned 0x115e032 [0153.443] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.444] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3480000 [0153.444] GetTickCount () returned 0x115e032 [0153.444] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.445] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.445] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.445] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.445] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.445] GetTickCount () returned 0x115e032 [0153.445] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.446] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3500000 [0153.446] GetTickCount () returned 0x115e032 [0153.447] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.447] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3500000 [0153.448] GetTickCount () returned 0x115e032 [0153.448] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.448] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.449] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.449] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.449] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.449] GetTickCount () returned 0x115e032 [0153.449] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.450] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3580000 [0153.450] GetTickCount () returned 0x115e032 [0153.450] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.451] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3580000 [0153.451] GetTickCount () returned 0x115e032 [0153.451] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.452] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.453] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.453] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.453] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.453] GetTickCount () returned 0x115e032 [0153.453] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.454] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3600000 [0153.454] GetTickCount () returned 0x115e032 [0153.454] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.455] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3600000 [0153.455] GetTickCount () returned 0x115e032 [0153.455] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.457] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.457] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.457] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.457] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.458] GetTickCount () returned 0x115e042 [0153.458] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.459] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3680000 [0153.459] GetTickCount () returned 0x115e042 [0153.459] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.460] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3680000 [0153.460] GetTickCount () returned 0x115e042 [0153.460] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.462] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.462] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.462] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.462] GetTickCount () returned 0x115e042 [0153.462] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.464] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3700000 [0153.464] GetTickCount () returned 0x115e042 [0153.464] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.465] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3700000 [0153.465] GetTickCount () returned 0x115e042 [0153.465] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.467] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.467] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.467] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.467] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.467] GetTickCount () returned 0x115e042 [0153.467] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.470] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3780000 [0153.470] GetTickCount () returned 0x115e042 [0153.470] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.472] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3780000 [0153.472] GetTickCount () returned 0x115e051 [0153.472] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.474] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.474] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.474] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.474] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.474] GetTickCount () returned 0x115e051 [0153.474] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.475] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3800000 [0153.475] GetTickCount () returned 0x115e051 [0153.476] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.479] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3800000 [0153.480] GetTickCount () returned 0x115e051 [0153.480] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.481] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.481] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.481] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.481] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.481] GetTickCount () returned 0x115e051 [0153.481] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.483] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3880000 [0153.483] GetTickCount () returned 0x115e051 [0153.483] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.484] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3880000 [0153.484] GetTickCount () returned 0x115e051 [0153.484] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.485] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.486] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.486] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.486] GetTickCount () returned 0x115e051 [0153.486] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.487] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3900000 [0153.487] GetTickCount () returned 0x115e061 [0153.487] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.489] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3900000 [0153.489] GetTickCount () returned 0x115e061 [0153.489] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.490] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.490] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.490] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.490] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.491] GetTickCount () returned 0x115e061 [0153.491] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.492] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3980000 [0153.492] GetTickCount () returned 0x115e061 [0153.492] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.493] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3980000 [0153.493] GetTickCount () returned 0x115e061 [0153.493] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.495] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.495] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.495] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.495] GetTickCount () returned 0x115e061 [0153.495] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.496] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3a00000 [0153.497] GetTickCount () returned 0x115e061 [0153.497] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.498] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3a00000 [0153.498] GetTickCount () returned 0x115e061 [0153.498] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.499] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.499] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.500] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.500] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.500] GetTickCount () returned 0x115e061 [0153.500] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.501] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3a80000 [0153.501] GetTickCount () returned 0x115e061 [0153.501] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.502] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3a80000 [0153.503] GetTickCount () returned 0x115e070 [0153.503] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.504] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.505] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.505] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.505] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.505] GetTickCount () returned 0x115e070 [0153.505] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.506] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3b00000 [0153.506] GetTickCount () returned 0x115e070 [0153.506] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.508] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3b00000 [0153.508] GetTickCount () returned 0x115e070 [0153.508] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.509] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.509] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.509] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.509] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.509] GetTickCount () returned 0x115e070 [0153.509] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.510] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3b80000 [0153.510] GetTickCount () returned 0x115e070 [0153.510] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.511] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3b80000 [0153.511] GetTickCount () returned 0x115e070 [0153.511] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.512] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.513] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.513] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.513] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.513] GetTickCount () returned 0x115e070 [0153.513] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.514] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3c00000 [0153.514] GetTickCount () returned 0x115e070 [0153.514] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.515] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3c00000 [0153.515] GetTickCount () returned 0x115e070 [0153.515] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.516] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.516] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.516] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.516] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.516] GetTickCount () returned 0x115e070 [0153.516] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.518] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3c80000 [0153.518] GetTickCount () returned 0x115e070 [0153.518] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.519] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3c80000 [0153.519] GetTickCount () returned 0x115e080 [0153.519] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.520] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.520] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.520] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.520] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.520] GetTickCount () returned 0x115e080 [0153.520] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.521] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3d00000 [0153.521] GetTickCount () returned 0x115e080 [0153.521] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.522] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3d00000 [0153.522] GetTickCount () returned 0x115e080 [0153.522] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.523] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.523] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.523] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.523] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.524] GetTickCount () returned 0x115e080 [0153.524] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.525] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3d80000 [0153.525] GetTickCount () returned 0x115e080 [0153.525] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.526] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3d80000 [0153.526] GetTickCount () returned 0x115e080 [0153.526] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.527] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.527] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.527] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.527] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.527] GetTickCount () returned 0x115e080 [0153.527] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.528] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3e00000 [0153.528] GetTickCount () returned 0x115e080 [0153.528] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.529] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3e00000 [0153.529] GetTickCount () returned 0x115e080 [0153.529] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.530] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.530] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.530] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.530] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.531] GetTickCount () returned 0x115e080 [0153.531] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.532] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3e80000 [0153.532] GetTickCount () returned 0x115e080 [0153.532] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.533] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3e80000 [0153.533] GetTickCount () returned 0x115e080 [0153.533] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.534] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.534] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.534] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.534] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.534] GetTickCount () returned 0x115e090 [0153.534] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.535] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3f00000 [0153.535] GetTickCount () returned 0x115e090 [0153.535] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.536] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3f00000 [0153.536] GetTickCount () returned 0x115e090 [0153.536] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.537] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.537] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.538] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.538] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.538] GetTickCount () returned 0x115e090 [0153.538] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.539] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3f80000 [0153.539] GetTickCount () returned 0x115e090 [0153.539] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.543] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x3f80000 [0153.543] GetTickCount () returned 0x115e090 [0153.544] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.545] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.545] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.545] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.545] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.545] GetTickCount () returned 0x115e090 [0153.545] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.547] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4000000 [0153.547] GetTickCount () returned 0x115e090 [0153.547] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.548] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4000000 [0153.548] GetTickCount () returned 0x115e090 [0153.548] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.549] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.550] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.550] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.550] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.550] GetTickCount () returned 0x115e09f [0153.550] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.552] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4080000 [0153.552] GetTickCount () returned 0x115e09f [0153.552] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.553] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4080000 [0153.553] GetTickCount () returned 0x115e09f [0153.553] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.554] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.554] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.554] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.554] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.555] GetTickCount () returned 0x115e09f [0153.555] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.556] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4100000 [0153.556] GetTickCount () returned 0x115e09f [0153.556] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.557] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4100000 [0153.557] GetTickCount () returned 0x115e09f [0153.557] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.558] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.559] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.559] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.559] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.559] GetTickCount () returned 0x115e09f [0153.559] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.561] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4180000 [0153.561] GetTickCount () returned 0x115e09f [0153.561] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.562] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4180000 [0153.562] GetTickCount () returned 0x115e09f [0153.562] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.563] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.563] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.563] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.563] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.563] GetTickCount () returned 0x115e09f [0153.563] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.565] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4200000 [0153.565] GetTickCount () returned 0x115e0af [0153.565] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.566] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4200000 [0153.566] GetTickCount () returned 0x115e0af [0153.566] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.567] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.568] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.568] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.568] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.568] GetTickCount () returned 0x115e0af [0153.568] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.570] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4280000 [0153.570] GetTickCount () returned 0x115e0af [0153.570] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.571] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4280000 [0153.571] GetTickCount () returned 0x115e0af [0153.571] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.572] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.572] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.572] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.572] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.572] GetTickCount () returned 0x115e0af [0153.572] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.574] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4300000 [0153.574] GetTickCount () returned 0x115e0af [0153.574] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.575] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4300000 [0153.575] GetTickCount () returned 0x115e0af [0153.575] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.576] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.577] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.577] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.577] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.577] GetTickCount () returned 0x115e0af [0153.577] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.578] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4380000 [0153.579] GetTickCount () returned 0x115e0af [0153.579] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.580] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x4380000 [0153.580] GetTickCount () returned 0x115e0af [0153.580] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0153.581] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.581] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.581] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.581] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.585] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.585] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.585] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.585] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.589] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.589] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.589] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.589] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.593] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.593] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.593] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.593] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.599] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.599] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.600] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.600] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.605] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.605] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.605] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.605] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.611] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.611] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.611] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.611] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.615] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.615] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.615] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.615] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.619] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.620] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.620] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.620] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.623] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.623] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.623] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.623] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.626] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.626] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.626] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.626] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.629] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.630] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.630] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.630] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.633] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.633] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.633] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.633] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.636] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.636] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.636] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.636] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.639] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.640] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.640] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.640] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.643] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.643] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.643] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.643] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.646] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.646] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.647] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.647] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.650] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.650] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.650] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.650] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.653] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.653] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.653] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.653] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.656] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.657] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.657] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.657] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.660] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.660] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.660] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.660] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.663] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.663] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.664] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.664] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.667] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.667] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.667] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.667] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.670] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.670] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.670] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.670] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.683] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.684] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.684] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.684] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.689] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.689] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.689] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.689] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.693] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.693] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.693] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.693] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.696] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.697] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.697] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.697] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.700] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.700] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.701] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.701] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.705] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.706] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.706] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.706] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.710] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.710] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.710] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.710] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.714] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.714] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.714] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.714] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.717] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.718] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.718] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.718] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.721] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.722] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.722] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.722] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.725] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.726] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.726] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.726] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.729] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.729] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.729] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.729] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.733] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.733] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.733] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.733] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.739] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.740] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.740] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.740] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.743] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.743] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.743] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.743] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.747] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.747] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.747] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.747] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.752] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.752] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.752] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.753] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.756] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.756] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.757] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.757] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.760] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.760] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.760] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.760] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.764] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.764] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.765] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.765] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.768] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.769] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.769] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.769] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.779] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.779] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.779] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.779] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.783] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.784] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.784] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.784] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.788] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.788] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.788] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.788] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.792] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.792] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.792] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.792] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.796] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.796] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.796] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.796] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.800] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.800] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.800] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.800] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.806] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.807] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.807] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.807] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.811] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.811] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.811] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.811] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.815] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.815] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.815] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.815] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.819] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.819] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.819] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.819] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.823] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.823] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.823] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.823] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.827] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.827] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.827] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.827] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.832] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.832] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.832] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.832] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.836] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.836] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.836] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.836] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.840] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.840] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.840] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.840] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.844] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.844] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.844] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.844] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.848] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.848] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.848] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.852] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.852] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.852] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.852] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.856] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.856] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.856] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.856] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.859] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.860] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.860] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.860] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.863] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.864] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.864] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.864] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.870] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.870] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.870] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.874] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.874] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.874] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.874] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.878] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.878] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.878] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.878] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.882] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.882] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.882] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.882] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.886] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.886] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.886] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.886] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.890] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.890] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.890] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.890] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.895] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.895] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.895] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.895] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.899] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.899] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.899] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.899] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.903] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.903] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.903] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.903] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.906] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.906] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.907] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.907] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.910] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.911] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.911] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.911] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.915] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.915] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.915] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.915] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.918] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.919] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.919] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.919] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.922] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.923] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.923] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.923] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.926] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.926] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.927] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.927] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.930] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.931] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.931] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.931] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.937] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.937] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.937] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.937] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.941] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.942] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.942] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.942] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.945] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.946] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.946] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.946] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.949] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.950] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.950] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.950] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.953] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.953] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.954] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.954] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.957] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.957] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.957] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.957] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.961] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.961] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.961] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.961] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.965] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.965] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.965] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.965] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.968] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.969] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.969] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.969] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.972] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.972] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.972] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.972] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.975] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.976] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.976] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.976] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.979] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.979] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.979] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.979] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.982] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.983] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.983] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.983] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.986] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.986] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.986] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.986] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.990] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.990] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.990] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.990] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.993] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.993] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.993] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.993] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0153.997] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0153.997] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0153.997] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0153.997] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.003] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.003] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.003] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.003] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.006] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.006] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.006] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.006] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.010] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.010] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.010] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.010] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.013] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.013] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.013] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.013] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.016] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.016] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.016] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.017] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.020] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.020] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.020] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.020] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.023] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.023] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.024] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.024] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.027] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.027] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.027] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.027] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.031] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.031] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.031] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.031] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.035] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.036] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.036] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.036] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.039] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.040] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.040] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.040] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.043] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.044] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.044] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.044] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.047] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.048] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.048] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.048] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.051] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.052] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.052] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.052] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.055] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.055] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.055] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.055] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.059] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.059] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.059] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.059] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.066] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.066] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.066] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.066] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.070] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.070] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.070] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.070] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.074] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.075] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.075] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.075] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.078] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.079] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.079] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.079] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.083] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.083] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.083] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.083] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.090] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.091] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.091] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.091] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.094] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.095] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.095] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.095] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.099] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.099] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.099] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.099] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.102] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.103] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.103] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.107] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.107] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.107] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.107] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.111] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.111] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.112] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.120] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.120] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.120] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.120] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.123] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.123] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.123] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.123] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.126] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.126] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.127] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.127] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.132] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.132] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.132] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.132] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.135] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.136] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.136] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.136] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.139] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.139] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.139] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.139] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.142] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.143] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.143] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.143] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.146] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.146] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.146] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.146] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.149] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.149] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.150] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.150] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.153] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.153] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.153] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.153] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.157] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.157] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.157] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.157] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.160] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.161] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.161] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.161] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.165] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.165] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.165] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.165] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.169] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.170] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.170] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.170] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.185] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.185] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.185] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.185] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.189] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.189] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.189] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.189] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.196] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.196] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.196] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.196] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.200] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.200] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.200] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.200] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.204] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.204] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.204] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.204] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.209] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.209] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.209] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.209] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.213] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.213] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.213] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.213] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.217] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.217] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.217] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.217] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.221] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.222] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.222] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.222] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.226] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.226] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.226] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.226] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.230] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.230] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.230] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.230] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.234] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.234] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.234] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.234] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.238] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.238] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.238] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.238] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.242] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.242] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.242] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.242] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.246] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.247] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.247] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.250] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.250] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.250] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.250] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.253] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.254] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.254] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.254] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.257] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.257] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.257] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.257] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.262] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.262] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.262] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.262] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.265] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.265] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.266] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.266] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.269] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.269] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.269] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.269] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.272] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.272] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.272] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.272] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.275] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.276] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.276] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.276] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.279] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.279] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.279] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.279] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.282] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.282] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.282] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.282] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.285] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.286] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.286] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.286] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.289] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.289] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.289] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.289] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.292] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.293] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.293] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.293] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.301] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.302] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.302] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.302] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.305] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.306] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.306] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.306] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.311] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.311] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.311] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.311] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.315] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.315] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.316] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.316] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.319] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.319] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.320] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.320] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.326] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.326] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.326] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.326] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.332] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.332] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.332] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.333] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.336] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.337] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.337] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.337] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.341] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.341] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.341] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.341] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.345] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.345] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.345] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.345] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.349] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.350] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.350] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.350] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.354] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.354] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.354] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.354] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.358] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.358] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.358] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.358] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.362] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.362] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.362] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.362] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.366] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.367] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.367] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.367] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.371] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.371] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.371] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.371] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.375] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.375] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.375] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.375] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.379] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.379] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.379] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.379] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.390] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.390] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.390] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.390] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.394] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.394] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.394] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.394] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.398] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.398] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.398] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.398] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.402] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.402] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.403] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.403] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.407] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.407] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.407] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.407] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.412] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.412] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.412] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.412] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.416] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.416] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.416] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.416] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.420] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.420] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.420] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.420] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.424] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.424] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.424] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.424] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.428] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.428] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.428] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.428] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.432] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.432] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.433] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.433] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.441] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.441] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.441] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.441] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.449] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.450] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.450] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.450] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.459] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.459] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.460] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.460] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.465] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.465] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.465] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.465] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.468] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.469] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.469] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.469] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.472] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.472] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.472] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.472] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.475] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.475] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.475] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.475] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.478] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.479] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.479] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.479] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.482] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.482] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.482] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.482] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.485] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.485] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.485] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.485] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.488] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.489] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.489] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.489] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.492] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.492] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.492] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.492] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.495] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.495] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.496] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.496] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.499] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.499] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.499] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.499] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.502] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.502] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.502] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.502] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.505] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.505] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.505] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.505] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.509] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.509] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.509] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.509] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.512] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.512] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.513] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.513] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.516] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.516] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.516] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.516] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.522] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.522] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.522] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.522] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.525] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.525] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.525] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.525] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.530] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.530] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.530] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.530] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.534] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.534] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.534] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.534] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.538] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.538] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.538] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.538] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.542] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.542] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.542] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.542] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.546] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.546] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.546] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.546] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.550] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.550] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.550] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.550] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.554] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.554] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.554] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.554] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.558] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.558] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.558] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.558] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.562] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.562] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.562] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.562] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.729] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.729] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.729] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.729] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.864] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.864] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.864] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.864] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.874] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.875] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.875] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.875] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.878] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.879] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.879] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.879] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.884] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.884] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.884] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.884] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.888] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.888] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.888] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.888] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.892] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.892] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.892] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.892] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.895] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.895] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.895] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.895] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.899] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.899] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.899] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.899] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.902] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.902] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.902] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.902] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.905] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.906] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.906] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.906] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.912] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.912] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.912] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.912] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.915] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.915] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.915] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.915] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.918] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.919] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.919] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.919] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.922] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.922] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.922] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.922] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.925] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.925] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.925] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.925] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.929] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.929] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.929] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.932] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.932] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.932] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.932] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.935] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.935] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.935] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.938] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.939] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.939] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.942] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.942] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.942] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.942] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.945] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.945] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.945] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.945] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.948] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.948] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.949] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.949] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.955] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.956] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.956] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.956] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.959] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.960] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.960] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.960] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.963] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.964] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.964] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.964] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.968] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.968] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.968] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.968] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.972] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.972] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.972] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.972] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.978] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.978] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.979] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.979] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.982] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.982] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.983] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.983] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.987] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.987] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.987] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.987] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.991] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.991] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.991] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.991] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0154.994] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0154.995] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0154.995] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0154.995] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.002] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.002] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.002] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.002] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.006] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.006] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.006] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.006] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.010] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.010] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.010] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.010] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.018] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.018] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.018] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.018] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.021] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.022] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.022] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.022] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.025] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.025] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.025] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.025] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.028] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.028] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.028] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.032] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.032] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.032] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.032] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.035] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.035] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.035] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.035] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.041] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.041] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.041] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.041] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.044] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.044] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.044] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.044] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.047] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.047] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.047] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.047] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.050] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.051] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.051] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.051] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.054] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.054] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.054] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.054] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.057] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.057] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.057] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.057] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.060] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.060] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.060] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.060] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.064] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.064] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.064] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.064] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.067] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.067] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.067] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.067] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.070] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.070] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.070] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.070] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.073] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.073] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.074] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.074] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.076] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.077] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.077] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.077] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.080] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.080] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.080] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.080] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.085] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.085] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.085] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.085] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.089] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.089] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.089] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.089] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.093] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.093] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.093] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.093] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.097] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.098] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.098] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.098] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.101] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.102] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.102] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.108] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.108] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.108] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.108] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.112] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.112] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.112] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.116] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.116] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.116] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.116] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.120] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.120] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.120] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.120] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.133] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.133] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.133] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.133] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.137] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.137] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.137] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.137] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.141] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.141] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.142] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.142] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.145] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.145] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.146] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.146] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.149] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.150] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.150] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.150] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.154] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.154] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.154] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.154] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.157] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.157] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.158] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.158] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.160] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.161] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.161] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.161] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.164] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.164] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.164] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.164] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.167] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.167] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.167] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.167] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.181] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.181] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.181] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.181] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.184] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.184] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.184] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.184] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.187] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.187] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.187] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.187] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.190] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.190] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.190] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.191] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.193] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.194] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.194] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.194] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.197] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.197] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.197] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.197] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.200] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.200] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.200] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.200] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.203] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.203] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.203] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.204] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.207] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.207] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.207] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.207] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.210] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.210] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.210] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.210] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.213] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.213] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.213] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.213] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.216] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.217] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.217] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.217] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.220] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.220] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.220] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.220] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.223] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.223] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.223] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.223] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.226] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.226] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.226] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.226] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.229] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.229] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.229] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.229] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.235] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.235] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.235] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.235] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.238] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.238] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.239] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.239] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.241] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.242] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.242] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.242] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.245] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.245] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.245] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.245] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.248] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.248] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.248] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.248] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.251] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.251] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.251] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.251] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.254] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.255] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.255] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.255] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.258] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.258] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.258] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.258] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.261] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.261] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.261] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.261] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.264] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.264] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.264] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.265] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.268] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.268] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.268] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.268] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.277] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.277] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.277] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.280] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.280] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.281] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.281] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.288] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.288] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.288] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.288] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.295] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.295] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.295] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.295] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.301] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.301] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.301] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.301] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.305] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.305] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.305] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.305] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.309] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.309] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.309] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.309] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.313] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.314] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.314] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.314] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.317] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.318] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.318] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.318] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.322] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.322] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.322] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.322] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.326] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.326] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.326] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.326] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.330] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.330] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.330] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.330] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.334] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.334] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.334] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.334] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.338] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.338] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.338] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.338] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.341] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.342] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.342] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.342] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.345] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.345] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.346] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.346] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.349] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.350] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.350] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.350] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.353] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.354] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.354] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.354] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.357] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.358] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.358] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.358] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.361] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.361] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.361] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.361] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.368] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.368] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.368] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.368] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.371] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.372] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.372] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.376] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.376] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.376] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.376] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.380] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.380] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.380] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.380] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.383] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.384] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.384] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.384] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.387] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.387] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.387] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.387] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.394] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.394] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.394] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.394] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.398] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.398] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.398] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.398] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.402] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.402] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.402] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.402] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.406] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.406] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.406] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.406] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.410] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.410] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.410] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.410] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.414] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.414] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.414] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.414] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.418] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.418] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.418] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.418] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.422] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.422] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.422] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.422] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.426] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.426] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.426] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.426] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.432] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.432] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.432] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.432] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.436] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.436] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.436] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.436] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.440] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.441] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.441] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.441] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.444] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.445] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.445] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.445] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.448] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.448] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.448] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.449] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.452] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.452] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.452] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.452] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.456] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.456] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.456] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.456] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.460] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.460] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.461] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.461] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.474] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.474] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.475] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.475] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.478] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.479] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.479] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.479] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.483] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.483] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.483] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.483] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.497] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.497] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.497] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.498] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.501] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.502] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.502] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.502] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.506] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.506] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.507] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.507] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.510] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.511] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.511] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.511] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.515] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.515] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.515] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.515] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.519] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.519] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.519] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.519] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.523] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.523] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.523] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.523] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.527] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.527] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.527] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.527] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.532] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.532] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.532] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.532] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.536] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.536] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.536] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.536] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.540] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.540] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.541] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.541] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.545] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.545] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.545] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.545] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.549] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.549] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.549] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.549] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.553] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.554] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.554] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.554] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.560] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.561] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.561] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.561] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.565] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.565] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.565] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.565] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.569] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.569] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.569] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.569] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.573] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.574] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.574] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.574] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.581] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.581] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.581] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.581] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.644] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.645] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.645] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.645] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.649] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.649] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.649] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.649] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.653] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.653] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.653] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.653] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.656] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.657] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.657] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.657] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.660] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.660] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.660] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.660] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.663] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.664] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.664] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.664] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.667] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.667] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.667] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.667] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.670] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.670] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.671] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.671] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.674] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.674] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.674] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.674] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.677] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.677] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.678] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.678] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.681] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.681] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.681] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.681] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.684] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.684] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.684] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.685] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.690] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.690] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.690] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.690] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.694] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.694] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.694] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.694] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.697] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.697] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.697] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.697] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.702] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.703] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.703] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.703] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.707] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.707] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.707] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.707] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.711] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.711] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.711] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.711] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.715] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.715] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.715] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.715] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.720] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.720] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.720] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.720] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.724] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.724] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.724] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.724] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.728] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.728] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.728] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.728] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.732] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.733] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.733] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.733] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.737] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.737] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.737] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.737] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.741] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.741] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.741] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.741] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.755] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.756] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.756] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.756] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.767] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.768] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.768] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.768] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.779] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.779] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.779] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.779] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.784] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.784] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.784] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.784] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.788] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.788] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.788] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.788] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.792] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.792] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.792] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.792] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.797] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.797] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.797] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.797] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.801] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.801] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.801] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.801] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.805] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.805] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.805] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.805] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.810] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.810] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.810] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.810] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.814] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.814] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.814] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.814] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.821] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.821] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.821] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.821] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.825] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.825] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.825] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.825] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.830] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.831] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.831] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.831] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.834] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.835] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.835] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.835] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.838] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.839] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.839] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.839] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.843] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.844] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.844] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.844] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.848] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.848] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.848] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.852] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.852] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.852] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.852] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.856] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.856] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.856] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.856] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.860] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.861] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.861] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.861] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.865] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.865] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.865] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.865] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.869] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.870] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.870] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.874] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.874] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.874] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.874] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.878] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.878] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.878] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.878] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.882] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.883] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.883] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.883] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.889] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.889] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.889] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.890] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.894] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.894] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.894] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.894] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.898] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.898] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.898] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.898] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.902] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.903] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.903] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.903] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.907] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.907] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.907] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.907] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.911] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.911] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.911] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.911] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.915] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.915] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.915] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.915] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.920] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.920] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.920] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.920] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.924] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.924] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.925] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.925] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.929] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.929] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.929] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.933] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.934] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.934] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.934] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.938] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.938] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.938] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.942] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.942] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.942] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.942] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.946] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.946] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.947] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.947] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.953] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.953] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.953] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.953] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.957] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.958] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.958] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.958] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.961] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.961] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.961] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.961] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.964] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.964] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.964] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.964] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.968] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.968] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.968] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.968] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.971] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.971] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.971] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.971] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.975] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.975] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.975] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.975] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.978] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.978] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.978] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.978] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.982] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.982] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.982] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.982] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.985] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.985] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.985] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.985] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.989] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.989] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.989] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.989] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.992] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.992] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.992] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.992] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.995] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.995] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.996] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.996] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0155.999] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0155.999] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0155.999] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0155.999] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.004] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.004] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.004] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.004] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.008] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.008] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.009] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.009] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.012] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.013] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.013] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.013] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.019] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.019] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.019] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.019] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.023] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.024] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.024] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.024] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.028] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.028] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.028] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.032] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.032] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.032] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.032] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.036] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.036] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.036] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.036] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.040] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.040] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.041] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.041] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.044] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.045] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.045] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.045] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.048] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.049] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.049] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.049] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.052] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.053] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.053] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.053] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.057] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.057] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.057] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.057] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.061] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.061] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.062] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.062] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.065] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.066] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.066] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.066] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.070] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.070] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.070] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.070] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.074] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.075] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.075] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.075] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.079] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.079] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.079] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.079] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.085] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.085] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.085] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.085] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.089] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.089] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.089] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.089] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.097] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.097] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.097] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.097] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.101] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.101] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.101] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.101] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.105] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.105] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.105] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.105] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.114] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.114] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.115] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.115] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.152] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.153] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.153] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.153] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.157] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.157] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.157] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.157] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.161] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.161] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.161] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.161] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.165] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.165] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.165] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.165] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.185] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.186] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.186] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.186] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.195] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.196] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.196] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.196] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.204] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.205] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.205] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.205] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.215] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.216] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.216] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.216] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.221] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.221] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.222] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.222] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.226] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.226] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.226] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.226] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.230] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.230] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.230] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.230] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.234] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.234] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.234] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.234] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.238] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.238] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.238] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.238] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.242] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.243] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.243] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.243] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.247] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.247] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.247] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.251] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.252] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.252] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.252] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.256] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.256] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.256] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.256] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.260] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.260] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.260] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.260] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.265] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.266] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.266] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.266] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.269] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.270] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.270] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.270] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.274] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.274] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.274] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.274] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.281] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.281] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.281] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.281] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.285] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.285] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.285] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.285] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.289] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.289] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.289] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.289] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.293] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.293] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.294] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.294] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.298] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.298] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.298] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.298] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.302] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.302] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.302] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.302] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.307] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.307] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.307] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.307] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.310] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.310] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.311] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.311] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.314] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.314] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.314] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.314] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.337] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.337] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.337] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.338] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.344] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.344] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.344] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.348] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.348] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.348] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.352] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.352] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.352] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.352] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.356] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.356] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.356] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.356] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.360] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.360] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.360] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.360] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.363] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.364] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.364] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.364] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.367] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.367] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.367] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.367] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.371] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.371] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.371] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.371] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.374] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.374] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.375] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.375] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.378] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.378] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.379] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.379] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.382] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.382] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.382] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.383] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.386] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.386] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.386] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.386] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.390] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.391] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.391] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.391] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.394] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.395] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.395] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.395] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.399] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.399] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.399] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.399] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.403] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.403] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.403] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.403] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.409] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.409] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.410] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.410] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.413] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.414] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.414] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.414] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.417] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.418] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.418] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.418] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.422] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.422] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.422] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.422] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.426] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.426] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.427] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.427] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.439] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.439] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.439] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.439] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.443] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.443] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.443] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.443] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.457] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.457] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.457] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.457] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.461] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.461] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.461] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.462] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.466] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.466] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.466] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.472] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.472] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.473] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.473] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.476] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.477] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.477] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.477] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.481] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.481] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.481] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.481] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.485] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.485] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.485] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.485] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.489] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.490] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.490] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.490] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.494] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.494] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.494] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.494] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.498] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.499] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.499] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.499] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.503] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.503] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.503] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.503] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.507] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.507] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.507] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.507] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.511] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.512] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.512] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.512] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.516] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.516] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.516] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.516] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.520] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.521] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.521] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.521] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.525] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.525] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.525] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.525] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.529] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.529] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.529] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.529] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.534] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.534] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.534] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.534] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.545] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.545] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.545] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.545] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.550] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.550] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.550] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.550] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.554] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.554] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.554] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.554] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.558] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.558] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.559] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.559] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.562] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.563] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.563] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.563] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.567] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.567] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.567] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.567] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.571] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.571] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.572] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.572] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.576] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.576] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.577] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.577] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.717] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.717] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.717] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.791] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.791] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.791] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.791] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.795] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.796] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.796] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.796] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.800] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.800] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.800] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.800] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.804] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.804] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.804] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.804] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.808] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.809] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.809] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.809] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.813] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.813] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.813] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.813] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.817] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.818] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.818] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.818] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.822] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.822] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.822] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.822] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.827] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.827] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.827] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.827] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.831] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.831] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.831] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.831] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.835] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.836] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.836] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.836] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.840] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.841] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.841] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.841] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.844] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.844] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.844] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.844] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.848] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.848] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.848] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.851] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.851] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.851] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.851] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.855] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.856] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.856] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.856] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.859] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.859] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.859] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.859] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.863] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.863] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.863] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.863] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.866] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.866] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.867] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.867] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.870] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.870] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.870] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.873] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.874] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.874] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.874] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.877] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.878] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.878] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.878] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.881] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.881] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.881] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.881] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.885] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.885] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.886] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.886] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.889] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.889] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.889] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.889] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.893] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.893] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.893] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.893] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.896] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.896] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.896] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.896] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.899] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.899] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.899] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.899] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.904] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.904] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.904] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.904] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.907] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.907] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.907] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.907] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.910] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.911] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.911] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.911] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.914] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.914] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.914] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.914] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.917] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.917] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.917] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.917] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.920] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.921] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.921] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.924] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.924] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.924] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.924] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.928] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.928] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.928] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.929] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.932] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.932] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.932] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.932] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.935] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.935] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.936] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.936] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.939] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.939] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.939] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.942] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.943] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.943] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.943] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.946] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.946] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.946] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.946] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.949] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.950] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.950] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.950] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.953] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.953] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.953] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.953] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.958] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.958] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.959] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.959] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.962] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.963] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.963] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.963] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.966] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.967] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.967] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.967] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.970] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.971] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.971] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.971] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.974] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.975] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.975] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.975] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.978] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.979] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.979] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.979] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.985] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.985] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.986] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.986] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.989] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.989] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.989] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.989] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.993] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.993] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.993] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.993] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0156.997] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0156.997] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0156.997] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0156.997] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.001] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.001] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.001] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.001] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.005] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.005] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.005] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.005] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.014] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.014] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.014] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.014] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.024] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.024] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.024] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.024] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.033] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.033] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.033] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.033] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.044] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.044] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.045] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.045] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.054] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.054] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.054] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.054] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.063] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.063] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.063] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.064] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.074] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.074] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.074] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.074] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.084] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.084] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.084] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.084] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.093] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.094] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.094] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.094] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.102] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.102] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.102] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.107] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.107] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.107] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.107] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.111] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.111] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.112] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.116] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.116] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.116] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.116] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.120] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.120] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.120] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.120] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.124] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.124] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.124] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.124] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.128] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.128] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.128] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.128] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.134] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.134] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.134] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.134] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.139] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.140] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.140] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.140] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.144] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.144] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.144] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.144] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.152] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.152] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.152] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.152] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.162] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.162] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.162] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.162] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.181] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.181] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.181] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.181] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.387] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.388] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.388] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.388] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.630] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.630] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.630] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.630] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.761] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.762] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.762] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.762] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.772] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.772] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.772] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.772] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.787] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.787] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.788] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.788] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.796] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.796] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.796] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.796] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.801] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.801] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.801] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.801] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.810] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.810] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.810] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.810] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.848] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.848] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.848] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.857] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.857] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.857] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.857] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.870] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.870] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.870] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.925] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.925] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.925] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.925] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.971] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.971] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.972] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.972] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.974] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.975] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.975] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.975] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.978] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.978] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.978] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.978] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.981] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.981] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.982] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.982] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.985] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.985] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.985] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.985] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.988] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.988] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.988] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.988] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.991] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.992] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.992] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.992] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.995] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.995] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.995] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.995] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0157.998] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0157.998] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0157.998] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0157.998] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.001] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.002] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.002] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.002] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.005] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.005] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.005] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.005] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.008] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.008] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.008] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.008] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.014] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.014] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.014] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.014] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.017] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.017] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.017] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.017] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.027] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.027] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.027] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.027] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.033] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.033] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.033] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.033] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.040] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.041] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.041] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.041] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.045] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.045] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.045] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.045] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.093] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.093] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.093] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.093] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.099] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.099] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.099] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.099] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.200] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.201] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.201] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.201] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.277] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.277] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.278] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.294] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.294] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.294] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.294] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.308] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.308] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.308] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.308] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.319] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.319] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.319] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.319] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.329] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.329] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.329] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.329] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.333] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.333] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.333] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.333] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.336] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.337] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.337] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.337] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.345] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.345] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.345] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.345] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.362] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.363] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.363] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.363] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.369] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.369] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.369] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.369] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.373] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.373] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.373] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.373] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.377] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.377] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.377] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.377] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.381] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.381] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.381] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.381] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.385] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.385] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.385] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.385] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.389] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.389] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.389] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.389] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.393] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.393] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.393] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.393] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.396] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.396] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.397] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.397] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.400] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.401] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.401] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.401] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.404] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.405] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.405] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.405] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.408] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.409] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.409] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.409] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.412] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.412] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.413] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.413] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.419] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.419] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.419] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.419] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.423] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.423] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.423] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.423] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.427] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.427] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.427] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.427] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.471] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.471] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.471] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.471] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.475] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.475] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.475] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.475] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.482] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.482] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.482] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.482] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.486] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.486] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.486] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.490] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.490] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.490] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.490] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.494] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.494] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.494] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.495] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.500] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.500] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.500] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.500] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.504] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.504] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.504] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.504] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.508] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.508] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.508] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.508] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.512] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.513] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.513] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.513] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.517] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.517] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.517] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.517] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.521] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.521] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.521] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.521] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.528] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.528] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.528] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.528] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.532] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.532] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.532] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.532] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.536] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.536] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.536] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.536] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.540] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.540] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.541] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.541] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.547] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.547] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.547] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.547] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.557] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.557] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.557] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.557] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.561] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.561] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.562] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.562] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.571] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.571] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.571] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.571] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.699] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.699] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.699] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.699] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.799] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.800] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.800] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.800] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.818] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.818] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.818] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.818] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.838] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.838] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.838] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.847] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.847] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.847] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.847] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.856] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.856] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.856] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.856] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.868] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.868] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.868] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.868] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.877] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.877] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.877] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.877] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.886] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.886] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.886] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.886] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.895] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.895] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.895] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.895] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.904] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.904] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.904] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.904] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.913] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.913] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.913] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.913] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.922] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.923] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.923] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.923] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.934] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.934] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.934] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.934] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.943] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.944] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.944] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.944] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.952] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.952] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.953] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.953] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.961] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.961] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.961] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.961] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.970] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.970] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.970] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.970] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.979] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.979] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.979] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.980] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.983] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.983] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.983] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.983] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.987] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.987] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.987] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.987] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.991] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.991] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.991] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.991] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0158.998] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0158.998] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0158.999] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0158.999] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.002] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.003] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.003] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.003] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.007] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.007] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.007] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.007] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.011] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.011] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.011] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.011] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.015] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.015] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.015] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.015] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.019] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.019] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.019] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.020] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.023] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.023] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.024] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.024] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.027] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.027] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.028] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.031] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.032] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.032] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.032] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.035] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.036] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.036] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.036] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.040] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.040] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.040] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.040] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.044] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.044] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.044] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.044] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.048] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.048] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.048] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.048] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.052] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.052] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.052] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.052] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.056] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.056] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.056] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.056] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.060] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.060] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.061] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.061] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.067] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.067] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.067] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.067] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.071] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.071] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.071] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.071] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.075] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.075] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.075] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.075] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.079] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.079] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.079] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.079] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.083] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.083] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.083] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.083] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.088] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.089] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.089] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.089] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.093] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.093] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.093] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.093] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.097] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.097] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.097] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.097] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.101] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.101] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.101] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.101] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.105] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.106] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.106] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.109] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.110] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.110] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.110] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.113] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.114] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.114] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.114] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.118] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.118] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.118] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.118] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.129] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.130] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.130] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.130] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.133] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.133] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.133] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.133] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.137] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.137] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.137] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.137] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.140] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.141] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.141] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.141] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.145] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.145] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.145] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.145] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.149] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.149] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.149] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.149] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.158] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.158] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.158] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.158] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.175] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.175] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.175] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.175] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.184] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.185] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.185] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.185] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.196] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.196] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.196] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.196] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.200] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.200] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.200] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.200] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.208] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.208] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.209] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.209] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.217] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.217] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.217] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.217] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.226] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.226] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.226] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.226] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.231] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.232] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.232] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.232] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.236] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.236] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.236] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.236] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.240] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.240] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.240] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.240] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.244] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.244] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.244] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.244] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.248] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.248] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.248] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.248] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.252] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.252] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.252] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.252] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.259] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.259] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.259] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.259] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.263] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.263] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.263] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.263] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.267] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.267] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.267] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.267] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.271] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.271] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.271] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.271] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.275] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.275] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.275] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.275] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.279] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.279] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.279] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.279] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.286] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.286] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.287] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.287] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.299] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.300] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.300] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.300] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.310] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.311] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.311] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.311] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.319] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.320] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.320] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.320] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.325] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.325] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.325] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.326] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.329] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.329] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.329] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.329] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.332] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.332] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.332] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.332] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.340] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.341] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.341] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.341] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.344] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.344] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.345] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.345] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.348] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.348] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.348] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.352] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.352] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.352] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.352] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.356] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.356] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.356] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.356] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.363] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.363] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.364] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.364] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.367] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.367] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.367] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.367] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.371] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.371] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.372] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.375] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.375] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.376] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.376] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.380] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.380] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.380] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.380] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.383] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.384] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.384] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.384] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.390] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.390] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.390] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.390] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.394] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.394] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.394] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.395] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.398] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.398] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.399] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.399] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.403] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.403] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.403] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.403] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.407] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.407] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.407] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.407] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.411] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.411] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.411] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.411] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.415] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.415] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.415] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.415] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.419] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.419] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.419] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.419] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.423] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.423] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.423] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.423] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.427] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.427] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.427] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.427] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.431] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.431] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.431] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.431] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.435] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.435] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.435] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.435] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.439] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.439] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.439] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.439] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.443] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.443] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.443] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.443] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.447] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.447] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.447] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.448] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.453] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.454] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.454] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.454] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.457] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.458] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.458] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.461] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.462] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.462] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.466] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.466] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.466] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.469] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.470] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.470] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.470] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.473] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.473] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.474] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.474] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.477] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.478] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.478] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.478] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.482] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.482] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.482] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.482] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.486] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.486] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.486] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.490] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.491] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.491] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.491] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.495] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.495] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.495] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.499] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.499] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.499] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.499] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.503] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.503] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.503] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.503] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.508] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.508] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.508] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.508] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.512] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.512] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.512] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.512] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.522] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.522] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.522] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.522] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.526] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.527] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.527] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.527] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.531] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.531] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.531] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.531] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.535] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.535] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.535] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.535] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.539] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.539] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.539] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.539] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.544] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.544] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.544] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.544] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.552] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.553] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.553] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.553] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.557] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.557] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.557] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.557] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.561] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.561] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.562] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.562] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.570] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.570] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.571] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.571] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.575] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.575] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.575] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.575] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.579] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.579] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.579] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.579] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.586] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.586] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.586] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.586] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.590] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.590] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.590] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.590] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.598] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.598] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.598] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.598] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.609] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.609] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.609] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.609] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.617] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.617] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.618] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.618] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.627] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.627] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.627] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.627] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.634] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.635] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.635] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.635] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.638] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.638] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.639] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.639] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.642] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.642] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.642] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.642] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.646] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.646] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.646] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.646] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.655] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.655] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.655] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.655] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.658] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.659] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.659] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.659] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.662] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.662] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.662] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.662] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.666] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.667] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.667] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.667] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.671] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.671] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.671] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.671] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.675] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.675] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.675] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.675] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.678] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.679] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.679] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.679] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.683] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.683] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.683] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.683] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.686] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.687] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.687] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.687] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.690] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.690] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.691] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.691] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.695] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.695] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.695] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.695] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.699] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.699] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.699] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.699] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.703] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.703] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.703] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.703] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.707] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.707] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.707] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.707] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.710] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.711] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.711] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.711] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.717] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.717] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.717] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.720] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.721] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.721] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.721] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.724] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.724] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.724] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.724] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.729] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.729] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.729] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.729] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.733] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.733] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.733] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.733] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.737] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.737] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.737] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.737] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.741] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.741] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.741] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.741] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.745] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.745] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.745] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.745] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.748] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.749] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.749] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.749] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.752] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.752] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.752] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.752] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.756] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.756] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.756] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.756] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.760] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.760] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.760] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.760] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.764] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.764] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.764] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.764] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.768] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.768] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.768] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.768] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.771] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.771] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.772] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.772] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.775] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.776] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.776] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.776] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.789] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.789] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.789] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.789] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.793] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.794] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.794] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.794] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.798] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.798] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.798] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.798] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.802] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.802] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.802] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.802] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.806] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.806] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.806] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.806] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.810] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.811] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.811] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.811] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.814] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.814] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.815] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.815] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.818] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.818] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.819] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.819] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.822] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.823] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.823] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.823] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.826] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.827] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.827] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.827] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.830] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.830] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.831] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.831] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.835] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.836] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.836] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.836] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.840] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.840] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.840] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.840] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.846] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.846] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.846] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.846] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.850] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.851] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.851] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.851] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.854] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.855] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.855] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.855] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.858] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.858] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.858] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.858] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.862] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.862] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.862] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.862] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.867] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.868] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.868] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.868] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.871] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.872] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.872] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.872] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.875] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.875] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.875] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.875] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.879] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.879] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.879] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.879] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.883] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.883] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.883] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.883] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.887] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.887] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.887] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.887] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.891] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.891] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.891] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.891] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.895] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.895] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.895] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.895] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.899] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.899] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.899] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.899] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.903] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.903] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.903] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.903] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.909] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.909] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.909] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.909] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.913] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.913] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.913] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.913] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.917] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.917] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.917] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.917] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.921] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.921] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.921] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.925] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.925] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.925] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.925] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.929] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.929] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.929] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.936] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.937] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.937] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.937] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.940] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.941] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.941] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.944] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.944] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.944] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.945] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.948] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.948] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.948] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.948] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.953] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.953] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.953] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.953] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.959] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.959] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.959] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.959] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.964] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.965] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.965] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.965] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.971] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.971] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.971] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.971] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.979] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.979] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.979] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.979] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.986] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.987] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.987] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.987] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.992] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.993] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.993] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.993] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0159.998] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0159.999] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0159.999] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0159.999] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.003] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.004] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.004] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.004] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.009] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.010] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.010] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.010] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.014] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.015] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.015] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.015] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.020] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.020] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.020] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.020] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.025] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.026] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.026] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.026] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.033] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.033] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.033] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.033] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.039] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.039] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.039] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.039] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.047] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.047] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.047] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.047] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.052] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.052] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.053] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.053] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.058] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.058] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.058] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.058] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.063] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.063] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.063] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.063] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.067] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.068] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.068] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.068] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.072] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.073] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.073] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.073] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.077] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.077] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.078] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.078] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.082] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.082] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.082] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.082] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.086] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.086] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.086] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.086] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.090] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.090] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.090] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.090] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.094] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.094] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.094] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.094] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.098] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.098] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.098] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.098] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.102] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.102] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.102] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.108] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.108] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.108] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.109] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.116] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.117] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.117] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.117] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.120] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.120] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.120] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.120] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.123] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.123] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.123] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.123] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.126] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.126] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.126] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.126] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.129] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.129] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.129] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.129] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.132] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.132] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.132] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.132] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.145] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.146] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.146] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.146] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.154] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.154] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.154] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.154] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.163] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.163] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.163] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.163] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.174] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.174] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.174] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.174] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.178] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.178] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.178] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.178] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.182] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.182] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.182] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.182] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.186] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.186] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.186] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.186] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.190] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.190] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.190] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.190] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.194] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.194] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.194] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.194] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.198] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.198] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.198] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.198] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.202] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.202] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.202] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.202] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.206] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.206] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.206] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.206] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.210] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.210] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.210] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.210] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.214] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.215] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.215] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.215] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.218] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.219] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.219] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.219] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.222] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.222] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.222] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.223] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.226] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.226] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.226] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.226] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.230] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.230] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.230] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.230] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.237] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.237] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.237] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.241] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.241] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.241] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.241] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.245] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.246] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.246] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.246] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.249] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.250] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.250] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.250] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.253] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.253] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.253] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.253] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.257] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.257] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.258] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.258] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.261] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.261] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.261] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.261] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.269] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.270] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.270] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.270] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.275] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.276] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.276] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.276] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.280] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.280] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.280] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.280] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.284] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.284] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.284] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.284] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.288] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.288] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.288] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.288] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.292] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.293] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.293] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.293] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.297] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.297] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.297] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.297] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.304] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.304] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.304] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.304] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.308] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.308] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.309] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.309] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.318] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.318] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.318] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.318] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.325] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.325] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.325] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.325] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.332] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.333] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.333] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.333] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.337] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.337] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.337] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.337] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.341] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.341] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.341] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.341] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.345] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.345] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.345] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.345] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.349] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.349] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.349] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.349] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.353] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.353] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.353] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.353] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.357] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.358] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.358] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.358] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.369] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.369] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.369] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.369] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.373] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.373] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.373] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.373] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.377] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.377] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.377] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.377] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.385] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.385] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.385] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.385] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.392] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.392] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.392] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.392] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.396] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.396] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.396] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.396] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.404] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.404] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.404] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.404] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.408] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.408] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.408] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.408] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.417] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.417] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.417] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.417] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.420] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.420] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.420] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.420] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.424] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.424] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.424] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.424] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.427] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.427] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.427] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.427] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.433] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.433] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.433] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.433] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.436] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.437] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.437] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.437] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.440] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.440] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.440] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.440] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.443] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.444] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.444] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.444] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.447] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.447] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.447] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.447] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.455] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.455] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.455] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.455] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.458] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.458] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.458] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.462] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.462] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.462] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.465] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.465] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.465] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.465] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.469] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.469] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.469] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.469] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.472] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.472] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.472] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.472] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.482] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.482] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.482] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.482] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.486] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.486] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.486] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.490] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.490] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.490] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.490] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.497] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.497] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.497] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.497] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.501] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.501] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.501] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.501] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.509] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.509] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.509] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.509] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.516] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.517] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.517] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.517] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.520] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.521] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.521] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.521] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.525] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.525] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.525] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.525] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.529] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.529] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.529] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.529] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.538] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.538] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.538] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.538] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.546] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.547] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.547] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.547] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.558] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.558] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.558] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.558] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.566] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.566] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.566] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.566] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.596] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.600] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.600] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.600] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.802] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.802] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.802] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.802] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.806] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.807] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.807] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.807] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.811] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.811] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.811] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.811] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.819] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.819] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.819] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.819] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.825] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.825] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.825] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.825] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.829] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.829] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.830] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.830] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.833] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.833] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.833] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.833] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.837] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.837] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.837] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.837] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.843] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.843] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.843] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.843] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.846] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.846] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.846] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.846] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.850] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.850] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.850] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.850] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.853] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.853] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.853] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.853] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.856] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.857] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.857] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.857] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.860] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.860] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.860] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.860] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.863] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.864] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.864] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.864] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.867] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.867] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.867] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.867] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.870] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.870] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.870] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.875] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.875] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.875] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.875] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.879] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.879] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.879] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.879] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.882] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.882] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.882] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.882] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.888] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.888] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.888] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.888] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.892] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.892] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.892] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.892] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.895] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.895] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.895] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.895] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.899] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.899] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.899] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.899] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.902] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.903] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.903] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.903] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.906] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.906] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.906] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.906] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.909] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.909] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.909] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.910] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.913] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.913] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.913] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.913] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.917] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.917] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.917] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.917] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.920] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.920] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.920] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.920] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.923] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.924] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.924] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.924] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.927] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.927] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.927] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.927] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.930] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.931] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.931] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.931] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.934] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.934] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.934] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.934] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.937] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.938] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.938] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.941] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.941] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.941] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.945] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.945] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.945] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.945] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.948] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.948] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.948] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.948] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.954] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.954] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.954] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.954] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.957] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.958] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.958] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.958] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.961] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.962] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.962] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.962] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.965] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.965] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.965] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.965] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.968] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.968] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.968] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.968] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.972] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.972] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.972] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.972] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.976] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.976] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.976] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.976] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.980] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.980] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.980] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.980] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0160.984] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0160.984] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0160.984] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0160.984] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.038] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.038] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.038] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.038] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.041] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.042] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.042] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.042] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.046] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.046] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.046] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.046] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.050] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.050] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.050] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.050] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.054] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.055] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.055] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.055] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.059] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.059] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.059] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.059] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.076] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.076] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.076] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.076] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.080] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.080] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.080] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.080] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.086] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.086] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.087] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.087] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.091] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.091] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.091] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.091] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.095] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.095] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.095] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.095] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.099] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.099] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.099] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.099] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.103] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.103] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.103] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.107] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.107] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.107] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.108] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.111] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.111] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.112] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.116] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.116] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.116] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.116] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.120] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.120] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.120] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.120] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.124] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.124] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.125] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.125] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.129] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.129] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.129] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.129] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.133] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.133] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.133] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.133] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.137] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.138] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.138] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.138] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.141] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.141] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.141] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.141] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.145] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.145] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.146] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.146] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.152] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.152] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.152] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.152] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.156] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.156] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.157] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.157] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.160] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.160] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.161] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.161] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.180] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.180] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.180] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.180] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.184] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.184] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.185] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.185] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.189] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.189] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.189] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.189] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.193] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.193] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.193] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.193] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.196] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.196] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.197] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.197] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.202] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.202] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.202] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.202] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.206] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.207] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.207] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.207] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.211] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.211] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.211] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.211] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.218] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.218] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.218] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.218] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.221] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.222] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.222] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.222] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.225] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.225] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.225] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.225] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.228] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.229] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.229] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.229] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.232] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.232] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.232] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.232] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.236] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.236] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.236] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.236] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.239] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.240] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.240] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.240] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.243] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.243] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.243] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.243] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.247] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.247] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.247] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.250] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.250] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.250] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.250] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.254] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.254] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.254] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.254] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.257] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.258] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.258] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.258] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.261] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.261] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.262] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.262] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.265] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.265] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.265] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.265] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.268] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.269] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.269] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.269] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.272] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.272] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.272] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.272] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.278] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.278] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.278] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.278] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.282] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.282] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.282] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.282] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.285] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.285] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.285] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.285] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.289] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.289] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.289] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.289] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.292] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.292] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.292] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.292] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.296] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.296] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.296] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.296] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.299] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.299] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.300] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.300] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.303] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.303] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.303] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.303] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.307] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.307] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.307] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.307] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.312] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.312] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.312] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.312] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.316] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.316] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.316] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.316] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.320] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.320] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.320] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.320] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.337] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.338] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.338] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.338] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.344] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.344] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.345] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.349] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.349] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.349] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.349] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.353] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.353] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.353] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.353] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.363] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.363] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.363] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.363] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.367] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.367] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.367] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.367] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.372] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.372] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.372] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.376] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.376] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.376] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.376] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.380] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.380] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.380] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.381] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.381] GetTickCount () returned 0x115ff37 [0161.381] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.383] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29200000 [0161.383] GetTickCount () returned 0x115ff37 [0161.383] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.384] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29200000 [0161.384] GetTickCount () returned 0x115ff37 [0161.384] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.385] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.385] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.385] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.385] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.385] GetTickCount () returned 0x115ff37 [0161.385] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.387] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29280000 [0161.387] GetTickCount () returned 0x115ff37 [0161.387] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.388] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29280000 [0161.388] GetTickCount () returned 0x115ff37 [0161.388] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.390] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.390] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.390] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.390] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.390] GetTickCount () returned 0x115ff37 [0161.390] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.392] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29300000 [0161.392] GetTickCount () returned 0x115ff37 [0161.392] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.393] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29300000 [0161.393] GetTickCount () returned 0x115ff37 [0161.393] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.394] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.394] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.395] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.395] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.395] GetTickCount () returned 0x115ff37 [0161.395] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.400] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29380000 [0161.400] GetTickCount () returned 0x115ff46 [0161.400] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.401] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29380000 [0161.402] GetTickCount () returned 0x115ff46 [0161.402] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.403] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.403] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.403] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.403] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.403] GetTickCount () returned 0x115ff46 [0161.403] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.411] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29400000 [0161.411] GetTickCount () returned 0x115ff46 [0161.411] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.412] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29400000 [0161.412] GetTickCount () returned 0x115ff56 [0161.412] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.413] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.413] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.413] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.413] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.414] GetTickCount () returned 0x115ff56 [0161.414] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.420] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29480000 [0161.420] GetTickCount () returned 0x115ff56 [0161.420] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.421] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29480000 [0161.421] GetTickCount () returned 0x115ff56 [0161.421] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.422] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.422] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.423] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.423] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.423] GetTickCount () returned 0x115ff56 [0161.423] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.424] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29500000 [0161.424] GetTickCount () returned 0x115ff56 [0161.424] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.425] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29500000 [0161.425] GetTickCount () returned 0x115ff56 [0161.425] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.427] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.427] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.427] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.427] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.427] GetTickCount () returned 0x115ff56 [0161.427] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.429] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29580000 [0161.429] GetTickCount () returned 0x115ff65 [0161.429] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.430] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29580000 [0161.430] GetTickCount () returned 0x115ff65 [0161.430] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.431] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.431] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.431] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.432] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.432] GetTickCount () returned 0x115ff65 [0161.432] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.437] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29600000 [0161.438] GetTickCount () returned 0x115ff65 [0161.438] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.439] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29600000 [0161.439] GetTickCount () returned 0x115ff65 [0161.439] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.440] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.440] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.440] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.440] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.440] GetTickCount () returned 0x115ff65 [0161.440] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.442] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29680000 [0161.442] GetTickCount () returned 0x115ff65 [0161.442] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.443] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29680000 [0161.443] GetTickCount () returned 0x115ff75 [0161.443] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.444] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.445] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.445] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.445] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.445] GetTickCount () returned 0x115ff75 [0161.445] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.447] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29700000 [0161.447] GetTickCount () returned 0x115ff75 [0161.447] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.448] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29700000 [0161.448] GetTickCount () returned 0x115ff75 [0161.448] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.449] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.449] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.449] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.449] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.449] GetTickCount () returned 0x115ff75 [0161.449] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.451] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29780000 [0161.451] GetTickCount () returned 0x115ff75 [0161.451] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.452] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29780000 [0161.452] GetTickCount () returned 0x115ff75 [0161.452] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.453] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.453] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.454] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.454] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.454] GetTickCount () returned 0x115ff75 [0161.454] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.455] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29800000 [0161.455] GetTickCount () returned 0x115ff75 [0161.455] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.457] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29800000 [0161.457] GetTickCount () returned 0x115ff75 [0161.457] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.458] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.458] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.458] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.458] GetTickCount () returned 0x115ff75 [0161.458] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.460] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29880000 [0161.460] GetTickCount () returned 0x115ff85 [0161.460] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.461] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29880000 [0161.461] GetTickCount () returned 0x115ff85 [0161.461] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.463] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.463] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.463] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.463] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.463] GetTickCount () returned 0x115ff85 [0161.463] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.465] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29900000 [0161.465] GetTickCount () returned 0x115ff85 [0161.465] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.466] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29900000 [0161.466] GetTickCount () returned 0x115ff85 [0161.466] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.467] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.468] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.468] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.468] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.468] GetTickCount () returned 0x115ff85 [0161.468] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.479] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29980000 [0161.479] GetTickCount () returned 0x115ff94 [0161.479] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.480] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29980000 [0161.480] GetTickCount () returned 0x115ff94 [0161.480] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.482] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.482] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.482] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.482] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.482] GetTickCount () returned 0x115ff94 [0161.482] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.488] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29a00000 [0161.488] GetTickCount () returned 0x115ff94 [0161.488] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.489] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29a00000 [0161.489] GetTickCount () returned 0x115ff94 [0161.489] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.490] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.490] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.490] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.490] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.491] GetTickCount () returned 0x115ffa4 [0161.491] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.492] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29a80000 [0161.492] GetTickCount () returned 0x115ffa4 [0161.492] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.493] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29a80000 [0161.493] GetTickCount () returned 0x115ffa4 [0161.493] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.495] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.495] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.495] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.495] GetTickCount () returned 0x115ffa4 [0161.495] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.497] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29b00000 [0161.497] GetTickCount () returned 0x115ffa4 [0161.497] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.498] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29b00000 [0161.498] GetTickCount () returned 0x115ffa4 [0161.498] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.499] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.499] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.499] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.499] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.499] GetTickCount () returned 0x115ffa4 [0161.499] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.501] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29b80000 [0161.501] GetTickCount () returned 0x115ffa4 [0161.501] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.502] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29b80000 [0161.502] GetTickCount () returned 0x115ffa4 [0161.502] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.503] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.504] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.504] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.504] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.504] GetTickCount () returned 0x115ffa4 [0161.504] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.506] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29c00000 [0161.506] GetTickCount () returned 0x115ffb3 [0161.506] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.507] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29c00000 [0161.507] GetTickCount () returned 0x115ffb3 [0161.507] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.508] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.508] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.508] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.508] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.508] GetTickCount () returned 0x115ffb3 [0161.508] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.510] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29c80000 [0161.510] GetTickCount () returned 0x115ffb3 [0161.510] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.511] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29c80000 [0161.511] GetTickCount () returned 0x115ffb3 [0161.511] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.512] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.512] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.512] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.512] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.512] GetTickCount () returned 0x115ffb3 [0161.513] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.514] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29d00000 [0161.514] GetTickCount () returned 0x115ffb3 [0161.514] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.515] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29d00000 [0161.515] GetTickCount () returned 0x115ffb3 [0161.515] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.516] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.516] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.517] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.517] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.517] GetTickCount () returned 0x115ffb3 [0161.517] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.518] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29d80000 [0161.518] GetTickCount () returned 0x115ffb3 [0161.518] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.520] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29d80000 [0161.520] GetTickCount () returned 0x115ffb3 [0161.520] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.521] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.521] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.521] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.521] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.521] GetTickCount () returned 0x115ffc3 [0161.521] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.523] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29e00000 [0161.523] GetTickCount () returned 0x115ffc3 [0161.523] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.524] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29e00000 [0161.524] GetTickCount () returned 0x115ffc3 [0161.524] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.525] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.525] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.526] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.526] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.526] GetTickCount () returned 0x115ffc3 [0161.526] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.527] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29e80000 [0161.527] GetTickCount () returned 0x115ffc3 [0161.527] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.528] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29e80000 [0161.529] GetTickCount () returned 0x115ffc3 [0161.529] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.530] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.530] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.530] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.530] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.530] GetTickCount () returned 0x115ffc3 [0161.530] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.540] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29f00000 [0161.540] GetTickCount () returned 0x115ffd3 [0161.540] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.541] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29f00000 [0161.541] GetTickCount () returned 0x115ffd3 [0161.541] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.543] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.543] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.543] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.543] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.543] GetTickCount () returned 0x115ffd3 [0161.543] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.545] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29f80000 [0161.545] GetTickCount () returned 0x115ffd3 [0161.545] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.547] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x29f80000 [0161.547] GetTickCount () returned 0x115ffd3 [0161.547] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.548] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.549] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.549] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.549] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.549] GetTickCount () returned 0x115ffd3 [0161.549] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.551] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a000000 [0161.551] GetTickCount () returned 0x115ffd3 [0161.551] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.552] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a000000 [0161.552] GetTickCount () returned 0x115ffe2 [0161.552] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.553] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.554] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.554] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.554] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.554] GetTickCount () returned 0x115ffe2 [0161.554] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.556] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a080000 [0161.556] GetTickCount () returned 0x115ffe2 [0161.556] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.557] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a080000 [0161.557] GetTickCount () returned 0x115ffe2 [0161.557] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.558] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.558] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.558] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.559] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.559] GetTickCount () returned 0x115ffe2 [0161.559] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.561] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a100000 [0161.561] GetTickCount () returned 0x115ffe2 [0161.561] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.562] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a100000 [0161.562] GetTickCount () returned 0x115ffe2 [0161.562] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.563] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.563] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.563] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.563] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.563] GetTickCount () returned 0x115ffe2 [0161.563] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.565] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a180000 [0161.565] GetTickCount () returned 0x115ffe2 [0161.565] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.566] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a180000 [0161.567] GetTickCount () returned 0x115ffe2 [0161.567] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.568] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.568] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.568] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.568] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.568] GetTickCount () returned 0x115fff2 [0161.568] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.570] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a200000 [0161.570] GetTickCount () returned 0x115fff2 [0161.570] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.572] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a200000 [0161.572] GetTickCount () returned 0x115fff2 [0161.572] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.573] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.573] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.573] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.573] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.573] GetTickCount () returned 0x115fff2 [0161.573] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.575] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a280000 [0161.575] GetTickCount () returned 0x115fff2 [0161.575] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.576] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a280000 [0161.577] GetTickCount () returned 0x115fff2 [0161.577] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.578] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.578] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.578] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.578] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.578] GetTickCount () returned 0x115fff2 [0161.578] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.580] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a300000 [0161.580] GetTickCount () returned 0x115fff2 [0161.580] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.581] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a300000 [0161.581] GetTickCount () returned 0x115fff2 [0161.581] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.582] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.583] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.583] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.583] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.583] GetTickCount () returned 0x115fff2 [0161.583] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.585] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a380000 [0161.585] GetTickCount () returned 0x1160001 [0161.585] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.586] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a380000 [0161.586] GetTickCount () returned 0x1160001 [0161.586] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.587] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.587] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.587] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.587] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.588] GetTickCount () returned 0x1160001 [0161.588] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.589] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a400000 [0161.589] GetTickCount () returned 0x1160001 [0161.589] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.591] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a400000 [0161.591] GetTickCount () returned 0x1160001 [0161.591] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.592] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.592] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.592] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.592] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.592] GetTickCount () returned 0x1160001 [0161.592] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.594] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a480000 [0161.594] GetTickCount () returned 0x1160001 [0161.594] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.595] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a480000 [0161.595] GetTickCount () returned 0x1160001 [0161.595] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.597] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.597] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.597] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.597] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.597] GetTickCount () returned 0x1160001 [0161.597] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.599] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a500000 [0161.599] GetTickCount () returned 0x1160001 [0161.599] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.600] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a500000 [0161.600] GetTickCount () returned 0x1160011 [0161.600] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.606] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.606] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.606] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.606] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.606] GetTickCount () returned 0x1160011 [0161.606] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.609] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a580000 [0161.609] GetTickCount () returned 0x1160011 [0161.609] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.610] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a580000 [0161.610] GetTickCount () returned 0x1160011 [0161.610] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.612] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.612] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.612] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.612] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.612] GetTickCount () returned 0x1160011 [0161.612] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.614] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a600000 [0161.614] GetTickCount () returned 0x1160011 [0161.614] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.617] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a600000 [0161.617] GetTickCount () returned 0x1160021 [0161.617] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.618] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.618] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.618] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.618] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.618] GetTickCount () returned 0x1160021 [0161.618] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.620] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a680000 [0161.621] GetTickCount () returned 0x1160021 [0161.621] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.622] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a680000 [0161.622] GetTickCount () returned 0x1160021 [0161.622] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.623] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.623] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.623] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.623] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.623] GetTickCount () returned 0x1160021 [0161.623] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.625] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a700000 [0161.625] GetTickCount () returned 0x1160021 [0161.625] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.626] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a700000 [0161.626] GetTickCount () returned 0x1160021 [0161.626] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.627] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.627] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.628] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.628] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.628] GetTickCount () returned 0x1160021 [0161.628] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.630] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a780000 [0161.630] GetTickCount () returned 0x1160021 [0161.630] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.631] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a780000 [0161.631] GetTickCount () returned 0x1160030 [0161.631] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.632] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.632] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.632] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.632] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.633] GetTickCount () returned 0x1160030 [0161.633] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.635] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a800000 [0161.635] GetTickCount () returned 0x1160030 [0161.635] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.636] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a800000 [0161.636] GetTickCount () returned 0x1160030 [0161.636] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.637] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.637] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.637] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.637] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.637] GetTickCount () returned 0x1160030 [0161.637] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.639] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a880000 [0161.639] GetTickCount () returned 0x1160030 [0161.639] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.640] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a880000 [0161.640] GetTickCount () returned 0x1160030 [0161.640] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.642] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.642] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.642] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.642] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.642] GetTickCount () returned 0x1160030 [0161.642] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.644] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a900000 [0161.644] GetTickCount () returned 0x1160030 [0161.644] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.645] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a900000 [0161.645] GetTickCount () returned 0x1160030 [0161.645] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.646] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.647] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.647] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.647] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.647] GetTickCount () returned 0x1160040 [0161.647] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.649] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a980000 [0161.649] GetTickCount () returned 0x1160040 [0161.649] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.650] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2a980000 [0161.650] GetTickCount () returned 0x1160040 [0161.650] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.651] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.651] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.651] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.651] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.652] GetTickCount () returned 0x1160040 [0161.652] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.653] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2aa00000 [0161.653] GetTickCount () returned 0x1160040 [0161.653] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.655] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2aa00000 [0161.655] GetTickCount () returned 0x1160040 [0161.655] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.656] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.656] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.656] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.656] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.656] GetTickCount () returned 0x1160040 [0161.656] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.658] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2aa80000 [0161.658] GetTickCount () returned 0x1160040 [0161.658] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.659] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2aa80000 [0161.659] GetTickCount () returned 0x1160040 [0161.659] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.660] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.660] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.660] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.660] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.661] GetTickCount () returned 0x1160040 [0161.661] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.662] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ab00000 [0161.662] GetTickCount () returned 0x116004f [0161.662] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.664] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ab00000 [0161.664] GetTickCount () returned 0x116004f [0161.664] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.665] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.665] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.665] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.665] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.665] GetTickCount () returned 0x116004f [0161.665] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.669] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ab80000 [0161.670] GetTickCount () returned 0x116004f [0161.670] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.671] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ab80000 [0161.671] GetTickCount () returned 0x116004f [0161.671] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.672] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.672] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.672] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.672] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.672] GetTickCount () returned 0x116004f [0161.672] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.673] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ac00000 [0161.674] GetTickCount () returned 0x116004f [0161.674] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.675] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ac00000 [0161.675] GetTickCount () returned 0x116004f [0161.675] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.677] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.677] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.677] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.677] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.677] GetTickCount () returned 0x116005f [0161.677] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.679] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ac80000 [0161.679] GetTickCount () returned 0x116005f [0161.679] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.680] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ac80000 [0161.680] GetTickCount () returned 0x116005f [0161.680] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.681] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.681] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.681] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.681] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.681] GetTickCount () returned 0x116005f [0161.681] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.683] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ad00000 [0161.683] GetTickCount () returned 0x116005f [0161.683] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.684] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ad00000 [0161.684] GetTickCount () returned 0x116005f [0161.684] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.685] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.685] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.685] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.685] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.685] GetTickCount () returned 0x116005f [0161.685] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.687] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ad80000 [0161.687] GetTickCount () returned 0x116005f [0161.687] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.688] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ad80000 [0161.688] GetTickCount () returned 0x116005f [0161.688] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.689] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.689] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.689] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.689] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.689] GetTickCount () returned 0x116005f [0161.689] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.691] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ae00000 [0161.691] GetTickCount () returned 0x116005f [0161.691] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.692] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ae00000 [0161.692] GetTickCount () returned 0x116005f [0161.692] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.694] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.694] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.694] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.694] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.694] GetTickCount () returned 0x116006f [0161.694] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.696] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ae80000 [0161.696] GetTickCount () returned 0x116006f [0161.696] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.697] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ae80000 [0161.697] GetTickCount () returned 0x116006f [0161.697] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.698] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.698] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.698] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.698] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.698] GetTickCount () returned 0x116006f [0161.698] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.700] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2af00000 [0161.700] GetTickCount () returned 0x116006f [0161.700] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.701] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2af00000 [0161.701] GetTickCount () returned 0x116006f [0161.701] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.702] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.702] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.702] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.702] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.703] GetTickCount () returned 0x116006f [0161.703] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.708] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2af80000 [0161.708] GetTickCount () returned 0x116007e [0161.708] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.710] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2af80000 [0161.710] GetTickCount () returned 0x116007e [0161.710] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.711] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.711] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.711] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.711] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.712] GetTickCount () returned 0x116007e [0161.712] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.713] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b000000 [0161.713] GetTickCount () returned 0x116007e [0161.713] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.715] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b000000 [0161.715] GetTickCount () returned 0x116007e [0161.715] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.716] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.716] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.716] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.716] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.716] GetTickCount () returned 0x116007e [0161.716] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.718] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b080000 [0161.718] GetTickCount () returned 0x116007e [0161.718] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.719] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b080000 [0161.719] GetTickCount () returned 0x116007e [0161.719] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.721] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.721] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.721] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.721] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.721] GetTickCount () returned 0x116007e [0161.721] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.723] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b100000 [0161.723] GetTickCount () returned 0x116007e [0161.723] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.724] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b100000 [0161.724] GetTickCount () returned 0x116008e [0161.724] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.725] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.726] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.726] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.726] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.726] GetTickCount () returned 0x116008e [0161.726] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.727] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b180000 [0161.727] GetTickCount () returned 0x116008e [0161.728] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.729] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b180000 [0161.729] GetTickCount () returned 0x116008e [0161.729] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.730] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.730] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.730] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.730] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.730] GetTickCount () returned 0x116008e [0161.730] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.734] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b200000 [0161.734] GetTickCount () returned 0x116008e [0161.734] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.735] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b200000 [0161.735] GetTickCount () returned 0x116008e [0161.736] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.737] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.737] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.737] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.737] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.737] GetTickCount () returned 0x116008e [0161.737] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.739] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b280000 [0161.739] GetTickCount () returned 0x116008e [0161.739] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.740] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b280000 [0161.740] GetTickCount () returned 0x116009d [0161.740] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.741] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.741] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.741] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.741] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.741] GetTickCount () returned 0x116009d [0161.742] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.743] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b300000 [0161.743] GetTickCount () returned 0x116009d [0161.743] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.744] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b300000 [0161.745] GetTickCount () returned 0x116009d [0161.745] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.746] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.746] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.746] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.746] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.746] GetTickCount () returned 0x116009d [0161.746] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.748] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b380000 [0161.748] GetTickCount () returned 0x116009d [0161.748] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.749] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b380000 [0161.749] GetTickCount () returned 0x116009d [0161.749] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.750] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.751] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.751] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.751] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.751] GetTickCount () returned 0x116009d [0161.751] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.752] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b400000 [0161.753] GetTickCount () returned 0x116009d [0161.753] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.754] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b400000 [0161.754] GetTickCount () returned 0x116009d [0161.754] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.755] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.755] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.755] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.755] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.755] GetTickCount () returned 0x11600ad [0161.755] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.757] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b480000 [0161.757] GetTickCount () returned 0x11600ad [0161.757] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.758] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b480000 [0161.758] GetTickCount () returned 0x11600ad [0161.758] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.759] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.760] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.760] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.760] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.760] GetTickCount () returned 0x11600ad [0161.760] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.762] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b500000 [0161.762] GetTickCount () returned 0x11600ad [0161.762] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.763] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b500000 [0161.763] GetTickCount () returned 0x11600ad [0161.763] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.764] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.764] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.764] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.764] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.764] GetTickCount () returned 0x11600ad [0161.764] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.766] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b580000 [0161.766] GetTickCount () returned 0x11600ad [0161.766] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.767] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b580000 [0161.767] GetTickCount () returned 0x11600ad [0161.767] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.768] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.769] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.769] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.769] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.769] GetTickCount () returned 0x11600ad [0161.769] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.771] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b600000 [0161.771] GetTickCount () returned 0x11600bd [0161.771] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.772] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b600000 [0161.772] GetTickCount () returned 0x11600bd [0161.772] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.773] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.773] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.774] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.774] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.774] GetTickCount () returned 0x11600bd [0161.774] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.775] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b680000 [0161.776] GetTickCount () returned 0x11600bd [0161.776] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.777] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b680000 [0161.777] GetTickCount () returned 0x11600bd [0161.777] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.785] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.785] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.785] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.785] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.785] GetTickCount () returned 0x11600bd [0161.785] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.787] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b700000 [0161.787] GetTickCount () returned 0x11600cc [0161.787] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.788] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b700000 [0161.789] GetTickCount () returned 0x11600cc [0161.789] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.790] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.790] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.790] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.790] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.790] GetTickCount () returned 0x11600cc [0161.790] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.800] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b780000 [0161.800] GetTickCount () returned 0x11600cc [0161.800] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.801] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b780000 [0161.801] GetTickCount () returned 0x11600cc [0161.801] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.802] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.803] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.803] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.803] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.803] GetTickCount () returned 0x11600dc [0161.803] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.825] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b800000 [0161.825] GetTickCount () returned 0x11600eb [0161.825] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.826] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b800000 [0161.826] GetTickCount () returned 0x11600eb [0161.827] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.828] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.828] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.828] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.828] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.828] GetTickCount () returned 0x11600eb [0161.828] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.830] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b880000 [0161.830] GetTickCount () returned 0x11600eb [0161.830] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.831] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b880000 [0161.831] GetTickCount () returned 0x11600eb [0161.831] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.832] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.833] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.833] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.833] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.833] GetTickCount () returned 0x11600fb [0161.833] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.835] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b900000 [0161.835] GetTickCount () returned 0x11600fb [0161.835] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.836] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b900000 [0161.836] GetTickCount () returned 0x11600fb [0161.836] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.837] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.837] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.838] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.838] GetTickCount () returned 0x11600fb [0161.838] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.840] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b980000 [0161.840] GetTickCount () returned 0x11600fb [0161.840] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.841] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2b980000 [0161.841] GetTickCount () returned 0x11600fb [0161.841] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.842] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.842] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.842] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.842] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.843] GetTickCount () returned 0x11600fb [0161.843] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.844] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ba00000 [0161.844] GetTickCount () returned 0x11600fb [0161.844] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.846] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ba00000 [0161.846] GetTickCount () returned 0x11600fb [0161.846] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.847] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.847] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.847] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.847] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.847] GetTickCount () returned 0x11600fb [0161.847] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.854] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ba80000 [0161.854] GetTickCount () returned 0x116010b [0161.854] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.855] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2ba80000 [0161.855] GetTickCount () returned 0x116010b [0161.855] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.856] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.856] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.856] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.856] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.856] GetTickCount () returned 0x116010b [0161.856] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.867] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2bb00000 [0161.867] GetTickCount () returned 0x116011a [0161.867] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.868] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x2bb00000 [0161.868] GetTickCount () returned 0x116011a [0161.868] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0161.869] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.870] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.870] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.879] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.879] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.879] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.880] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.891] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.891] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.891] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.891] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.897] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.897] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.897] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.897] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.900] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.901] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.901] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.901] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.904] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.905] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.905] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.905] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.908] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.908] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.909] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.909] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.913] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.913] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.913] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.913] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.917] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.917] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.917] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.917] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.922] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.922] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.922] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.922] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.926] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.926] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.926] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.926] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.933] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.933] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.933] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.933] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.937] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.937] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.937] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.937] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.940] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.941] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.941] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.945] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.945] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.945] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.945] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.949] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.949] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.949] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.949] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.953] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.953] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.953] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.953] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.957] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.957] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.957] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.957] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.961] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.961] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.961] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.961] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.964] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.965] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.965] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.965] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.968] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.969] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.969] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.969] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.972] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.973] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.973] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.973] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.976] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.977] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.977] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.977] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.981] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.981] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.981] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.981] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.984] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.985] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.985] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.985] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.988] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.989] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.989] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.989] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0161.995] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0161.996] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0161.996] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0161.996] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.000] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.000] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.000] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.000] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.004] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.004] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.004] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.004] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.008] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.008] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.008] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.008] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.012] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.012] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.012] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.012] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.016] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.016] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.016] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.016] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.020] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.020] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.020] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.020] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.024] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.024] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.024] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.024] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.028] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.028] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.028] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.035] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.035] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.035] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.035] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.045] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.045] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.045] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.045] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.054] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.054] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.054] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.054] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.064] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.064] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.064] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.064] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.072] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.073] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.073] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.073] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.080] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.080] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.080] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.080] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.089] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.090] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.090] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.090] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.094] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.094] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.094] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.094] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.102] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.102] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.102] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.106] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.106] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.106] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.114] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.115] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.115] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.115] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.119] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.119] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.119] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.119] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.125] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.126] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.126] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.126] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.130] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.130] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.130] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.130] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.134] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.134] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.134] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.134] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.138] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.138] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.138] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.139] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.142] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.142] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.143] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.143] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.146] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.147] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.147] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.147] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.152] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.152] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.152] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.152] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.156] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.156] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.156] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.156] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.160] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.160] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.160] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.160] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.164] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.164] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.164] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.164] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.169] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.169] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.169] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.169] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.173] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.173] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.173] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.173] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.187] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.187] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.187] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.187] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.193] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.193] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.194] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.194] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.198] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.198] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.198] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.198] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.202] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.202] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.202] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.202] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.206] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.206] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.206] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.206] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.210] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.210] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.211] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.211] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.214] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.215] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.215] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.215] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.219] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.219] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.219] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.219] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.223] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.223] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.223] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.223] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.232] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.232] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.233] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.233] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.237] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.237] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.237] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.241] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.241] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.241] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.241] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.245] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.245] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.245] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.245] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.248] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.249] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.249] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.257] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.257] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.257] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.257] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.269] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.269] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.269] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.269] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.274] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.274] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.274] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.274] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.278] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.278] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.278] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.278] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.282] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.282] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.283] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.283] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.286] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.287] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.287] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.287] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.291] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.291] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.291] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.291] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.295] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.295] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.295] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.295] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.299] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.299] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.299] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.299] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.303] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.304] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.304] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.304] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.307] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.308] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.308] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.308] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.312] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.312] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.312] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.312] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.316] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.316] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.316] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.316] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.322] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.323] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.323] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.323] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.327] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.327] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.327] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.327] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.331] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.331] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.331] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.331] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.335] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.335] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.335] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.335] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.339] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.339] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.339] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.339] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.343] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.344] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.344] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.347] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.348] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.348] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.351] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.352] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.352] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.352] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.355] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.356] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.356] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.356] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.359] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.360] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.360] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.360] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.364] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.364] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.364] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.364] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.368] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.368] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.368] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.368] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.372] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.372] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.372] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.376] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.376] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.376] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.376] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.380] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.380] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.380] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.380] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.386] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.386] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.386] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.386] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.390] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.390] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.390] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.390] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.394] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.394] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.394] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.394] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.397] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.398] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.398] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.398] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.402] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.402] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.402] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.402] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.406] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.406] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.406] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.406] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.410] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.410] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.410] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.410] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.414] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.414] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.414] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.414] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.418] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.418] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.418] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.418] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.422] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.422] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.422] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.422] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.426] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.426] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.426] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.426] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.430] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.430] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.430] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.430] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.434] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.434] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.434] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.434] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.438] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.438] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.439] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.439] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.442] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.442] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.442] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.443] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.446] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.446] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.446] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.446] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.452] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.452] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.453] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.453] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.456] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.456] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.456] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.456] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.460] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.460] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.460] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.460] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.464] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.464] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.464] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.464] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.468] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.468] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.468] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.469] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.472] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.472] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.472] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.472] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.476] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.477] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.477] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.477] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.481] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.481] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.481] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.481] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.485] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.485] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.485] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.485] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.489] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.489] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.489] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.489] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.493] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.494] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.494] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.494] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.497] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.497] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.498] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.498] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.501] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.501] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.502] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.502] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.506] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.506] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.506] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.506] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.510] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.510] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.510] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.510] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.516] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.516] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.517] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.517] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.528] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.528] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.528] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.528] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.540] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.540] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.540] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.540] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.550] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.550] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.550] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.550] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.559] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.559] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.559] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.559] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.591] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.592] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.592] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.592] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.632] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.633] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.633] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.633] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.661] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.662] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.662] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.662] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.681] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.682] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.682] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.682] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.697] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.697] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.697] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.697] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.713] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.713] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.714] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.714] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.718] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.718] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.718] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.718] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.722] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.722] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.722] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.722] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.726] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.726] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.726] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.727] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.730] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.730] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.730] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.730] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.734] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.734] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.734] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.735] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.739] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.739] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.739] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.739] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.743] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.743] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.743] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.743] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.747] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.747] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.747] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.747] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.751] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.752] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.752] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.752] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.755] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.756] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.756] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.756] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.767] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.768] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.768] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.768] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.772] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.772] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.772] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.772] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.785] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.785] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.785] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.786] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.795] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.796] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.796] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.796] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.800] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.800] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.800] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.800] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.804] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.804] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.804] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.805] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.808] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.809] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.809] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.809] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.812] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.813] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.813] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.813] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.817] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.817] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.817] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.817] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.840] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.840] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.840] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.840] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.850] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.850] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.850] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.850] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.859] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.859] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.859] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.859] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.866] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.866] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.867] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.867] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.870] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.870] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.871] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.871] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.874] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.874] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.874] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.874] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.878] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.879] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.879] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.879] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.887] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.887] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.887] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.887] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.895] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.895] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.896] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.896] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.900] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.900] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.900] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.900] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.910] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.910] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.910] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.910] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.914] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.914] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.914] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.914] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.918] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.918] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.918] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.918] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.922] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.922] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.922] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.922] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.926] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.926] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.926] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.926] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.930] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.930] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.931] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.931] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.934] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.935] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.935] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.939] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.939] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.939] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.943] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.943] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.943] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.943] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.947] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.947] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.947] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.947] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.951] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.951] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.951] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.951] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.955] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.955] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.955] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.955] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.959] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.959] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.959] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.959] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.963] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.964] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.964] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.964] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.970] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.970] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.971] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.971] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.974] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.974] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.974] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.974] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.978] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.979] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.979] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.979] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.982] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.983] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.983] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.983] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.987] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.987] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.987] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.987] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0162.991] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0162.991] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0162.991] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0162.991] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.000] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.000] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.000] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.000] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.005] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.005] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.005] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.005] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.009] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.009] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.010] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.010] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.013] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.014] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.014] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.014] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.017] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.017] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.018] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.018] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.024] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.024] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.024] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.024] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.028] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.028] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.028] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.032] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.032] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.032] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.032] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.038] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.038] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.039] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.039] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.043] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.043] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.043] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.043] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.047] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.047] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.047] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.047] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.051] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.051] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.051] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.051] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.056] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.056] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.056] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.056] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.060] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.060] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.060] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.060] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.064] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.064] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.064] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.064] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.068] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.068] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.068] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.068] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.072] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.072] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.072] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.072] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.076] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.076] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.076] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.076] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.080] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.080] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.081] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.081] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.085] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.085] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.085] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.085] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.089] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.089] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.089] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.089] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.093] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.093] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.093] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.093] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.100] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.101] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.101] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.101] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.105] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.105] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.105] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.105] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.109] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.109] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.109] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.109] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.114] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.114] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.114] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.114] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.118] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.118] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.118] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.118] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.122] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.122] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.122] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.122] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.126] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.126] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.126] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.126] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.130] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.130] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.130] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.131] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.134] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.135] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.135] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.135] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.139] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.139] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.139] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.139] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.143] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.143] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.143] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.143] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.147] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.147] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.147] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.147] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.151] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.151] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.151] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.152] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.156] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.156] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.156] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.156] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.160] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.160] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.160] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.160] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.170] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.171] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.171] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.171] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.174] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.185] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.185] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.185] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.189] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.189] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.189] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.189] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.199] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.199] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.199] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.199] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.204] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.204] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.204] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.205] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.208] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.208] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.209] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.209] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.213] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.213] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.213] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.213] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.217] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.217] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.218] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.218] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.222] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.222] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.222] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.222] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.226] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.226] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.226] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.226] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.233] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.233] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.233] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.233] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.237] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.237] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.237] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.242] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.242] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.242] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.242] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.246] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.246] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.246] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.246] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.250] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.251] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.251] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.251] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.255] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.255] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.255] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.255] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.259] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.259] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.259] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.259] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.263] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.263] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.264] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.264] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.268] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.268] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.268] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.268] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.272] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.272] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.273] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.273] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.277] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.277] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.277] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.281] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.281] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.281] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.281] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.285] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.285] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.285] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.285] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.289] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.289] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.289] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.289] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.296] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.296] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.296] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.296] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.301] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.301] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.301] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.301] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.305] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.305] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.305] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.305] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.309] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.310] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.310] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.310] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.314] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.314] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.314] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.314] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.318] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.318] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.318] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.318] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.322] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.322] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.322] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.322] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.327] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.327] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.327] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.327] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.331] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.332] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.332] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.332] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.335] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.335] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.336] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.336] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.339] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.339] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.340] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.343] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.344] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.344] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.348] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.348] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.348] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.352] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.353] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.353] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.353] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.356] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.357] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.357] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.357] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.363] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.364] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.364] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.364] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.367] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.368] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.368] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.368] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.372] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.372] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.372] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.376] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.376] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.376] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.376] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.380] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.380] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.380] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.380] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.384] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.384] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.384] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.384] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.388] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.388] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.388] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.388] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.392] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.392] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.392] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.392] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.396] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.397] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.397] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.397] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.400] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.401] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.401] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.401] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.404] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.405] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.405] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.405] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.409] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.409] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.409] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.409] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.413] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.413] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.413] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.413] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.417] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.417] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.417] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.417] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.421] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.421] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.421] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.421] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.428] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.428] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.428] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.428] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.431] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.432] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.432] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.432] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.435] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.436] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.436] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.436] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.440] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.440] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.440] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.440] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.444] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.444] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.444] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.444] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.448] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.448] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.448] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.448] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.452] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.452] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.452] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.452] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.456] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.456] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.456] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.456] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.460] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.460] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.460] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.460] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.464] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.464] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.464] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.464] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.468] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.468] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.468] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.468] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.472] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.472] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.472] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.472] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.476] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.476] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.476] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.476] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.480] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.480] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.480] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.480] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.484] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.485] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.485] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.485] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.491] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.491] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.491] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.491] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.495] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.495] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.495] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.498] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.499] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.499] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.499] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.502] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.502] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.502] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.503] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.506] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.506] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.506] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.506] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.510] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.510] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.510] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.510] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.514] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.514] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.514] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.514] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.517] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.517] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.518] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.518] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.521] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.521] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.521] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.521] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.525] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.525] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.525] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.525] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.529] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.529] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.529] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.529] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.533] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.533] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.533] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.533] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.537] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.537] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.537] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.537] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.541] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.541] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.541] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.541] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.545] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.545] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.545] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.545] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.548] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.548] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.548] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.548] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.552] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.552] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.552] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.552] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.558] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.558] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.558] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.558] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.570] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.570] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.570] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.571] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.578] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.578] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.578] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.578] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.593] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.593] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.593] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.593] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.615] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.615] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.615] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.615] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.622] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.622] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.622] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.622] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.626] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.626] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.626] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.626] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.656] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.656] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.656] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.656] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.660] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.660] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.660] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.660] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.693] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.694] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.694] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.694] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.713] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.714] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.714] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.714] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.726] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.726] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.726] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.726] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.731] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.731] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.731] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.731] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.735] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.735] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.735] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.735] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.739] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.740] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.740] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.740] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.744] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.744] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.744] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.744] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.748] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.748] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.748] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.748] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.754] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.755] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.755] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.755] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.758] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.759] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.759] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.759] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.762] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.763] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.763] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.763] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.766] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.766] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.766] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.766] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.770] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.770] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.770] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.770] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.774] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.774] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.774] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.774] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.784] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.785] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.785] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.785] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.789] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.790] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.790] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.790] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.810] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.810] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.810] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.810] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.825] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.825] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.825] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.825] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.858] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.858] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.858] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.858] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.862] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.862] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.862] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.862] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.866] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.866] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.866] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.866] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.870] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.870] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.870] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.874] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.874] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.874] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.874] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.883] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.883] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.883] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.883] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.887] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.887] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.887] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.887] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.891] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.891] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.891] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.891] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.895] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.895] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.895] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.895] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.899] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.899] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.899] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.899] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.903] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.903] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.904] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.904] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.908] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.908] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.908] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.908] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.912] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.912] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.912] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.912] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.916] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.916] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.916] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.916] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.920] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.920] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.920] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.920] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.924] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.924] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.924] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.924] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.928] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.928] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.928] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.928] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.932] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.933] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.933] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.933] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.947] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.947] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.947] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.947] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.952] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.952] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.952] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.952] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.956] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.956] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.956] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.956] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.960] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.960] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.960] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.960] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.963] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.964] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.964] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.964] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.967] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.968] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.968] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.968] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.971] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.971] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.971] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.971] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.975] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.976] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.976] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.976] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.979] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.980] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.980] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.980] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.983] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.983] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.983] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.983] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.987] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.988] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.988] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.988] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.991] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.991] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.991] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.991] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.995] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.995] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.995] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.995] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0163.999] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0163.999] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0163.999] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0163.999] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.003] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.003] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.003] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.003] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.007] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.007] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.007] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.007] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.013] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.013] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.013] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.013] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.017] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.017] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.017] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.017] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.021] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.021] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.021] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.021] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.025] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.025] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.025] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.025] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.029] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.029] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.029] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.029] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.033] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.033] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.033] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.033] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.037] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.037] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.037] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.037] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.041] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.041] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.041] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.041] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.044] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.045] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.045] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.045] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.048] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.048] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.049] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.049] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.052] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.052] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.052] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.052] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.056] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.056] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.056] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.056] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.060] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.060] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.060] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.060] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.064] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.064] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.064] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.064] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.068] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.068] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.068] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.068] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.072] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.072] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.072] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.072] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.079] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.079] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.079] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.079] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.084] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.085] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.085] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.085] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.088] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.088] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.088] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.088] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.092] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.092] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.092] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.092] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.096] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.096] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.096] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.096] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.100] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.100] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.100] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.100] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.104] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.104] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.104] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.104] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.108] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.108] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.108] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.108] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.112] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.112] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.112] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.116] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.116] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.116] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.116] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.120] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.120] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.120] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.120] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.124] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.124] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.124] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.124] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.127] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.128] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.128] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.128] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.134] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.134] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.134] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.134] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.138] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.138] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.138] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.138] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.144] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.144] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.145] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.145] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.148] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.149] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.149] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.149] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.152] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.152] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.152] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.152] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.156] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.156] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.156] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.156] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.160] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.160] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.160] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.160] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.164] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.164] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.164] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.164] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.195] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.196] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.196] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.196] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.199] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.200] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.200] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.200] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.203] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.203] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.203] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.203] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.209] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.209] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.209] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.209] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.213] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.213] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.213] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.213] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.217] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.217] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.217] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.217] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.221] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.221] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.221] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.221] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.225] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.225] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.225] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.225] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.229] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.229] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.229] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.229] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.233] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.233] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.233] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.233] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.237] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.237] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.237] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.241] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.242] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.242] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.242] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.249] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.249] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.249] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.253] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.253] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.253] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.253] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.261] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.261] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.261] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.261] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.265] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.265] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.265] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.265] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.269] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.269] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.269] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.269] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.275] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.276] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.276] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.276] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.279] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.279] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.279] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.279] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.283] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.283] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.283] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.283] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.286] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.286] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.287] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.287] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.290] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.290] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.290] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.290] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.293] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.294] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.294] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.294] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.300] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.301] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.301] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.301] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.304] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.304] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.304] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.304] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.308] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.308] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.308] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.308] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.312] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.312] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.312] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.312] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.317] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.317] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.317] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.317] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.321] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.321] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.321] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.321] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.324] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.324] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.325] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.325] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.328] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.328] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.328] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.328] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.332] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.332] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.332] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.332] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.335] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.335] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.335] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.335] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.341] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.342] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.342] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.342] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.345] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.345] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.345] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.345] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.349] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.349] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.349] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.349] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.352] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.352] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.353] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.353] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.356] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.356] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.356] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.356] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.360] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.360] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.360] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.360] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.363] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.364] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.364] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.364] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.367] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.367] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.367] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.367] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.371] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.372] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.372] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.375] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.375] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.376] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.376] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.380] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.380] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.380] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.380] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.389] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.389] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.389] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.389] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.399] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.399] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.399] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.399] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.406] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.406] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.406] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.406] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.410] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.410] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.410] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.410] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.414] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.414] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.414] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.414] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.419] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.419] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.419] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.419] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.423] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.423] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.423] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.423] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.427] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.427] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.427] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.427] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.431] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.431] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.431] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.431] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.435] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.435] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.435] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.435] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.439] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.439] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.439] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.439] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.456] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.456] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.456] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.456] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.460] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.460] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.460] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.460] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.464] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.464] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.464] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.464] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.471] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.471] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.471] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.471] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.480] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.480] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.480] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.480] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.491] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.491] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.491] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.491] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.495] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.495] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.496] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.496] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.500] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.500] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.500] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.500] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.504] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.504] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.504] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.504] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.513] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.513] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.513] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.513] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.524] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.524] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.524] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.524] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.536] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.536] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.536] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.536] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.545] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.545] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.545] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.545] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.549] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.549] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.549] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.549] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.554] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.554] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.554] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.554] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.558] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.558] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.559] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.559] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.562] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.563] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.563] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.563] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.668] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.668] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.668] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.668] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.682] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.682] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.682] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.682] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.686] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.686] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.686] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.686] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.694] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.694] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.694] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.694] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.700] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.700] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.700] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.700] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.703] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.704] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.704] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.704] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.707] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.708] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.708] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.708] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.711] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.711] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.711] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.711] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.715] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.715] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.715] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.715] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.718] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.719] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.719] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.719] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.722] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.722] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.722] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.722] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.729] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.729] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.729] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.729] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.732] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.733] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.733] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.733] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.736] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.736] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.737] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.737] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.740] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.740] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.740] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.740] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.744] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.744] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.744] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.744] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.748] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.748] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.748] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.748] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.752] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.752] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.752] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.752] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.755] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.756] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.756] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.756] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.759] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.759] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.759] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.759] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.763] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.763] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.763] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.763] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.767] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.767] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.767] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.767] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.771] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.771] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.771] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.775] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.775] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.775] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.775] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.786] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.786] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.786] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.786] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.789] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.789] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.790] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.790] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.795] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.796] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.796] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.796] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.799] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.799] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.800] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.800] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.803] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.803] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.804] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.804] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.807] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.807] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.807] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.807] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.811] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.811] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.811] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.811] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.815] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.815] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.815] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.815] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.818] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.819] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.819] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.819] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.822] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.822] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.822] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.822] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.826] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.826] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.826] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.826] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.830] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.830] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.830] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.830] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.834] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.834] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.834] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.834] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.840] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.840] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.840] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.840] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.844] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.844] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.844] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.844] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.848] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.848] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.848] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.852] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.852] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.852] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.852] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.856] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.856] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.856] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.856] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.862] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.862] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.862] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.862] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.866] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.866] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.866] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.866] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.870] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.870] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.870] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.874] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.874] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.874] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.874] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.877] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.878] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.878] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.878] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.886] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.886] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.886] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.886] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.895] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.896] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.896] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.896] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.904] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.904] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.904] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.904] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.913] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.913] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.914] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.914] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.921] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.921] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.921] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.933] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.933] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.933] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.933] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.939] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.939] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.940] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.940] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.944] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.944] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.944] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.944] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.948] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.948] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.948] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.948] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.952] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.952] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.953] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.953] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.957] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.957] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.957] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.957] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.964] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.964] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.964] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.964] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.969] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.969] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.969] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.969] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.973] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.974] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.974] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.974] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.978] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.978] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.978] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.978] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.982] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.982] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.982] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.982] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.986] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.986] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.986] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.986] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.992] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.992] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.993] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.993] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0164.998] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0164.998] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0164.998] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0164.998] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.003] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.003] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.003] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.003] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.008] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.008] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.008] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.008] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.013] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.013] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.013] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.013] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.018] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.018] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.018] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.018] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.023] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.023] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.023] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.023] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.027] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.027] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.028] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.032] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.032] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.032] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.032] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.036] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.037] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.037] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.037] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.041] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.041] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.041] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.041] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.045] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.045] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.045] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.045] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.050] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.050] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.050] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.050] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.057] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.057] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.057] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.057] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.061] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.061] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.061] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.061] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.065] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.066] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.066] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.066] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.070] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.070] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.070] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.070] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.074] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.074] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.074] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.074] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.078] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.078] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.078] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.078] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.082] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.082] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.082] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.082] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.086] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.087] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.087] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.087] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.091] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.091] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.091] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.091] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.095] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.095] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.095] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.095] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.099] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.100] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.100] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.100] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.104] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.104] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.104] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.104] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.107] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.108] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.108] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.108] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.112] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.112] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.112] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.115] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.116] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.116] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.116] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.122] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.122] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.122] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.122] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.126] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.126] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.127] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.127] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.131] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.131] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.131] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.131] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.135] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.135] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.135] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.135] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.139] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.139] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.139] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.139] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.143] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.143] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.143] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.143] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.147] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.147] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.148] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.148] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.152] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.152] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.152] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.152] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.156] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.157] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.157] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.157] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.161] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.161] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.161] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.161] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.165] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.165] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.165] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.165] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.169] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.170] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.170] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.170] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.182] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.182] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.182] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.182] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.189] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.189] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.189] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.189] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.193] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.193] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.193] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.193] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.197] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.198] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.198] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.198] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.202] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.202] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.202] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.202] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.207] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.207] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.207] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.207] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.211] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.211] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.211] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.211] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.215] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.215] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.215] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.215] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.220] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.220] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.220] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.220] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.224] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.225] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.225] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.225] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.229] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.229] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.229] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.229] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.233] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.233] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.233] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.233] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.238] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.238] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.238] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.238] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.242] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.243] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.243] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.243] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.247] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.247] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.247] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.253] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.253] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.253] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.253] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.257] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.257] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.257] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.258] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.262] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.262] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.262] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.262] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.266] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.266] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.266] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.266] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.270] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.271] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.271] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.271] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.275] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.275] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.275] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.275] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.279] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.279] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.279] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.279] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.283] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.283] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.283] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.283] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.288] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.288] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.288] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.288] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.292] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.292] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.292] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.292] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.296] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.296] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.296] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.296] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.300] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.300] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.300] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.300] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.304] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.305] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.305] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.305] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.308] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.309] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.309] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.309] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.316] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.316] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.316] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.316] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.320] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.320] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.320] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.320] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.325] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.325] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.325] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.325] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.329] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.330] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.330] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.330] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.334] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.334] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.334] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.334] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.338] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.338] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.338] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.338] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.342] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.342] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.342] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.342] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.346] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.346] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.346] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.346] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.350] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.350] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.350] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.350] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.354] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.354] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.355] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.355] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.358] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.358] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.358] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.359] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.362] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.363] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.363] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.363] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.367] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.367] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.367] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.367] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.371] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.371] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.371] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.371] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.375] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.376] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.376] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.376] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.385] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.385] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.385] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.386] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.389] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.390] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.390] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.390] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.393] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.393] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.393] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.393] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.401] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.401] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.401] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.401] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.409] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.409] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.409] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.409] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.413] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.413] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.413] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.413] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.417] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.417] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.417] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.417] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.421] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.421] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.421] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.421] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.431] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.431] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.431] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.431] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.439] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.439] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.439] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.439] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.445] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.445] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.446] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.446] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.450] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.450] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.450] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.450] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.454] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.454] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.454] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.454] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.458] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.458] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.458] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.462] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.462] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.462] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.472] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.472] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.472] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.472] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.480] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.480] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.480] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.480] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.484] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.484] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.485] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.485] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.492] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.492] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.493] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.493] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.502] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.502] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.502] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.502] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.513] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.513] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.513] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.513] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.523] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.523] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.523] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.523] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.533] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.533] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.533] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.533] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.537] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.537] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.537] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.537] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.541] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.541] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.542] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.542] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.545] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.546] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.546] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.546] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.550] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.550] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.550] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.550] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.558] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.558] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.558] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.558] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.563] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.563] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.563] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.563] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.575] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.575] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.575] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.575] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.584] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.584] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.584] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.584] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.593] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.593] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.593] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.593] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.603] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.603] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.604] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.604] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.615] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.616] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.616] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.616] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.619] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.620] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.620] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.620] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.628] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.629] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.629] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.629] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.636] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.636] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.636] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.636] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.642] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.643] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.643] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.643] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.647] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.647] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.647] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.647] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.651] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.651] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.651] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.651] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.655] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.655] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.655] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.655] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.659] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.660] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.660] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.660] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.663] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.664] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.664] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.664] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.668] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.668] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.668] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.668] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.672] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.672] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.672] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.672] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.676] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.676] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.676] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.676] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.680] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.680] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.680] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.681] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.684] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.685] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.685] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.685] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.689] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.689] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.689] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.689] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.693] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.693] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.693] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.693] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.697] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.698] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.698] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.698] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.701] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.702] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.702] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.702] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.708] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.708] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.708] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.708] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.712] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.712] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.712] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.712] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.716] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.716] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.716] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.716] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.719] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.720] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.720] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.720] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.723] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.723] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.724] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.724] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.727] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.728] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.728] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.728] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.732] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.732] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.732] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.732] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.736] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.736] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.736] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.736] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.740] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.741] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.741] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.741] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.745] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.745] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.745] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.745] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.749] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.749] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.749] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.749] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.753] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.753] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.753] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.753] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.757] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.757] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.757] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.757] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.761] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.761] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.761] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.761] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.765] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.765] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.766] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.766] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.772] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.772] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.772] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.772] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.776] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.776] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.777] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.777] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.787] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.787] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.787] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.787] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.791] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.791] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.791] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.792] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.796] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.796] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.796] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.796] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.800] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.800] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.800] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.800] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.803] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.804] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.804] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.804] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.807] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.807] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.807] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.807] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.811] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.812] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.812] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.812] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.815] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.816] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.816] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.816] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.820] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.820] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.820] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.820] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.824] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.824] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.824] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.824] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.828] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.828] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.828] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.828] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.832] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.833] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.833] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.833] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.843] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.843] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.844] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.844] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.848] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.848] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.848] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.852] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.852] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.852] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.852] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.857] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.857] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.857] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.857] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.861] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.861] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.861] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.861] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.866] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.866] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.866] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.866] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.870] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.870] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.870] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.874] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.874] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.875] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.875] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.879] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.879] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.879] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.879] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.883] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.884] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.884] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.884] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.889] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.889] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.889] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.889] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.894] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.894] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.894] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.894] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.900] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.900] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.901] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.901] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.905] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.905] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.905] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.905] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.909] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.909] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.910] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.910] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.919] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.919] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.919] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.920] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.929] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.929] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.929] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.938] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.938] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.938] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.942] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.943] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.943] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.943] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.947] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.947] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.947] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.947] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.951] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.951] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.951] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.951] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.955] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.955] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.956] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.956] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.959] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.960] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.960] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.960] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.966] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.966] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.966] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.966] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.970] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.970] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.970] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.970] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.974] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.974] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.974] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.974] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.978] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.979] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.979] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.979] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.986] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.986] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.987] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.987] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.991] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.991] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.991] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.991] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.995] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.995] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.995] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.995] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0165.999] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0165.999] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0165.999] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0165.999] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.003] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.003] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.003] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.003] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.011] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.011] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.011] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.011] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.015] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.015] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.015] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.015] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.019] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.019] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.019] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.020] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.023] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.023] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.023] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.023] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.027] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.027] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.028] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.034] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.034] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.034] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.034] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.038] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.038] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.038] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.038] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.042] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.042] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.042] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.042] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.046] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.046] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.046] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.046] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.050] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.050] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.050] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.050] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.059] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.059] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.059] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.059] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.068] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.068] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.068] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.068] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.078] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.078] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.078] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.078] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.087] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.087] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.087] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.087] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.097] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.098] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.098] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.098] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.102] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.102] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.102] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.105] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.106] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.106] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.110] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.110] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.110] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.110] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.114] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.114] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.114] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.114] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.122] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.122] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.122] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.122] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.126] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.126] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.126] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.126] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.135] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.135] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.136] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.136] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.144] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.145] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.145] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.145] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.157] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.157] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.157] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.157] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.169] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.170] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.182] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.182] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.192] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.192] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.192] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.192] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.201] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.201] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.201] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.201] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.212] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.212] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.212] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.212] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.220] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.221] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.221] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.221] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.227] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.227] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.228] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.228] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.235] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.236] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.236] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.236] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.242] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.242] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.243] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.243] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.247] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.247] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.247] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.251] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.251] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.251] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.251] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.255] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.255] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.255] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.255] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.259] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.259] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.259] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.259] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.264] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.264] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.264] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.264] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.268] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.268] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.268] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.268] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.272] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.272] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.272] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.272] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.276] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.276] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.276] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.276] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.281] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.281] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.281] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.281] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.286] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.286] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.286] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.286] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.293] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.293] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.293] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.293] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.297] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.297] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.297] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.297] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.301] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.301] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.302] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.302] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.306] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.306] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.306] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.306] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.310] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.310] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.310] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.310] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.315] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.315] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.315] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.315] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.319] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.319] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.319] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.319] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.323] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.323] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.324] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.324] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.328] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.328] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.328] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.328] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.332] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.332] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.332] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.332] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.336] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.336] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.336] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.336] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.340] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.340] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.340] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.345] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.345] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.345] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.345] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.348] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.349] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.349] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.349] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.353] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.353] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.353] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.353] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.359] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.359] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.359] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.359] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.363] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.363] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.363] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.363] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.367] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.367] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.367] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.367] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.371] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.372] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.372] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.376] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.376] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.376] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.376] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.380] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.380] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.380] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.380] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.384] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.384] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.384] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.384] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.389] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.389] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.389] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.389] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.393] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.393] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.393] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.393] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.397] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.397] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.397] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.397] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.401] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.401] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.401] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.401] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.405] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.405] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.406] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.406] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.410] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.410] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.410] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.410] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.413] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.414] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.414] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.414] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.418] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.418] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.418] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.418] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.425] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.425] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.426] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.426] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.430] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.430] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.430] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.430] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.434] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.434] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.434] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.434] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.438] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.438] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.439] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.439] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.443] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.443] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.443] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.443] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.447] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.447] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.447] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.447] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.452] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.452] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.452] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.452] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.456] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.457] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.457] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.457] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.460] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.460] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.460] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.460] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.464] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.464] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.465] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.465] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.469] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.469] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.469] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.469] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.473] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.473] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.473] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.474] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.474] GetTickCount () returned 0x1161314 [0166.474] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.475] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45a00000 [0166.475] GetTickCount () returned 0x1161314 [0166.475] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.477] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45a00000 [0166.477] GetTickCount () returned 0x1161314 [0166.477] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.478] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.478] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.478] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.478] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.478] GetTickCount () returned 0x1161314 [0166.478] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.480] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45a80000 [0166.480] GetTickCount () returned 0x1161314 [0166.480] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.481] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45a80000 [0166.481] GetTickCount () returned 0x1161314 [0166.481] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.483] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.483] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.483] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.483] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.483] GetTickCount () returned 0x1161324 [0166.483] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.487] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45b00000 [0166.487] GetTickCount () returned 0x1161324 [0166.487] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.488] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45b00000 [0166.488] GetTickCount () returned 0x1161324 [0166.488] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.489] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.489] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.490] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.490] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.490] GetTickCount () returned 0x1161324 [0166.490] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.491] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45b80000 [0166.492] GetTickCount () returned 0x1161324 [0166.492] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.493] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45b80000 [0166.493] GetTickCount () returned 0x1161324 [0166.493] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.494] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.494] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.494] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.494] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.494] GetTickCount () returned 0x1161324 [0166.494] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.496] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45c00000 [0166.496] GetTickCount () returned 0x1161324 [0166.496] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.497] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45c00000 [0166.497] GetTickCount () returned 0x1161324 [0166.497] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.498] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.499] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.499] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.499] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.499] GetTickCount () returned 0x1161333 [0166.499] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.501] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45c80000 [0166.501] GetTickCount () returned 0x1161333 [0166.501] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.502] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45c80000 [0166.502] GetTickCount () returned 0x1161333 [0166.502] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.503] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.503] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.503] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.504] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.504] GetTickCount () returned 0x1161333 [0166.504] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.505] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45d00000 [0166.505] GetTickCount () returned 0x1161333 [0166.505] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.506] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45d00000 [0166.506] GetTickCount () returned 0x1161333 [0166.506] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.507] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.508] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.508] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.508] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.508] GetTickCount () returned 0x1161333 [0166.508] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.510] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45d80000 [0166.510] GetTickCount () returned 0x1161333 [0166.510] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.511] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45d80000 [0166.511] GetTickCount () returned 0x1161333 [0166.511] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.512] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.512] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.512] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.512] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.513] GetTickCount () returned 0x1161333 [0166.513] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.514] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45e00000 [0166.514] GetTickCount () returned 0x1161343 [0166.514] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.515] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45e00000 [0166.515] GetTickCount () returned 0x1161343 [0166.515] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.516] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.517] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.517] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.517] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.517] GetTickCount () returned 0x1161343 [0166.517] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.518] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45e80000 [0166.518] GetTickCount () returned 0x1161343 [0166.518] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.520] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45e80000 [0166.520] GetTickCount () returned 0x1161343 [0166.520] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.521] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.521] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.521] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.521] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.521] GetTickCount () returned 0x1161343 [0166.521] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.522] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45f00000 [0166.522] GetTickCount () returned 0x1161343 [0166.522] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.524] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45f00000 [0166.524] GetTickCount () returned 0x1161343 [0166.524] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.525] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.525] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.525] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.525] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.525] GetTickCount () returned 0x1161343 [0166.525] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.527] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45f80000 [0166.527] GetTickCount () returned 0x1161343 [0166.527] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.528] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x45f80000 [0166.528] GetTickCount () returned 0x1161343 [0166.528] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.530] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.530] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.530] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.530] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.530] GetTickCount () returned 0x1161353 [0166.530] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.532] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46000000 [0166.532] GetTickCount () returned 0x1161353 [0166.532] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.533] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46000000 [0166.533] GetTickCount () returned 0x1161353 [0166.533] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.534] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.534] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.534] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.534] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.534] GetTickCount () returned 0x1161353 [0166.534] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.536] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46080000 [0166.536] GetTickCount () returned 0x1161353 [0166.536] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.537] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46080000 [0166.537] GetTickCount () returned 0x1161353 [0166.537] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.538] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.539] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.539] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.539] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.539] GetTickCount () returned 0x1161353 [0166.539] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.540] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46100000 [0166.540] GetTickCount () returned 0x1161353 [0166.540] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.542] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46100000 [0166.542] GetTickCount () returned 0x1161353 [0166.542] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.543] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.543] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.543] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.543] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.543] GetTickCount () returned 0x1161353 [0166.543] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.549] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46180000 [0166.549] GetTickCount () returned 0x1161362 [0166.549] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.551] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46180000 [0166.551] GetTickCount () returned 0x1161362 [0166.551] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.552] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.552] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.552] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.552] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.552] GetTickCount () returned 0x1161362 [0166.552] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.554] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46200000 [0166.554] GetTickCount () returned 0x1161362 [0166.554] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.555] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46200000 [0166.555] GetTickCount () returned 0x1161362 [0166.555] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.556] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.556] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.557] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.557] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.557] GetTickCount () returned 0x1161362 [0166.557] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.558] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46280000 [0166.559] GetTickCount () returned 0x1161362 [0166.559] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.560] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46280000 [0166.560] GetTickCount () returned 0x1161372 [0166.560] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.561] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.561] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.561] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.561] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.561] GetTickCount () returned 0x1161372 [0166.561] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.563] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46300000 [0166.563] GetTickCount () returned 0x1161372 [0166.563] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.564] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46300000 [0166.564] GetTickCount () returned 0x1161372 [0166.564] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.565] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.566] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.566] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.566] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.566] GetTickCount () returned 0x1161372 [0166.566] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.568] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46380000 [0166.568] GetTickCount () returned 0x1161372 [0166.568] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.569] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46380000 [0166.569] GetTickCount () returned 0x1161372 [0166.569] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.570] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.570] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.571] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.571] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.571] GetTickCount () returned 0x1161372 [0166.571] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.572] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46400000 [0166.572] GetTickCount () returned 0x1161372 [0166.572] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.573] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46400000 [0166.573] GetTickCount () returned 0x1161372 [0166.573] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.574] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.575] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.575] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.575] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.575] GetTickCount () returned 0x1161372 [0166.575] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.582] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46480000 [0166.582] GetTickCount () returned 0x1161381 [0166.582] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.584] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46480000 [0166.584] GetTickCount () returned 0x1161381 [0166.584] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.585] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.585] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.585] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.585] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.585] GetTickCount () returned 0x1161381 [0166.585] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.633] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46500000 [0166.633] GetTickCount () returned 0x11613b0 [0166.633] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.634] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46500000 [0166.634] GetTickCount () returned 0x11613b0 [0166.634] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.635] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.635] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.635] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.635] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.636] GetTickCount () returned 0x11613b0 [0166.636] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.643] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46580000 [0166.643] GetTickCount () returned 0x11613c0 [0166.643] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.652] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46580000 [0166.652] GetTickCount () returned 0x11613c0 [0166.652] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.656] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.659] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.659] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.659] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.659] GetTickCount () returned 0x11613cf [0166.659] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.668] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46600000 [0166.668] GetTickCount () returned 0x11613cf [0166.669] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.672] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46600000 [0166.672] GetTickCount () returned 0x11613df [0166.672] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.677] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.677] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.677] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.677] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.677] GetTickCount () returned 0x11613df [0166.677] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.683] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46680000 [0166.683] GetTickCount () returned 0x11613df [0166.683] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.692] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46680000 [0166.692] GetTickCount () returned 0x11613ef [0166.692] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.693] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.694] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.694] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.694] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.694] GetTickCount () returned 0x11613ef [0166.694] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.695] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46700000 [0166.695] GetTickCount () returned 0x11613ef [0166.695] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.697] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46700000 [0166.697] GetTickCount () returned 0x11613ef [0166.697] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.698] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.698] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.698] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.698] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.698] GetTickCount () returned 0x11613ef [0166.698] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.700] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46780000 [0166.700] GetTickCount () returned 0x11613fe [0166.700] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.702] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46780000 [0166.702] GetTickCount () returned 0x11613fe [0166.702] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.704] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.704] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.704] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.704] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.704] GetTickCount () returned 0x11613fe [0166.704] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.705] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46800000 [0166.705] GetTickCount () returned 0x11613fe [0166.705] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.707] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46800000 [0166.707] GetTickCount () returned 0x11613fe [0166.707] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.708] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.708] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.708] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.708] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.709] GetTickCount () returned 0x11613fe [0166.709] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.710] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46880000 [0166.710] GetTickCount () returned 0x11613fe [0166.711] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.712] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46880000 [0166.712] GetTickCount () returned 0x11613fe [0166.712] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.713] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.713] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.713] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.713] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.713] GetTickCount () returned 0x11613fe [0166.713] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.714] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46900000 [0166.715] GetTickCount () returned 0x11613fe [0166.715] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.716] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46900000 [0166.716] GetTickCount () returned 0x116140e [0166.716] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.717] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.717] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.717] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.717] GetTickCount () returned 0x116140e [0166.717] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.720] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46980000 [0166.720] GetTickCount () returned 0x116140e [0166.720] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.721] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46980000 [0166.721] GetTickCount () returned 0x116140e [0166.721] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.722] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.722] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.722] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.723] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.723] GetTickCount () returned 0x116140e [0166.723] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.724] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46a00000 [0166.724] GetTickCount () returned 0x116140e [0166.724] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.725] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46a00000 [0166.725] GetTickCount () returned 0x116140e [0166.725] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.726] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.727] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.727] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.727] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.727] GetTickCount () returned 0x116140e [0166.727] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.728] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46a80000 [0166.729] GetTickCount () returned 0x116140e [0166.729] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.730] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46a80000 [0166.730] GetTickCount () returned 0x116140e [0166.730] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.731] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.731] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.731] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.731] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.732] GetTickCount () returned 0x116141d [0166.732] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.733] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46b00000 [0166.733] GetTickCount () returned 0x116141d [0166.733] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.735] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46b00000 [0166.735] GetTickCount () returned 0x116141d [0166.735] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.737] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.737] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.737] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.737] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.737] GetTickCount () returned 0x116141d [0166.737] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.739] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46b80000 [0166.739] GetTickCount () returned 0x116141d [0166.739] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.740] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46b80000 [0166.740] GetTickCount () returned 0x116141d [0166.740] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.741] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.742] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.742] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.742] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.742] GetTickCount () returned 0x116141d [0166.742] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.743] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46c00000 [0166.743] GetTickCount () returned 0x116141d [0166.743] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.744] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46c00000 [0166.744] GetTickCount () returned 0x116141d [0166.744] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.745] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.745] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.745] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.746] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.746] GetTickCount () returned 0x116141d [0166.746] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.747] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46c80000 [0166.747] GetTickCount () returned 0x116141d [0166.747] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.748] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46c80000 [0166.748] GetTickCount () returned 0x116142d [0166.748] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.749] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.749] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.749] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.749] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.749] GetTickCount () returned 0x116142d [0166.749] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.751] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46d00000 [0166.751] GetTickCount () returned 0x116142d [0166.751] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.752] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46d00000 [0166.752] GetTickCount () returned 0x116142d [0166.752] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.753] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.753] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.753] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.753] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.753] GetTickCount () returned 0x116142d [0166.753] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.754] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46d80000 [0166.755] GetTickCount () returned 0x116142d [0166.755] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.756] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46d80000 [0166.756] GetTickCount () returned 0x116142d [0166.756] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.757] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.757] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.757] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.757] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.757] GetTickCount () returned 0x116142d [0166.757] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.759] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46e00000 [0166.759] GetTickCount () returned 0x116142d [0166.759] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.760] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46e00000 [0166.760] GetTickCount () returned 0x116142d [0166.760] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.761] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.761] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.762] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.762] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.762] GetTickCount () returned 0x116142d [0166.762] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.763] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46e80000 [0166.763] GetTickCount () returned 0x116143d [0166.763] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.764] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46e80000 [0166.764] GetTickCount () returned 0x116143d [0166.764] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.765] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.766] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.766] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.766] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.766] GetTickCount () returned 0x116143d [0166.766] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.767] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46f00000 [0166.767] GetTickCount () returned 0x116143d [0166.767] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.768] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46f00000 [0166.768] GetTickCount () returned 0x116143d [0166.768] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.769] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.769] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.770] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.770] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.770] GetTickCount () returned 0x116143d [0166.770] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.771] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46f80000 [0166.771] GetTickCount () returned 0x116143d [0166.771] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.773] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x46f80000 [0166.773] GetTickCount () returned 0x116143d [0166.773] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.774] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.774] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.774] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.775] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.775] GetTickCount () returned 0x116143d [0166.775] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.776] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47000000 [0166.776] GetTickCount () returned 0x116143d [0166.776] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.777] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47000000 [0166.777] GetTickCount () returned 0x116143d [0166.777] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.785] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.785] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.785] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.785] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.785] GetTickCount () returned 0x116144c [0166.785] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.786] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47080000 [0166.787] GetTickCount () returned 0x116144c [0166.787] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.788] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47080000 [0166.788] GetTickCount () returned 0x116144c [0166.788] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.789] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.789] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.789] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.789] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.789] GetTickCount () returned 0x116144c [0166.789] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.790] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47100000 [0166.790] GetTickCount () returned 0x116144c [0166.790] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.791] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47100000 [0166.792] GetTickCount () returned 0x116144c [0166.792] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.793] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.793] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.793] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.793] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.793] GetTickCount () returned 0x116144c [0166.793] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.794] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47180000 [0166.795] GetTickCount () returned 0x116145c [0166.795] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.796] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47180000 [0166.796] GetTickCount () returned 0x116145c [0166.796] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.797] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.797] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.797] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.797] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.797] GetTickCount () returned 0x116145c [0166.797] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.798] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47200000 [0166.798] GetTickCount () returned 0x116145c [0166.798] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.799] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47200000 [0166.799] GetTickCount () returned 0x116145c [0166.799] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.800] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.801] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.801] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.801] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.801] GetTickCount () returned 0x116145c [0166.801] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.803] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47280000 [0166.803] GetTickCount () returned 0x116145c [0166.803] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.804] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47280000 [0166.804] GetTickCount () returned 0x116145c [0166.804] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.805] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.805] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.805] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.805] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.805] GetTickCount () returned 0x116145c [0166.805] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.806] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47300000 [0166.806] GetTickCount () returned 0x116145c [0166.806] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.808] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47300000 [0166.808] GetTickCount () returned 0x116145c [0166.808] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.809] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.809] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.809] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.809] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.809] GetTickCount () returned 0x116145c [0166.809] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.811] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47380000 [0166.811] GetTickCount () returned 0x116146b [0166.811] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.812] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47380000 [0166.812] GetTickCount () returned 0x116146b [0166.812] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.813] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.813] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.813] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.813] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.813] GetTickCount () returned 0x116146b [0166.814] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.815] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47400000 [0166.815] GetTickCount () returned 0x116146b [0166.815] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.816] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47400000 [0166.816] GetTickCount () returned 0x116146b [0166.816] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.817] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.817] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.817] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.817] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.817] GetTickCount () returned 0x116146b [0166.817] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.819] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47480000 [0166.819] GetTickCount () returned 0x116146b [0166.819] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.820] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47480000 [0166.820] GetTickCount () returned 0x116146b [0166.820] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.821] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.821] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.821] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.821] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.821] GetTickCount () returned 0x116146b [0166.821] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.822] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47500000 [0166.823] GetTickCount () returned 0x116146b [0166.823] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.825] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47500000 [0166.825] GetTickCount () returned 0x116146b [0166.825] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.826] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.826] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.826] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.826] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.826] GetTickCount () returned 0x116147b [0166.826] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.827] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47580000 [0166.828] GetTickCount () returned 0x116147b [0166.828] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.829] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47580000 [0166.829] GetTickCount () returned 0x116147b [0166.829] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.830] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.830] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.830] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.830] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.830] GetTickCount () returned 0x116147b [0166.830] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.831] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47600000 [0166.831] GetTickCount () returned 0x116147b [0166.831] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.833] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47600000 [0166.833] GetTickCount () returned 0x116147b [0166.833] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.834] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.834] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.834] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.834] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.834] GetTickCount () returned 0x116147b [0166.834] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.835] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47680000 [0166.835] GetTickCount () returned 0x116147b [0166.835] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.837] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47680000 [0166.837] GetTickCount () returned 0x116147b [0166.837] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.838] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.838] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.838] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.838] GetTickCount () returned 0x116147b [0166.838] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.839] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47700000 [0166.839] GetTickCount () returned 0x116147b [0166.839] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.840] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47700000 [0166.840] GetTickCount () returned 0x116147b [0166.840] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.841] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.842] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.842] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.842] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.842] GetTickCount () returned 0x116148b [0166.842] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.843] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47780000 [0166.843] GetTickCount () returned 0x116148b [0166.843] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.844] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47780000 [0166.844] GetTickCount () returned 0x116148b [0166.844] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.845] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.846] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.846] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.846] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.846] GetTickCount () returned 0x116148b [0166.846] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.847] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47800000 [0166.847] GetTickCount () returned 0x116148b [0166.847] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.849] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47800000 [0166.849] GetTickCount () returned 0x116148b [0166.849] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.850] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.850] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.851] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.851] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.851] GetTickCount () returned 0x116148b [0166.851] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.852] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47880000 [0166.852] GetTickCount () returned 0x116148b [0166.852] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.853] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47880000 [0166.853] GetTickCount () returned 0x116148b [0166.853] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.854] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.855] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.855] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.855] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.855] GetTickCount () returned 0x116148b [0166.855] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.856] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47900000 [0166.856] GetTickCount () returned 0x116149a [0166.856] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.857] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47900000 [0166.857] GetTickCount () returned 0x116149a [0166.857] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.858] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.859] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.859] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.859] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.859] GetTickCount () returned 0x116149a [0166.859] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.860] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47980000 [0166.860] GetTickCount () returned 0x116149a [0166.860] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.861] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47980000 [0166.861] GetTickCount () returned 0x116149a [0166.861] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.862] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.862] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.862] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.862] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.863] GetTickCount () returned 0x116149a [0166.863] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.864] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47a00000 [0166.864] GetTickCount () returned 0x116149a [0166.864] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.865] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47a00000 [0166.865] GetTickCount () returned 0x116149a [0166.865] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.866] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.866] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.866] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.866] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.867] GetTickCount () returned 0x116149a [0166.867] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.868] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47a80000 [0166.868] GetTickCount () returned 0x116149a [0166.868] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.869] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47a80000 [0166.869] GetTickCount () returned 0x116149a [0166.869] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.870] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.870] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.870] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.870] GetTickCount () returned 0x116149a [0166.870] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.872] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47b00000 [0166.872] GetTickCount () returned 0x11614aa [0166.872] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.874] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47b00000 [0166.874] GetTickCount () returned 0x11614aa [0166.874] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.875] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.875] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.875] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.875] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.876] GetTickCount () returned 0x11614aa [0166.876] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.877] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47b80000 [0166.877] GetTickCount () returned 0x11614aa [0166.877] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.878] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47b80000 [0166.878] GetTickCount () returned 0x11614aa [0166.878] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.879] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.879] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.879] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.879] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.880] GetTickCount () returned 0x11614aa [0166.880] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.881] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47c00000 [0166.881] GetTickCount () returned 0x11614aa [0166.881] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.882] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47c00000 [0166.882] GetTickCount () returned 0x11614aa [0166.882] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.883] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.883] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.883] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.883] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.883] GetTickCount () returned 0x11614aa [0166.883] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.885] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47c80000 [0166.885] GetTickCount () returned 0x11614aa [0166.885] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.886] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47c80000 [0166.886] GetTickCount () returned 0x11614aa [0166.886] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.887] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.887] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.887] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.887] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.888] GetTickCount () returned 0x11614b9 [0166.888] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.889] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47d00000 [0166.889] GetTickCount () returned 0x11614b9 [0166.889] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.890] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47d00000 [0166.890] GetTickCount () returned 0x11614b9 [0166.890] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.891] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.891] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.891] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.892] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.892] GetTickCount () returned 0x11614b9 [0166.892] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.893] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47d80000 [0166.893] GetTickCount () returned 0x11614b9 [0166.893] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.894] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47d80000 [0166.894] GetTickCount () returned 0x11614b9 [0166.894] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.895] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.895] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.895] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.895] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.895] GetTickCount () returned 0x11614b9 [0166.895] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.897] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47e00000 [0166.897] GetTickCount () returned 0x11614b9 [0166.897] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.898] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47e00000 [0166.898] GetTickCount () returned 0x11614b9 [0166.898] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.900] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.901] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.901] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.901] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.901] GetTickCount () returned 0x11614b9 [0166.901] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.902] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47e80000 [0166.902] GetTickCount () returned 0x11614b9 [0166.902] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.903] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47e80000 [0166.903] GetTickCount () returned 0x11614c9 [0166.903] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.904] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.905] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.905] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.905] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.905] GetTickCount () returned 0x11614c9 [0166.905] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.906] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47f00000 [0166.906] GetTickCount () returned 0x11614c9 [0166.906] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.907] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47f00000 [0166.907] GetTickCount () returned 0x11614c9 [0166.907] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.908] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.908] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.909] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.909] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.909] GetTickCount () returned 0x11614c9 [0166.909] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.910] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47f80000 [0166.910] GetTickCount () returned 0x11614c9 [0166.910] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.911] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x47f80000 [0166.911] GetTickCount () returned 0x11614c9 [0166.911] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.912] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.912] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.913] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.913] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.913] GetTickCount () returned 0x11614c9 [0166.913] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.914] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x48000000 [0166.914] GetTickCount () returned 0x11614c9 [0166.914] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.915] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x48000000 [0166.915] GetTickCount () returned 0x11614c9 [0166.915] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.916] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.917] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.917] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.917] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.917] GetTickCount () returned 0x11614c9 [0166.917] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.918] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x48080000 [0166.918] GetTickCount () returned 0x11614c9 [0166.918] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.919] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x48080000 [0166.919] GetTickCount () returned 0x11614d9 [0166.919] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.920] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.921] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.921] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.921] GetTickCount () returned 0x11614d9 [0166.921] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.922] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x48100000 [0166.922] GetTickCount () returned 0x11614d9 [0166.922] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.923] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x48100000 [0166.923] GetTickCount () returned 0x11614d9 [0166.923] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.924] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.924] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.925] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.925] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.925] GetTickCount () returned 0x11614d9 [0166.925] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.927] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x48180000 [0166.927] GetTickCount () returned 0x11614d9 [0166.927] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.928] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x48180000 [0166.928] GetTickCount () returned 0x11614d9 [0166.928] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.929] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.929] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.930] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.930] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.930] GetTickCount () returned 0x11614d9 [0166.930] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.931] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x48200000 [0166.931] GetTickCount () returned 0x11614d9 [0166.931] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.932] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x48200000 [0166.932] GetTickCount () returned 0x11614d9 [0166.932] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.933] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.933] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.933] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.933] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.933] GetTickCount () returned 0x11614d9 [0166.933] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.935] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x48280000 [0166.935] GetTickCount () returned 0x11614e8 [0166.935] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.936] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x48280000 [0166.936] GetTickCount () returned 0x11614e8 [0166.936] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.937] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.937] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.937] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.937] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.938] GetTickCount () returned 0x11614e8 [0166.938] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.939] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x48300000 [0166.939] GetTickCount () returned 0x11614e8 [0166.939] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.940] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x48300000 [0166.940] GetTickCount () returned 0x11614e8 [0166.940] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0166.941] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.941] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.941] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.945] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.945] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.945] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.945] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.948] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.949] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.949] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.949] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.953] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.953] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.953] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.953] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.957] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.957] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.957] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.958] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.961] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.961] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.961] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.961] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.965] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.965] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.965] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.965] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.969] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.969] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.969] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.970] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.974] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.974] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.974] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.974] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.984] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.984] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.985] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.985] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.988] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.989] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.989] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.989] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.993] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.993] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.993] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.993] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0166.997] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0166.998] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0166.998] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0166.998] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.001] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.002] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.002] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.002] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.006] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.006] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.006] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.006] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.010] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.010] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.010] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.010] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.016] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.016] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.016] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.016] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.020] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.020] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.020] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.021] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.024] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.024] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.024] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.025] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.028] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.029] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.029] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.029] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.032] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.033] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.033] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.033] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.037] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.037] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.037] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.037] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.041] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.041] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.041] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.041] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.046] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.047] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.047] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.047] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.052] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.052] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.052] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.052] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.056] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.056] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.056] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.056] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.061] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.061] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.061] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.061] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.065] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.065] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.066] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.066] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.070] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.070] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.070] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.070] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.075] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.075] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.075] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.075] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.081] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.081] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.081] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.081] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.086] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.086] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.086] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.087] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.091] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.091] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.091] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.091] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.095] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.095] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.095] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.095] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.099] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.099] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.099] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.099] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.103] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.103] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.103] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.108] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.108] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.108] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.108] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.113] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.113] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.113] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.113] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.117] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.117] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.117] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.118] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.121] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.122] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.122] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.122] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.126] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.127] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.127] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.127] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.131] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.131] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.131] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.131] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.135] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.135] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.135] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.135] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.139] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.140] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.140] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.140] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.145] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.145] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.145] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.145] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.149] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.149] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.149] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.149] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.154] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.154] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.154] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.154] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.158] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.158] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.158] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.158] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.162] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.162] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.162] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.162] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.166] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.166] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.166] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.166] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.178] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.178] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.178] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.178] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.183] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.183] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.183] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.183] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.187] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.188] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.188] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.188] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.191] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.192] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.192] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.192] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.195] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.196] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.196] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.196] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.200] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.200] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.200] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.200] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.204] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.204] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.204] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.204] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.208] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.208] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.208] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.208] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.212] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.212] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.212] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.212] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.222] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.222] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.222] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.222] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.226] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.226] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.226] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.226] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.230] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.230] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.230] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.231] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.237] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.237] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.237] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.241] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.241] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.241] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.241] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.244] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.244] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.244] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.244] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.248] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.248] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.248] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.248] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.251] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.252] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.252] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.252] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.257] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.257] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.257] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.257] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.261] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.261] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.261] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.261] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.265] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.265] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.265] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.265] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.268] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.268] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.268] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.268] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.272] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.272] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.272] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.272] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.276] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.276] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.276] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.276] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.280] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.281] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.281] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.281] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.285] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.285] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.285] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.285] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.289] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.289] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.289] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.289] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.293] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.293] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.293] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.293] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.298] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.299] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.299] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.299] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.303] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.303] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.303] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.303] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.307] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.307] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.307] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.307] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.311] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.311] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.311] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.311] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.315] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.316] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.316] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.316] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.320] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.320] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.320] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.320] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.324] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.324] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.324] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.324] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.328] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.328] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.329] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.329] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.332] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.333] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.333] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.333] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.338] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.338] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.338] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.338] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.342] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.342] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.342] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.342] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.346] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.346] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.346] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.347] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.351] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.351] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.351] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.351] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.355] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.355] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.356] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.356] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.359] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.360] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.360] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.360] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.364] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.364] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.364] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.364] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.368] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.368] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.368] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.368] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.372] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.372] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.372] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.378] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.378] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.378] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.378] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.382] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.383] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.383] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.383] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.387] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.387] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.387] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.387] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.391] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.391] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.391] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.391] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.395] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.395] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.395] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.395] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.399] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.399] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.399] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.399] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.403] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.403] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.403] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.403] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.407] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.407] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.407] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.407] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.411] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.411] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.411] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.411] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.415] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.415] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.415] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.415] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.421] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.421] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.421] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.421] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.425] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.425] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.425] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.426] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.429] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.430] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.430] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.430] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.434] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.434] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.434] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.434] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.438] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.438] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.438] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.438] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.442] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.442] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.442] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.442] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.446] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.446] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.447] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.447] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.451] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.451] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.451] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.451] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.455] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.456] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.456] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.456] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.460] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.460] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.460] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.460] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.466] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.466] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.466] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.469] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.469] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.470] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.470] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.473] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.473] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.473] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.473] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.476] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.477] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.477] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.477] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.480] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.480] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.480] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.480] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.484] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.484] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.484] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.484] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.495] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.495] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.495] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.507] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.507] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.507] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.507] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.516] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.516] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.516] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.516] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.525] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.526] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.526] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.526] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.534] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.535] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.535] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.535] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.544] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.544] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.544] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.544] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.556] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.556] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.557] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.557] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.566] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.566] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.566] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.566] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.576] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.576] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.576] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.576] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.584] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.585] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.585] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.585] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.597] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.598] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.598] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.598] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.609] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.609] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.609] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.609] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.616] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.616] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.616] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.616] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.620] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.620] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.620] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.620] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.623] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.623] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.623] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.623] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.632] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.632] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.632] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.632] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.640] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.640] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.640] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.640] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.648] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.648] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.648] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.648] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.655] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.655] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.655] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.655] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.664] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.664] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.665] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.665] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.674] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.674] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.674] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.674] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.681] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.681] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.681] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.681] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.685] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.685] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.686] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.686] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.689] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.690] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.690] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.690] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.695] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.696] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.696] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.696] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.700] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.700] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.700] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.700] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.704] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.704] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.704] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.704] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.708] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.709] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.709] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.709] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.713] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.713] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.713] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.713] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.717] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.717] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.717] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.721] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.721] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.721] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.722] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.725] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.726] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.726] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.726] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.734] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.734] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.734] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.734] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.745] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.745] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.745] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.745] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.749] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.749] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.749] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.749] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.753] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.754] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.754] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.754] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.758] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.758] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.758] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.758] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.762] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.762] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.762] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.762] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.770] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.770] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.770] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.770] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.773] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.773] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.773] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.774] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.788] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.788] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.788] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.788] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.794] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.795] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.795] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.795] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.798] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.799] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.799] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.799] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.803] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.803] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.803] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.803] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.811] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.811] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.811] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.811] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.819] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.820] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.820] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.820] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.824] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.824] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.824] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.824] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.828] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.828] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.828] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.828] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.832] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.832] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.832] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.832] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.836] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.837] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.837] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.837] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.843] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.843] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.843] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.843] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.847] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.847] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.847] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.847] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.855] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.856] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.856] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.856] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.859] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.860] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.860] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.860] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.863] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.864] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.864] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.864] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.867] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.868] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.868] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.868] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.872] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.872] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.872] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.872] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.876] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.876] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.876] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.876] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.880] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.880] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.880] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.880] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.884] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.884] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.885] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.885] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.889] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.889] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.889] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.889] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.895] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.895] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.895] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.895] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.899] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.899] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.900] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.900] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.904] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.904] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.904] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.904] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.908] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.908] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.908] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.908] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.917] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.917] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.917] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.917] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.927] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.927] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.927] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.927] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.937] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.937] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.937] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.938] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.948] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.948] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.948] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.948] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.952] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.952] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.952] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.952] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.961] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.961] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.961] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.961] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.970] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.970] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.971] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.971] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.980] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.980] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.980] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.980] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.987] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.988] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.988] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.988] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0167.991] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0167.991] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0167.992] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0167.992] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.001] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.001] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.001] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.001] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.014] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.014] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.014] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.014] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.025] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.025] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.025] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.025] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.035] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.036] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.036] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.036] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.046] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.046] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.047] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.047] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.059] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.060] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.060] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.060] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.064] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.064] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.064] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.064] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.068] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.068] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.069] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.069] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.073] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.073] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.073] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.073] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.077] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.077] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.077] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.077] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.081] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.081] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.081] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.081] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.085] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.085] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.085] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.085] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.089] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.089] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.090] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.090] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.093] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.093] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.094] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.094] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.098] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.098] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.098] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.098] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.102] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.102] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.102] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.106] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.106] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.106] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.112] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.113] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.113] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.113] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.116] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.116] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.117] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.117] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.121] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.121] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.121] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.121] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.125] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.125] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.125] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.125] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.129] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.129] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.129] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.129] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.133] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.133] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.133] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.133] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.137] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.138] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.138] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.138] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.142] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.142] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.142] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.142] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.146] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.146] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.146] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.146] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.150] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.150] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.150] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.150] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.154] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.154] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.154] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.154] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.158] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.158] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.158] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.158] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.162] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.163] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.163] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.163] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.166] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.176] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.176] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.176] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.180] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.180] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.180] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.180] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.184] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.184] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.184] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.184] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.188] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.188] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.189] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.189] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.192] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.192] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.193] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.193] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.197] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.197] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.197] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.197] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.201] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.201] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.201] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.201] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.205] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.205] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.205] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.205] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.209] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.209] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.209] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.209] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.213] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.213] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.213] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.213] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.217] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.217] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.217] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.217] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.221] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.221] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.222] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.222] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.226] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.226] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.226] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.226] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.232] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.232] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.232] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.232] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.236] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.237] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.237] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.241] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.241] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.241] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.241] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.245] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.245] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.245] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.245] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.249] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.249] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.249] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.253] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.253] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.253] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.253] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.257] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.257] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.257] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.258] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.262] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.262] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.262] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.262] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.267] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.267] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.267] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.267] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.271] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.271] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.271] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.271] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.280] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.281] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.281] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.281] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.292] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.292] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.292] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.292] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.301] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.302] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.302] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.302] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.311] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.312] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.312] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.312] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.321] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.321] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.321] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.321] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.331] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.331] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.331] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.331] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.340] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.341] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.341] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.341] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.352] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.352] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.352] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.352] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.364] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.364] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.364] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.364] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.373] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.373] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.373] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.373] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.384] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.384] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.384] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.384] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.393] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.393] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.393] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.393] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.403] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.403] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.403] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.403] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.413] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.414] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.414] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.414] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.417] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.418] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.418] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.418] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.422] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.422] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.422] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.422] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.426] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.426] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.426] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.426] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.430] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.430] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.430] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.430] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.434] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.434] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.434] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.434] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.438] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.438] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.438] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.438] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.442] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.442] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.442] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.442] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.446] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.446] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.446] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.446] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.450] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.450] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.450] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.450] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.454] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.454] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.454] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.454] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.458] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.458] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.458] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.462] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.462] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.462] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.466] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.467] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.467] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.467] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.470] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.471] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.471] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.471] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.477] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.477] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.477] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.477] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.481] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.481] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.481] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.481] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.485] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.485] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.485] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.485] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.489] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.489] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.489] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.489] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.493] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.493] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.493] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.493] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.497] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.497] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.497] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.497] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.501] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.501] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.501] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.501] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.505] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.505] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.505] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.505] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.509] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.509] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.509] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.509] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.513] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.514] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.514] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.514] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.517] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.518] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.518] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.518] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.522] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.522] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.522] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.522] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.526] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.526] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.526] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.526] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.530] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.530] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.530] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.530] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.534] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.534] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.534] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.534] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.540] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.541] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.541] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.541] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.545] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.545] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.545] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.545] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.549] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.549] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.549] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.549] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.552] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.553] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.553] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.553] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.556] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.556] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.556] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.557] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.561] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.562] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.562] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.562] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.565] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.566] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.566] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.566] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.569] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.569] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.569] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.569] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.582] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.582] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.582] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.582] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.681] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.682] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.682] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.682] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.692] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.692] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.692] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.692] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.696] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.696] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.696] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.696] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.700] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.700] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.700] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.700] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.705] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.705] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.705] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.705] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.708] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.708] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.708] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.708] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.712] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.712] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.712] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.712] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.716] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.716] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.716] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.716] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.719] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.719] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.720] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.720] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.723] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.723] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.723] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.723] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.727] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.727] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.727] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.727] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.731] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.731] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.731] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.731] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.737] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.737] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.737] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.737] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.741] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.741] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.741] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.741] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.745] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.745] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.745] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.745] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.749] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.749] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.749] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.749] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.753] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.753] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.753] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.753] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.756] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.757] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.757] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.757] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.760] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.761] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.761] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.761] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.764] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.764] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.765] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.765] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.768] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.768] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.768] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.768] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.771] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.772] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.772] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.772] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.776] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.776] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.776] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.776] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.786] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.787] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.787] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.787] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.791] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.791] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.791] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.791] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.795] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.795] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.795] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.795] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.802] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.802] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.802] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.802] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.806] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.806] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.806] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.806] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.810] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.810] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.810] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.810] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.814] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.814] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.814] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.814] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.818] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.818] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.818] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.818] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.822] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.822] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.822] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.822] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.826] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.826] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.826] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.827] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.830] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.830] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.830] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.830] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.834] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.834] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.834] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.834] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.838] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.838] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.838] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.842] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.842] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.842] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.842] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.846] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.846] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.847] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.847] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.851] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.851] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.851] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.851] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.855] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.855] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.855] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.855] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.859] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.859] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.859] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.859] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.863] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.863] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.863] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.863] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.869] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.869] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.869] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.869] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.873] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.873] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.873] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.873] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.877] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.878] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.878] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.878] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.885] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.885] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.886] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.886] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.890] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.890] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.890] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.890] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.894] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.894] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.894] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.894] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.898] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.898] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.898] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.898] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.902] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.902] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.902] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.902] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.908] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.908] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.908] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.908] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.912] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.912] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.912] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.912] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.917] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.917] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.917] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.917] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.921] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.921] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.921] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.925] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.925] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.925] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.925] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.932] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.932] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.932] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.932] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.936] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.936] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.936] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.936] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.940] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.940] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.941] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.944] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.945] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.945] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.945] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.949] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.949] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.949] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.949] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.953] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.953] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.953] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.953] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.957] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.957] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.957] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.957] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.961] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.961] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.961] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.961] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.965] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.966] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.966] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.966] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.969] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.969] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.970] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.970] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.973] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.974] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.974] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.974] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.977] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.978] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.978] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.978] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.982] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.982] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.982] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.982] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.986] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.986] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.986] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.986] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.990] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.990] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.990] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.990] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0168.996] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0168.997] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0168.997] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0168.997] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.001] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.001] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.001] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.001] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.005] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.005] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.005] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.005] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.009] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.009] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.009] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.009] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.013] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.013] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.013] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.013] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.017] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.017] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.017] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.017] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.021] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.022] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.022] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.022] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.026] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.026] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.026] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.026] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.030] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.030] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.030] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.030] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.034] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.035] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.035] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.035] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.038] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.039] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.039] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.039] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.043] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.043] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.043] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.043] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.047] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.047] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.047] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.047] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.051] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.051] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.051] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.051] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.061] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.062] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.062] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.062] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.071] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.075] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.075] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.075] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.080] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.080] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.080] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.080] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.085] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.085] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.085] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.085] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.093] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.094] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.094] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.094] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.102] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.102] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.102] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.110] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.110] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.110] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.110] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.113] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.114] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.114] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.114] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.118] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.118] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.118] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.121] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.134] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.134] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.134] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.134] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.143] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.143] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.143] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.143] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.151] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.151] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.151] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.151] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.155] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.155] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.155] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.155] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.159] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.159] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.159] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.160] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.164] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.164] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.164] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.164] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.175] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.175] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.175] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.175] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.179] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.180] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.180] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.180] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.184] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.184] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.184] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.184] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.188] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.188] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.188] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.188] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.194] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.195] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.195] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.195] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.199] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.199] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.199] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.199] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.203] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.203] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.203] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.203] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.207] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.207] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.207] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.207] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.211] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.212] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.212] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.212] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.216] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.216] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.216] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.216] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.220] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.220] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.220] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.220] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.224] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.224] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.224] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.225] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.229] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.229] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.229] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.229] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.233] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.233] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.233] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.233] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.237] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.237] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.237] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.242] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.242] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.242] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.242] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.246] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.246] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.246] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.246] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.250] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.250] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.250] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.250] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.254] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.255] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.255] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.255] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.261] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.262] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.262] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.262] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.266] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.266] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.266] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.266] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.271] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.271] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.271] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.271] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.275] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.275] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.276] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.276] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.280] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.280] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.280] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.280] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.284] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.284] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.285] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.285] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.288] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.289] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.289] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.289] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.293] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.293] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.293] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.293] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.297] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.297] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.297] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.298] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.301] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.302] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.302] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.302] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.306] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.306] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.306] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.306] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.310] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.310] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.310] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.310] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.315] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.315] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.315] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.315] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.320] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.320] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.321] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.321] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.327] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.327] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.327] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.327] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.331] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.331] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.331] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.331] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.335] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.335] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.335] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.335] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.340] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.340] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.340] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.344] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.344] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.345] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.345] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.349] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.349] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.349] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.349] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.353] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.353] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.353] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.353] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.357] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.357] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.357] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.358] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.362] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.362] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.362] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.362] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.366] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.366] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.366] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.366] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.370] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.371] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.371] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.371] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.375] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.375] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.375] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.375] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.379] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.379] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.380] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.380] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.384] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.384] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.384] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.384] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.391] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.391] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.391] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.391] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.395] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.395] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.395] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.395] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.399] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.400] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.400] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.400] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.404] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.404] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.404] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.404] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.408] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.408] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.408] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.408] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.412] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.413] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.413] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.413] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.417] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.417] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.418] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.418] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.422] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.422] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.422] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.422] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.426] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.426] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.426] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.426] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.430] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.431] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.431] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.431] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.435] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.435] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.435] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.435] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.439] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.439] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.439] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.439] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.443] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.444] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.444] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.444] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.455] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.455] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.455] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.455] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.464] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.464] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.464] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.464] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.473] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.473] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.474] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.474] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.483] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.483] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.483] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.483] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.490] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.490] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.490] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.491] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.494] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.494] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.494] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.494] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.498] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.498] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.498] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.498] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.501] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.501] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.501] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.501] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.505] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.505] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.505] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.505] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.509] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.509] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.509] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.509] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.513] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.514] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.514] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.514] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.523] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.523] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.523] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.523] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.531] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.531] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.531] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.531] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.540] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.540] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.540] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.540] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.547] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.547] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.547] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.547] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.551] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.551] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.551] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.551] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.556] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.556] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.556] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.556] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.560] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.560] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.561] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.561] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.565] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.565] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.565] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.565] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.569] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.570] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.570] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.570] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.574] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.574] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.574] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.574] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.578] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.578] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.578] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.578] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.585] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.585] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.585] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.585] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.589] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.589] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.589] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.589] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.594] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.594] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.594] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.594] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.598] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.598] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.598] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.598] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.603] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.604] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.604] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.604] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.608] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.608] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.608] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.608] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.612] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.612] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.612] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.612] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.618] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.618] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.618] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.618] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.622] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.622] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.622] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.622] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.626] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.626] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.627] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.627] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.631] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.631] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.631] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.631] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.635] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.635] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.635] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.635] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.639] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.639] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.639] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.640] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.644] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.644] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.644] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.644] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.650] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.651] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.651] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.651] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.655] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.655] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.655] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.655] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.659] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.659] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.659] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.659] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.663] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.663] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.663] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.663] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.667] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.668] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.668] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.668] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.672] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.672] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.672] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.672] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.676] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.676] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.676] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.676] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.681] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.681] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.681] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.681] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.685] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.685] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.685] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.685] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.689] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.689] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.689] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.689] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.693] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.694] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.694] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.694] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.698] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.698] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.698] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.698] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.702] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.702] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.702] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.702] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.706] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.706] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.706] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.706] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.713] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.713] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.713] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.713] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.717] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.718] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.718] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.718] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.722] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.722] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.722] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.722] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.726] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.727] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.727] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.727] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.731] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.731] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.731] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.731] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.735] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.735] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.736] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.736] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.740] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.740] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.740] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.740] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.744] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.744] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.744] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.745] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.749] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.749] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.749] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.749] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.753] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.753] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.753] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.753] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.758] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.758] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.758] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.758] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.762] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.763] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.763] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.763] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.767] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.767] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.767] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.767] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.771] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.771] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.771] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.785] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.785] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.785] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.785] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.790] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.790] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.790] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.790] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.794] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.794] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.794] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.795] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.798] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.798] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.798] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.798] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.802] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.802] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.802] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.802] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.807] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.807] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.807] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.807] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.810] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.811] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.811] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.811] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.815] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.815] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.815] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.815] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.819] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.819] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.819] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.819] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.823] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.824] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.824] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.824] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.827] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.828] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.828] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.828] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.832] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.832] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.832] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.832] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.836] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.836] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.836] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.836] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.843] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.843] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.843] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.843] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.851] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.851] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.851] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.851] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.855] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.855] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.855] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.855] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.859] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.859] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.859] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.859] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.863] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.864] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.864] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.864] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.868] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.868] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.868] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.868] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.872] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.872] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.872] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.872] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.876] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.877] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.877] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.877] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.880] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.881] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.881] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.881] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.885] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.885] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.885] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.885] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.889] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.889] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.889] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.889] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.940] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.941] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.941] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.945] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.945] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.945] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.945] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.949] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.950] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.950] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.950] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.953] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.953] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.954] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.954] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.958] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.958] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.958] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.958] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.962] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.962] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.962] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.962] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.967] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.967] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.967] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.967] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.974] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.974] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.974] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.974] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.978] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.979] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.979] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.979] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.983] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.983] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.983] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.983] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.987] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.987] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.987] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.987] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.991] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.991] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.991] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.991] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.995] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0169.995] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0169.996] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0169.996] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0169.999] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.000] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.000] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.000] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.004] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.004] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.004] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.004] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.008] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.008] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.008] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.008] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.012] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.012] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.012] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.012] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.016] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.016] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.016] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.016] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.021] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.021] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.021] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.021] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.025] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.025] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.025] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.025] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.029] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.029] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.029] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.029] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.034] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.034] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.035] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.035] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.041] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.041] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.041] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.041] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.045] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.046] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.046] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.046] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.050] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.050] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.050] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.050] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.054] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.054] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.054] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.054] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.058] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.059] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.059] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.059] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.062] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.063] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.063] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.063] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.071] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.071] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.071] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.071] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.079] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.079] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.079] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.079] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.088] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.088] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.088] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.088] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.091] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.092] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.092] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.092] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.095] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.095] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.095] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.095] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.099] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.099] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.099] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.099] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.106] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.106] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.106] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.110] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.110] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.110] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.110] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.118] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.118] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.118] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.118] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.127] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.127] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.128] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.128] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.131] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.131] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.131] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.131] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.135] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.136] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.136] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.136] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.139] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.140] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.140] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.140] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.143] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.144] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.144] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.144] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.147] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.148] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.148] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.148] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.152] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.152] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.152] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.152] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.156] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.156] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.156] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.156] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.160] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.160] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.160] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.160] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.171] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.171] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.171] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.171] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.175] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.175] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.175] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.175] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.179] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.179] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.179] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.179] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.183] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.183] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.183] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.183] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.187] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.187] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.187] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.187] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.191] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.191] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.191] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.191] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.195] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.195] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.195] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.195] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.199] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.199] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.199] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.199] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.203] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.203] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.203] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.203] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.207] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.207] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.207] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.207] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.211] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.211] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.211] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.211] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.215] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.215] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.215] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.215] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.219] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.219] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.219] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.219] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.222] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.223] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.223] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.223] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.227] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.227] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.227] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.227] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.233] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.233] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.233] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.233] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.237] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.237] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.238] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.238] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.241] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.242] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.242] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.242] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.245] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.245] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.245] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.245] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.249] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.249] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.249] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.253] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.253] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.253] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.253] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.258] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.258] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.258] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.258] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.262] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.262] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.262] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.262] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.266] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.266] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.266] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.266] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.270] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.270] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.270] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.270] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.274] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.274] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.274] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.274] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.278] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.279] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.279] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.279] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.282] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.282] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.283] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.283] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.286] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.286] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.287] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.287] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.294] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.294] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.294] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.294] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.300] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.301] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.301] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.301] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.305] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.305] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.305] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.305] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.309] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.309] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.309] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.309] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.313] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.313] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.313] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.313] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.316] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.317] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.317] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.317] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.320] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.321] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.321] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.321] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.324] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.325] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.325] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.325] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.328] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.329] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.329] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.329] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.332] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.332] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.333] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.333] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.336] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.336] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.336] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.336] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.340] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.340] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.340] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.344] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.344] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.344] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.352] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.352] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.352] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.353] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.356] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.357] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.357] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.357] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.361] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.361] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.361] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.361] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.367] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.368] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.368] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.368] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.372] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.372] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.372] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.376] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.376] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.376] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.376] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.380] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.380] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.380] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.381] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.385] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.385] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.385] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.385] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.389] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.389] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.389] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.389] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.393] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.393] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.393] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.393] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.397] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.397] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.397] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.397] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.401] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.402] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.402] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.402] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.405] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.406] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.406] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.406] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.409] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.410] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.410] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.410] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.414] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.414] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.414] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.414] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.418] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.418] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.418] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.418] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.422] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.422] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.422] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.422] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.426] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.426] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.426] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.426] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.433] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.433] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.433] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.433] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.437] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.437] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.437] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.437] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.441] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.441] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.441] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.441] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.445] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.445] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.445] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.445] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.449] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.449] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.449] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.449] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.453] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.453] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.453] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.453] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.457] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.457] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.457] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.457] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.461] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.461] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.461] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.461] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.470] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.470] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.470] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.470] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.473] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.474] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.474] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.474] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.478] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.478] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.478] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.478] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.482] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.482] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.482] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.482] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.486] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.486] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.486] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.490] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.490] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.490] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.490] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.497] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.497] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.497] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.497] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.501] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.501] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.501] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.501] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.505] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.505] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.505] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.505] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.509] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.509] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.509] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.509] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.513] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.513] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.513] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.513] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.517] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.517] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.517] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.517] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.521] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.521] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.521] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.521] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.525] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.525] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.525] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.525] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.529] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.529] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.529] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.529] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.533] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.533] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.533] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.533] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.537] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.538] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.538] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.538] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.542] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.542] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.542] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.542] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.546] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.546] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.546] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.546] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.550] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.550] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.550] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.550] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.554] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.554] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.554] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.554] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.560] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.560] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.560] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.560] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.564] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.564] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.564] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.565] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.568] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.568] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.569] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.569] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.611] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.614] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.614] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.615] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.648] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.651] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.652] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.652] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.666] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.666] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.666] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.666] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.670] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.670] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.670] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.670] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.674] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.674] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.674] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.674] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.677] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.678] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.678] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.678] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.682] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.682] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.682] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.682] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.686] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.686] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.686] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.686] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.692] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.693] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.693] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.693] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.701] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.701] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.701] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.701] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.709] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.709] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.709] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.709] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.719] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.719] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.720] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.720] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.723] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.723] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.724] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.724] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.727] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.727] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.727] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.727] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.731] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.731] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.732] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.732] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.735] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.735] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.735] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.735] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.739] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.739] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.739] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.739] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.743] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.743] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.743] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.743] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.747] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.747] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.747] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.747] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.751] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.751] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.751] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.751] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.757] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.757] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.757] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.757] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.761] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.761] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.761] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.761] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.764] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.765] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.765] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.765] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.768] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.768] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.769] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.769] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.772] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.773] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.773] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.773] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.776] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.776] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.776] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.776] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.787] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.787] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.787] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.787] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.788] GetTickCount () returned 0x11623f5 [0170.788] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.789] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5e780000 [0170.789] GetTickCount () returned 0x11623f5 [0170.790] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.791] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5e780000 [0170.791] GetTickCount () returned 0x11623f5 [0170.791] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.792] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.792] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.792] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.792] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.792] GetTickCount () returned 0x11623f5 [0170.792] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.794] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5e800000 [0170.794] GetTickCount () returned 0x11623f5 [0170.794] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.795] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5e800000 [0170.795] GetTickCount () returned 0x11623f5 [0170.795] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.796] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.796] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.796] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.796] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.797] GetTickCount () returned 0x11623f5 [0170.797] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.798] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5e880000 [0170.798] GetTickCount () returned 0x11623f5 [0170.798] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.799] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5e880000 [0170.800] GetTickCount () returned 0x11623f5 [0170.800] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.801] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.801] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.801] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.801] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.801] GetTickCount () returned 0x11623f5 [0170.801] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.803] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5e900000 [0170.803] GetTickCount () returned 0x11623f5 [0170.803] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.804] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5e900000 [0170.804] GetTickCount () returned 0x1162405 [0170.804] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.805] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.806] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.806] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.806] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.806] GetTickCount () returned 0x1162405 [0170.806] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.808] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5e980000 [0170.808] GetTickCount () returned 0x1162405 [0170.808] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.809] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5e980000 [0170.810] GetTickCount () returned 0x1162405 [0170.810] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.811] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.811] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.811] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.811] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.811] GetTickCount () returned 0x1162405 [0170.811] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.813] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ea00000 [0170.813] GetTickCount () returned 0x1162405 [0170.813] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.814] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ea00000 [0170.814] GetTickCount () returned 0x1162405 [0170.814] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.815] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.815] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.815] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.816] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.816] GetTickCount () returned 0x1162405 [0170.816] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.817] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ea80000 [0170.817] GetTickCount () returned 0x1162405 [0170.817] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.821] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ea80000 [0170.821] GetTickCount () returned 0x1162415 [0170.821] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.822] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.822] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.823] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.823] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.823] GetTickCount () returned 0x1162415 [0170.823] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.824] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5eb00000 [0170.824] GetTickCount () returned 0x1162415 [0170.824] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.825] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5eb00000 [0170.826] GetTickCount () returned 0x1162415 [0170.826] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.827] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.827] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.827] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.827] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.827] GetTickCount () returned 0x1162415 [0170.827] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.829] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5eb80000 [0170.829] GetTickCount () returned 0x1162415 [0170.829] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.830] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5eb80000 [0170.830] GetTickCount () returned 0x1162415 [0170.830] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.831] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.831] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.832] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.832] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.832] GetTickCount () returned 0x1162415 [0170.832] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.833] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ec00000 [0170.833] GetTickCount () returned 0x1162415 [0170.833] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.835] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ec00000 [0170.835] GetTickCount () returned 0x1162424 [0170.835] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.836] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.836] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.836] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.836] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.836] GetTickCount () returned 0x1162424 [0170.836] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.838] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ec80000 [0170.838] GetTickCount () returned 0x1162424 [0170.838] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.839] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ec80000 [0170.839] GetTickCount () returned 0x1162424 [0170.839] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.840] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.840] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.840] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.840] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.840] GetTickCount () returned 0x1162424 [0170.840] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.846] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ed00000 [0170.846] GetTickCount () returned 0x1162424 [0170.846] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.847] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ed00000 [0170.847] GetTickCount () returned 0x1162424 [0170.847] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.849] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.849] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.849] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.849] GetTickCount () returned 0x1162424 [0170.849] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.856] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ed80000 [0170.856] GetTickCount () returned 0x1162434 [0170.856] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.857] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ed80000 [0170.857] GetTickCount () returned 0x1162434 [0170.857] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.858] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.858] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.858] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.859] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.859] GetTickCount () returned 0x1162434 [0170.859] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.865] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ee00000 [0170.865] GetTickCount () returned 0x1162434 [0170.865] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.866] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ee00000 [0170.866] GetTickCount () returned 0x1162443 [0170.866] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.867] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.867] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.867] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.867] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.867] GetTickCount () returned 0x1162443 [0170.867] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.869] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ee80000 [0170.869] GetTickCount () returned 0x1162443 [0170.869] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.870] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ee80000 [0170.870] GetTickCount () returned 0x1162443 [0170.870] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.871] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.872] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.872] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.872] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.872] GetTickCount () returned 0x1162443 [0170.872] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.873] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ef00000 [0170.873] GetTickCount () returned 0x1162443 [0170.873] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.875] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ef00000 [0170.875] GetTickCount () returned 0x1162443 [0170.875] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.876] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.876] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.876] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.876] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.876] GetTickCount () returned 0x1162443 [0170.876] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.878] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ef80000 [0170.878] GetTickCount () returned 0x1162443 [0170.878] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.879] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ef80000 [0170.879] GetTickCount () returned 0x1162443 [0170.879] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.880] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.880] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.880] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.880] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.880] GetTickCount () returned 0x1162443 [0170.880] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.882] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f000000 [0170.882] GetTickCount () returned 0x1162453 [0170.882] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.885] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f000000 [0170.886] GetTickCount () returned 0x1162453 [0170.886] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.887] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.887] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.887] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.887] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.887] GetTickCount () returned 0x1162453 [0170.887] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.888] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f080000 [0170.889] GetTickCount () returned 0x1162453 [0170.889] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.890] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f080000 [0170.890] GetTickCount () returned 0x1162453 [0170.890] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.891] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.891] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.891] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.891] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.891] GetTickCount () returned 0x1162453 [0170.891] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.893] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f100000 [0170.893] GetTickCount () returned 0x1162453 [0170.893] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.894] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f100000 [0170.894] GetTickCount () returned 0x1162453 [0170.894] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.895] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.895] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.896] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.896] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.896] GetTickCount () returned 0x1162453 [0170.896] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.897] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f180000 [0170.897] GetTickCount () returned 0x1162463 [0170.897] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.899] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f180000 [0170.899] GetTickCount () returned 0x1162463 [0170.899] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.900] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.900] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.900] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.900] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.900] GetTickCount () returned 0x1162463 [0170.900] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.902] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f200000 [0170.902] GetTickCount () returned 0x1162463 [0170.902] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.903] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f200000 [0170.903] GetTickCount () returned 0x1162463 [0170.903] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.904] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.904] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.904] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.904] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.904] GetTickCount () returned 0x1162463 [0170.904] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.906] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f280000 [0170.906] GetTickCount () returned 0x1162463 [0170.906] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.907] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f280000 [0170.907] GetTickCount () returned 0x1162463 [0170.907] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.908] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.909] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.909] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.909] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.909] GetTickCount () returned 0x1162463 [0170.909] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.910] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f300000 [0170.911] GetTickCount () returned 0x1162463 [0170.911] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.912] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f300000 [0170.912] GetTickCount () returned 0x1162463 [0170.912] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.913] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.913] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.914] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.914] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.914] GetTickCount () returned 0x1162472 [0170.914] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.915] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f380000 [0170.915] GetTickCount () returned 0x1162472 [0170.915] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.916] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f380000 [0170.917] GetTickCount () returned 0x1162472 [0170.917] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.918] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.918] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.918] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.918] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.918] GetTickCount () returned 0x1162472 [0170.918] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.920] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f400000 [0170.920] GetTickCount () returned 0x1162472 [0170.920] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.921] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f400000 [0170.921] GetTickCount () returned 0x1162472 [0170.921] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.922] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.923] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.923] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.923] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.923] GetTickCount () returned 0x1162472 [0170.923] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.924] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f480000 [0170.924] GetTickCount () returned 0x1162472 [0170.925] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.926] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f480000 [0170.926] GetTickCount () returned 0x1162472 [0170.926] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.927] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.927] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.927] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.927] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.927] GetTickCount () returned 0x1162472 [0170.927] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.929] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f500000 [0170.929] GetTickCount () returned 0x1162482 [0170.929] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.930] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f500000 [0170.930] GetTickCount () returned 0x1162482 [0170.930] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.931] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.932] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.932] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.932] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.932] GetTickCount () returned 0x1162482 [0170.932] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.934] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f580000 [0170.934] GetTickCount () returned 0x1162482 [0170.934] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.935] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f580000 [0170.935] GetTickCount () returned 0x1162482 [0170.935] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.936] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.936] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.936] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.936] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.936] GetTickCount () returned 0x1162482 [0170.936] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.938] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f600000 [0170.938] GetTickCount () returned 0x1162482 [0170.938] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.939] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f600000 [0170.939] GetTickCount () returned 0x1162482 [0170.939] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.941] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.941] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.941] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.941] GetTickCount () returned 0x1162482 [0170.941] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.943] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f680000 [0170.943] GetTickCount () returned 0x1162482 [0170.943] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.944] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f680000 [0170.944] GetTickCount () returned 0x1162491 [0170.944] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.945] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.945] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.945] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.945] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.946] GetTickCount () returned 0x1162491 [0170.946] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.947] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f700000 [0170.947] GetTickCount () returned 0x1162491 [0170.947] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.952] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f700000 [0170.952] GetTickCount () returned 0x1162491 [0170.952] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.953] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.953] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.953] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.953] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.953] GetTickCount () returned 0x1162491 [0170.953] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.955] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f780000 [0170.955] GetTickCount () returned 0x1162491 [0170.955] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.956] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f780000 [0170.956] GetTickCount () returned 0x1162491 [0170.956] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.958] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.958] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.958] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.958] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.958] GetTickCount () returned 0x1162491 [0170.958] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.960] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f800000 [0170.960] GetTickCount () returned 0x11624a1 [0170.960] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.961] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f800000 [0170.961] GetTickCount () returned 0x11624a1 [0170.961] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.962] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.962] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.962] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.963] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.963] GetTickCount () returned 0x11624a1 [0170.963] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.964] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f880000 [0170.964] GetTickCount () returned 0x11624a1 [0170.964] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.966] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f880000 [0170.966] GetTickCount () returned 0x11624a1 [0170.966] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.967] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.967] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.967] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.967] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.967] GetTickCount () returned 0x11624a1 [0170.967] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.969] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f900000 [0170.969] GetTickCount () returned 0x11624a1 [0170.969] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.970] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f900000 [0170.970] GetTickCount () returned 0x11624a1 [0170.970] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.972] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.972] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.972] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.972] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.972] GetTickCount () returned 0x11624a1 [0170.972] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.974] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f980000 [0170.974] GetTickCount () returned 0x11624a1 [0170.974] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.975] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5f980000 [0170.975] GetTickCount () returned 0x11624b1 [0170.975] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.977] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.977] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.977] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.977] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.977] GetTickCount () returned 0x11624b1 [0170.977] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.981] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fa00000 [0170.981] GetTickCount () returned 0x11624b1 [0170.981] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.982] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fa00000 [0170.982] GetTickCount () returned 0x11624b1 [0170.982] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.984] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.984] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.984] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.984] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.984] GetTickCount () returned 0x11624b1 [0170.984] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.986] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fa80000 [0170.986] GetTickCount () returned 0x11624b1 [0170.986] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.987] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fa80000 [0170.987] GetTickCount () returned 0x11624b1 [0170.987] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.988] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.989] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.989] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.989] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.989] GetTickCount () returned 0x11624b1 [0170.989] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.991] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fb00000 [0170.991] GetTickCount () returned 0x11624c0 [0170.991] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.992] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fb00000 [0170.992] GetTickCount () returned 0x11624c0 [0170.992] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.993] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.993] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.993] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.993] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.993] GetTickCount () returned 0x11624c0 [0170.993] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.995] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fb80000 [0170.995] GetTickCount () returned 0x11624c0 [0170.995] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.996] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fb80000 [0170.996] GetTickCount () returned 0x11624c0 [0170.996] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0170.998] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0170.998] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0170.998] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0170.998] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0170.998] GetTickCount () returned 0x11624c0 [0170.998] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.000] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fc00000 [0171.000] GetTickCount () returned 0x11624c0 [0171.000] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.001] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fc00000 [0171.001] GetTickCount () returned 0x11624c0 [0171.001] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.002] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.003] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.003] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.003] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.003] GetTickCount () returned 0x11624c0 [0171.003] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.004] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fc80000 [0171.005] GetTickCount () returned 0x11624c0 [0171.005] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.006] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fc80000 [0171.006] GetTickCount () returned 0x11624d0 [0171.006] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.007] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.007] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.007] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.007] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.007] GetTickCount () returned 0x11624d0 [0171.007] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.009] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fd00000 [0171.009] GetTickCount () returned 0x11624d0 [0171.009] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.010] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fd00000 [0171.010] GetTickCount () returned 0x11624d0 [0171.010] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.011] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.012] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.012] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.012] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.012] GetTickCount () returned 0x11624d0 [0171.012] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.017] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fd80000 [0171.017] GetTickCount () returned 0x11624d0 [0171.017] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.018] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fd80000 [0171.018] GetTickCount () returned 0x11624d0 [0171.018] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.019] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.020] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.020] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.020] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.020] GetTickCount () returned 0x11624d0 [0171.020] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.022] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fe00000 [0171.022] GetTickCount () returned 0x11624df [0171.022] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.023] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fe00000 [0171.023] GetTickCount () returned 0x11624df [0171.023] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.024] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.024] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.024] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.024] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.024] GetTickCount () returned 0x11624df [0171.024] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.026] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fe80000 [0171.026] GetTickCount () returned 0x11624df [0171.026] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.027] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5fe80000 [0171.027] GetTickCount () returned 0x11624df [0171.027] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.028] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.029] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.029] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.029] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.029] GetTickCount () returned 0x11624df [0171.029] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.030] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ff00000 [0171.030] GetTickCount () returned 0x11624df [0171.030] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.032] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ff00000 [0171.032] GetTickCount () returned 0x11624df [0171.032] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.033] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.033] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.033] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.033] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.033] GetTickCount () returned 0x11624df [0171.033] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.036] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ff80000 [0171.036] GetTickCount () returned 0x11624df [0171.036] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.037] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x5ff80000 [0171.037] GetTickCount () returned 0x11624ef [0171.037] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.039] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.039] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.039] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.039] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.039] GetTickCount () returned 0x11624ef [0171.040] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.041] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60000000 [0171.041] GetTickCount () returned 0x11624ef [0171.041] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.042] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60000000 [0171.042] GetTickCount () returned 0x11624ef [0171.043] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.044] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.044] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.044] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.044] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.044] GetTickCount () returned 0x11624ef [0171.044] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.046] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60080000 [0171.046] GetTickCount () returned 0x11624ef [0171.046] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.047] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60080000 [0171.047] GetTickCount () returned 0x11624ef [0171.047] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.049] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.049] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.049] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.049] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.049] GetTickCount () returned 0x11624ef [0171.049] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.051] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60100000 [0171.051] GetTickCount () returned 0x11624ef [0171.051] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.052] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60100000 [0171.052] GetTickCount () returned 0x11624ef [0171.052] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.054] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.054] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.054] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.054] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.054] GetTickCount () returned 0x11624ff [0171.054] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.056] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60180000 [0171.056] GetTickCount () returned 0x11624ff [0171.056] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.058] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60180000 [0171.058] GetTickCount () returned 0x11624ff [0171.058] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.059] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.059] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.059] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.059] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.059] GetTickCount () returned 0x11624ff [0171.059] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.061] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60200000 [0171.061] GetTickCount () returned 0x11624ff [0171.061] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.062] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60200000 [0171.062] GetTickCount () returned 0x11624ff [0171.062] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.064] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.064] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.064] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.064] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.064] GetTickCount () returned 0x11624ff [0171.064] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.066] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60280000 [0171.066] GetTickCount () returned 0x11624ff [0171.066] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.067] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60280000 [0171.067] GetTickCount () returned 0x11624ff [0171.067] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.069] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.069] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.069] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.069] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.069] GetTickCount () returned 0x116250e [0171.069] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.071] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60300000 [0171.071] GetTickCount () returned 0x116250e [0171.071] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.072] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60300000 [0171.072] GetTickCount () returned 0x116250e [0171.072] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.073] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.074] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.074] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.074] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.074] GetTickCount () returned 0x116250e [0171.074] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.076] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60380000 [0171.076] GetTickCount () returned 0x116250e [0171.076] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.077] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60380000 [0171.077] GetTickCount () returned 0x116250e [0171.077] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.081] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.081] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.082] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.082] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.082] GetTickCount () returned 0x116250e [0171.082] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.084] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60400000 [0171.084] GetTickCount () returned 0x116251e [0171.084] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.085] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60400000 [0171.085] GetTickCount () returned 0x116251e [0171.085] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.086] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.086] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.086] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.086] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.086] GetTickCount () returned 0x116251e [0171.087] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.088] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60480000 [0171.089] GetTickCount () returned 0x116251e [0171.089] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.090] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60480000 [0171.090] GetTickCount () returned 0x116251e [0171.090] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.091] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.091] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.091] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.091] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.092] GetTickCount () returned 0x116251e [0171.092] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.093] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60500000 [0171.093] GetTickCount () returned 0x116251e [0171.093] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.095] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60500000 [0171.095] GetTickCount () returned 0x116251e [0171.095] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.096] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.096] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.096] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.096] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.097] GetTickCount () returned 0x116251e [0171.097] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.098] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60580000 [0171.098] GetTickCount () returned 0x116251e [0171.098] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.100] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60580000 [0171.100] GetTickCount () returned 0x116252d [0171.100] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.101] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.101] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.101] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.101] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.101] GetTickCount () returned 0x116252d [0171.101] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.103] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60600000 [0171.103] GetTickCount () returned 0x116252d [0171.103] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.104] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60600000 [0171.105] GetTickCount () returned 0x116252d [0171.105] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.106] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.106] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.106] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.106] GetTickCount () returned 0x116252d [0171.106] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.108] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60680000 [0171.108] GetTickCount () returned 0x116252d [0171.108] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.109] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60680000 [0171.109] GetTickCount () returned 0x116252d [0171.109] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.110] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.111] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.111] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.111] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.111] GetTickCount () returned 0x116252d [0171.111] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.113] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60700000 [0171.113] GetTickCount () returned 0x116252d [0171.113] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.114] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60700000 [0171.114] GetTickCount () returned 0x116252d [0171.114] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.115] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.116] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.116] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.116] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.116] GetTickCount () returned 0x116253d [0171.116] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.118] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60780000 [0171.118] GetTickCount () returned 0x116253d [0171.118] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.119] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60780000 [0171.119] GetTickCount () returned 0x116253d [0171.119] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.120] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.120] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.120] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.121] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.121] GetTickCount () returned 0x116253d [0171.121] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.122] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60800000 [0171.123] GetTickCount () returned 0x116253d [0171.123] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.124] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60800000 [0171.124] GetTickCount () returned 0x116253d [0171.124] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.125] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.125] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.125] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.125] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.126] GetTickCount () returned 0x116253d [0171.126] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.127] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60880000 [0171.127] GetTickCount () returned 0x116253d [0171.128] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.129] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60880000 [0171.129] GetTickCount () returned 0x116253d [0171.129] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.130] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.130] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.130] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.131] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.131] GetTickCount () returned 0x116254d [0171.131] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.133] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60900000 [0171.133] GetTickCount () returned 0x116254d [0171.133] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.134] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60900000 [0171.134] GetTickCount () returned 0x116254d [0171.134] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.135] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.136] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.136] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.136] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.136] GetTickCount () returned 0x116254d [0171.136] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.138] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60980000 [0171.138] GetTickCount () returned 0x116254d [0171.138] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.139] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60980000 [0171.139] GetTickCount () returned 0x116254d [0171.139] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.140] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.141] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.141] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.141] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.141] GetTickCount () returned 0x116254d [0171.141] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.146] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60a00000 [0171.146] GetTickCount () returned 0x116254d [0171.146] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.147] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60a00000 [0171.147] GetTickCount () returned 0x116255c [0171.147] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.148] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.148] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.148] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.148] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.149] GetTickCount () returned 0x116255c [0171.149] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.150] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60a80000 [0171.151] GetTickCount () returned 0x116255c [0171.151] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.152] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60a80000 [0171.152] GetTickCount () returned 0x116255c [0171.152] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.153] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.153] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.153] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.153] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.154] GetTickCount () returned 0x116255c [0171.154] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.155] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60b00000 [0171.155] GetTickCount () returned 0x116255c [0171.156] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.157] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60b00000 [0171.157] GetTickCount () returned 0x116255c [0171.157] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.158] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.158] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.158] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.159] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.159] GetTickCount () returned 0x116255c [0171.159] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.161] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60b80000 [0171.161] GetTickCount () returned 0x116255c [0171.161] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.171] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60b80000 [0171.171] GetTickCount () returned 0x116256c [0171.171] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.172] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.172] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.172] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.172] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.172] GetTickCount () returned 0x116256c [0171.172] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.174] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60c00000 [0171.174] GetTickCount () returned 0x116256c [0171.174] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.176] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60c00000 [0171.176] GetTickCount () returned 0x116256c [0171.176] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.177] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.177] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.177] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.177] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.178] GetTickCount () returned 0x116257b [0171.178] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.179] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60c80000 [0171.179] GetTickCount () returned 0x116257b [0171.179] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.181] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60c80000 [0171.181] GetTickCount () returned 0x116257b [0171.181] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.182] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.182] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.182] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.182] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.182] GetTickCount () returned 0x116257b [0171.182] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.184] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60d00000 [0171.184] GetTickCount () returned 0x116257b [0171.184] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.185] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60d00000 [0171.185] GetTickCount () returned 0x116257b [0171.186] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.187] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.187] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.187] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.187] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.187] GetTickCount () returned 0x116257b [0171.187] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.190] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60d80000 [0171.190] GetTickCount () returned 0x116257b [0171.190] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.191] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60d80000 [0171.191] GetTickCount () returned 0x116257b [0171.191] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.192] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.193] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.193] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.193] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.193] GetTickCount () returned 0x116257b [0171.193] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.195] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60e00000 [0171.195] GetTickCount () returned 0x116258b [0171.195] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.196] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60e00000 [0171.196] GetTickCount () returned 0x116258b [0171.196] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.197] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.198] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.198] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.198] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.198] GetTickCount () returned 0x116258b [0171.198] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.200] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60e80000 [0171.200] GetTickCount () returned 0x116258b [0171.200] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.201] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60e80000 [0171.201] GetTickCount () returned 0x116258b [0171.201] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.203] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.203] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.203] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.203] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.204] GetTickCount () returned 0x116258b [0171.204] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.205] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60f00000 [0171.205] GetTickCount () returned 0x116258b [0171.205] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.207] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60f00000 [0171.207] GetTickCount () returned 0x116258b [0171.207] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.211] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.211] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.211] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.211] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.211] GetTickCount () returned 0x116259b [0171.211] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.213] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60f80000 [0171.213] GetTickCount () returned 0x116259b [0171.213] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.214] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x60f80000 [0171.214] GetTickCount () returned 0x116259b [0171.214] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.215] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.216] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.216] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.216] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.216] GetTickCount () returned 0x116259b [0171.216] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.218] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x61000000 [0171.218] GetTickCount () returned 0x116259b [0171.218] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.219] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x61000000 [0171.219] GetTickCount () returned 0x116259b [0171.219] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.220] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.220] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.221] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.221] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.221] GetTickCount () returned 0x116259b [0171.221] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.223] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x61080000 [0171.223] GetTickCount () returned 0x116259b [0171.223] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.224] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x61080000 [0171.224] GetTickCount () returned 0x116259b [0171.224] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0171.225] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.226] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.226] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.226] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.230] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.230] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.230] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.230] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.235] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.235] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.235] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.235] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.239] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.239] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.239] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.239] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.244] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.244] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.244] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.244] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.248] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.249] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.249] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.253] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.253] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.253] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.253] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.258] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.258] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.258] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.258] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.262] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.262] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.262] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.262] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.267] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.267] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.267] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.267] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.271] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.271] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.271] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.271] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.278] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.279] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.279] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.279] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.283] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.283] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.283] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.283] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.288] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.288] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.288] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.288] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.292] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.292] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.292] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.292] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.297] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.297] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.297] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.297] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.301] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.301] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.301] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.301] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.306] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.306] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.306] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.306] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.310] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.310] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.311] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.311] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.315] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.315] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.315] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.315] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.319] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.319] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.320] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.320] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.324] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.324] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.324] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.324] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.329] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.329] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.329] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.329] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.333] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.333] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.334] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.334] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.338] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.338] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.338] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.338] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.345] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.345] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.346] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.346] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.350] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.350] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.350] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.350] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.354] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.355] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.355] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.355] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.359] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.359] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.359] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.359] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.363] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.364] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.364] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.364] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.369] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.369] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.369] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.369] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.373] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.374] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.374] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.374] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.378] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.378] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.378] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.378] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.383] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.383] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.383] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.383] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.387] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.387] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.387] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.387] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.392] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.392] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.392] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.392] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.396] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.396] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.396] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.396] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.400] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.401] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.401] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.401] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.408] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.408] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.408] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.408] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.412] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.413] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.413] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.413] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.417] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.417] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.417] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.417] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.421] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.421] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.422] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.422] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.426] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.426] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.426] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.426] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.430] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.430] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.431] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.431] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.434] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.435] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.435] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.435] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.439] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.439] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.439] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.439] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.443] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.443] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.443] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.443] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.447] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.448] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.448] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.448] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.452] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.452] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.452] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.452] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.456] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.456] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.456] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.456] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.460] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.461] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.461] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.461] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.465] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.465] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.465] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.465] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.472] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.473] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.473] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.473] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.477] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.477] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.477] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.477] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.481] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.481] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.481] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.481] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.486] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.486] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.486] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.490] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.491] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.491] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.491] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.495] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.495] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.495] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.499] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.499] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.499] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.499] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.503] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.504] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.504] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.504] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.508] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.508] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.508] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.508] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.512] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.513] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.513] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.513] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.517] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.517] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.517] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.517] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.521] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.522] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.522] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.522] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.526] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.526] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.526] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.526] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.530] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.530] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.530] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.530] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.538] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.538] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.538] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.538] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.542] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.542] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.542] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.542] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.547] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.547] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.547] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.547] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.551] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.551] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.551] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.551] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.555] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.556] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.556] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.556] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.560] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.560] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.560] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.560] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.564] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.564] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.564] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.564] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.569] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.569] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.569] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.569] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.573] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.573] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.573] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.573] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.577] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.577] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.577] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.577] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.581] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.582] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.582] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.582] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.586] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.586] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.586] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.586] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.590] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.590] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.590] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.590] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.594] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.594] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.595] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.595] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.599] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.599] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.599] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.599] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.607] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.607] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.607] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.607] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.611] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.612] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.612] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.612] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.616] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.616] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.617] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.617] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.628] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.628] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.628] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.628] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.633] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.633] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.633] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.633] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.637] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.637] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.637] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.637] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.641] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.641] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.641] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.641] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.646] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.646] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.646] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.646] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.650] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.650] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.650] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.650] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.655] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.655] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.655] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.655] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.659] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.659] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.659] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.659] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.663] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.664] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.664] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.664] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.671] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.671] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.671] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.671] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.677] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.677] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.677] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.677] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.681] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.681] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.682] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.682] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.686] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.686] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.686] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.686] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.690] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.690] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.690] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.690] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.694] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.695] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.695] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.695] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.699] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.699] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.699] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.699] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.704] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.704] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.704] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.704] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.708] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.708] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.708] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.708] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.712] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.713] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.713] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.713] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.717] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.717] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.717] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.721] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.721] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.721] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.721] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.725] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.726] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.726] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.726] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.732] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.732] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.732] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.732] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.737] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.737] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.737] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.737] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.741] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.741] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.741] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.741] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.745] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.745] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.746] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.746] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.749] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.750] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.750] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.750] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.753] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.754] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.754] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.754] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.758] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.758] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.758] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.758] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.762] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.762] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.762] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.762] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.766] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.767] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.767] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.767] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.770] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.771] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.771] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.771] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.774] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.774] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.775] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.775] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.798] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.799] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.799] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.799] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.804] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.804] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.804] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.804] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.808] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.808] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.808] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.808] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.812] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.812] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.813] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.813] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.817] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.817] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.817] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.817] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.821] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.821] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.821] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.821] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.825] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.825] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.826] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.826] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.829] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.830] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.830] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.830] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.834] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.834] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.834] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.834] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.838] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.838] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.838] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.842] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.842] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.843] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.843] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.847] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.847] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.847] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.847] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.851] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.851] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.851] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.851] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.855] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.855] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.855] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.855] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.858] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.859] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.859] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.859] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.865] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.866] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.866] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.866] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.869] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.870] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.870] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.874] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.874] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.874] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.874] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.878] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.878] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.878] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.878] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.882] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.882] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.882] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.882] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.887] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.887] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.887] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.887] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.891] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.891] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.891] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.891] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.895] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.895] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.895] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.895] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.899] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.899] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.899] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.899] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.903] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.903] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.904] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.904] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.908] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.908] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.908] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.908] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.912] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.912] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.912] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.912] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.916] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.916] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.916] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.916] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.920] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.921] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.921] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.927] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.927] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.927] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.927] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.931] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.931] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.931] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.931] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.935] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.936] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.936] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.936] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.955] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.955] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.956] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.956] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.964] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.964] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.964] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.964] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.967] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.967] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.967] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.967] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.971] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.971] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.971] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.971] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.979] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.979] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.979] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.979] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0171.988] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0171.988] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0171.989] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0171.989] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.000] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.000] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.000] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.000] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.010] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.010] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.010] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.010] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.019] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.019] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.019] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.019] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.028] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.028] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.028] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.037] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.037] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.037] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.037] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.045] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.045] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.045] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.045] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.049] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.049] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.049] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.049] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.053] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.053] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.053] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.053] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.063] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.063] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.063] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.063] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.072] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.072] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.072] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.072] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.076] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.076] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.076] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.076] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.081] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.081] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.081] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.081] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.085] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.085] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.085] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.085] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.090] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.090] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.090] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.090] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.094] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.094] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.094] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.094] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.098] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.098] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.099] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.099] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.103] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.103] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.103] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.107] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.107] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.107] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.107] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.111] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.112] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.112] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.116] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.116] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.116] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.116] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.123] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.123] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.123] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.123] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.127] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.128] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.128] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.128] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.132] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.132] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.132] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.132] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.136] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.136] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.136] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.136] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.140] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.140] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.141] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.141] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.145] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.145] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.145] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.145] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.149] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.149] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.149] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.149] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.153] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.154] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.154] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.154] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.158] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.158] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.158] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.158] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.162] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.162] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.162] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.162] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.166] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.166] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.167] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.167] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.170] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.171] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.171] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.171] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.175] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.175] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.175] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.175] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.189] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.189] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.189] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.189] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.194] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.194] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.194] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.194] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.198] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.198] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.198] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.198] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.207] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.207] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.207] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.207] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.215] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.215] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.215] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.215] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.219] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.219] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.219] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.219] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.223] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.224] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.224] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.224] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.228] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.228] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.228] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.228] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.232] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.232] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.232] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.232] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.236] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.237] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.237] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.241] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.241] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.241] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.241] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.245] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.245] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.245] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.245] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.252] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.252] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.252] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.252] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.256] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.256] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.257] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.257] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.260] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.261] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.261] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.261] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.265] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.265] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.265] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.265] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.269] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.269] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.269] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.269] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.273] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.273] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.273] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.273] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.278] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.278] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.278] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.278] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.282] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.282] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.282] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.282] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.287] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.287] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.287] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.287] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.291] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.291] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.291] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.291] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.295] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.295] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.295] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.296] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.300] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.300] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.300] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.300] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.304] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.304] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.305] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.305] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.308] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.308] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.308] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.308] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.319] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.319] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.319] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.319] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.323] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.324] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.324] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.324] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.331] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.331] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.331] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.332] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.335] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.336] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.336] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.336] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.344] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.344] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.344] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.348] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.348] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.349] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.349] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.357] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.357] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.357] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.357] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.366] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.366] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.366] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.366] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.379] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.380] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.380] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.380] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.387] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.387] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.387] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.387] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.391] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.391] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.391] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.391] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.395] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.396] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.396] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.396] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.400] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.400] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.400] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.400] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.404] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.404] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.404] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.404] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.408] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.408] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.409] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.409] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.412] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.413] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.413] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.413] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.420] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.420] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.420] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.420] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.425] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.426] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.426] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.426] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.430] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.431] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.431] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.431] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.435] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.435] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.435] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.435] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.442] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.442] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.442] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.442] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.449] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.449] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.449] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.449] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.453] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.453] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.453] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.453] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.457] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.457] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.457] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.458] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.462] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.462] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.462] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.466] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.466] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.466] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.472] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.472] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.472] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.472] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.477] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.478] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.478] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.478] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.482] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.482] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.482] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.482] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.488] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.488] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.488] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.488] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.493] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.493] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.493] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.493] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.497] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.497] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.497] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.497] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.503] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.503] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.503] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.503] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.508] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.508] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.508] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.508] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.515] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.515] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.515] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.515] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.519] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.519] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.519] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.519] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.523] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.524] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.524] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.524] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.528] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.528] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.528] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.528] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.532] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.532] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.532] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.532] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.537] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.537] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.537] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.537] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.541] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.541] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.541] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.541] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.545] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.545] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.546] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.546] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.550] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.550] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.550] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.550] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.554] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.554] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.554] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.554] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.558] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.558] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.559] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.559] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.563] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.563] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.563] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.563] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.584] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.585] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.585] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.585] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.600] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.604] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.604] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.604] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.620] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.620] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.620] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.620] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.633] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.637] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.637] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.637] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.651] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.651] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.651] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.651] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.655] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.655] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.655] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.656] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.660] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.660] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.660] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.660] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.664] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.664] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.665] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.665] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.669] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.669] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.669] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.669] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.673] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.673] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.673] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.673] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.678] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.678] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.678] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.678] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.682] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.682] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.682] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.682] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.686] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.686] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.686] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.686] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.690] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.691] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.691] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.691] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.695] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.695] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.695] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.695] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.699] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.699] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.699] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.700] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.704] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.704] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.704] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.704] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.710] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.710] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.710] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.711] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.715] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.715] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.715] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.715] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.719] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.719] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.719] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.719] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.723] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.723] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.723] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.723] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.727] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.727] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.727] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.727] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.731] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.731] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.731] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.731] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.736] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.736] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.736] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.736] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.740] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.740] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.740] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.740] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.744] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.744] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.745] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.745] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.750] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.750] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.750] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.750] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.811] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.811] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.811] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.811] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.816] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.817] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.817] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.817] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.821] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.821] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.821] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.821] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.825] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.826] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.826] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.826] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.830] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.830] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.830] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.830] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.835] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.835] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.835] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.835] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.841] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.842] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.842] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.842] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.846] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.846] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.846] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.846] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.851] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.851] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.851] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.851] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.855] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.855] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.855] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.855] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.860] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.860] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.860] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.860] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.864] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.865] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.865] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.865] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.869] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.869] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.869] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.869] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.873] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.873] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.873] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.873] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.878] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.878] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.878] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.878] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.883] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.883] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.883] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.883] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.888] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.888] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.888] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.888] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.892] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.892] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.892] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.892] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.896] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.897] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.897] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.897] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.904] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.904] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.904] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.904] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.908] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.908] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.908] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.908] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.912] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.912] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.913] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.913] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.916] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.917] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.917] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.917] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.921] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.921] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.921] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.926] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.926] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.926] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.926] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.930] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.930] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.930] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.930] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.934] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.935] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.935] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.939] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.939] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.939] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.943] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.943] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.943] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.943] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.948] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.948] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.948] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.948] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.953] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.953] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.953] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.953] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.957] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.957] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.957] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.957] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.961] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.962] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.962] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.962] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.969] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.969] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.969] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.969] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.973] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.973] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.973] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.973] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.977] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.978] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.978] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.978] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.982] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.982] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.982] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.982] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.986] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.986] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.986] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.986] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.990] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.990] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.991] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.991] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.995] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.995] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.995] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.995] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0172.999] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0172.999] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0172.999] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0172.999] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.003] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.004] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.004] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.004] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.008] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.008] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.008] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.008] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.012] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.012] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.012] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.012] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.017] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.017] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.017] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.017] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.021] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.021] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.022] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.022] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.026] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.026] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.026] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.026] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.033] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.034] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.034] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.034] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.038] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.038] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.038] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.038] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.042] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.043] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.043] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.043] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.047] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.047] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.047] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.047] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.051] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.051] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.051] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.051] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.055] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.056] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.056] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.056] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.070] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.070] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.070] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.070] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.074] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.074] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.074] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.074] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.080] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.081] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.081] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.081] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.089] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.089] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.089] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.089] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.093] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.093] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.094] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.094] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.102] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.103] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.103] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.107] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.107] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.107] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.107] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.111] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.112] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.112] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.120] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.120] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.120] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.120] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.128] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.129] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.129] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.129] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.134] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.134] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.134] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.134] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.138] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.139] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.139] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.139] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.143] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.143] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.143] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.143] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.147] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.148] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.148] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.148] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.152] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.152] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.152] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.152] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.156] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.157] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.157] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.157] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.164] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.164] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.164] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.164] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.168] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.168] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.168] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.168] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.173] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.173] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.173] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.173] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.185] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.185] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.185] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.185] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.190] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.190] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.190] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.190] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.194] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.195] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.195] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.195] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.199] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.199] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.199] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.199] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.203] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.203] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.204] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.204] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.208] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.208] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.208] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.208] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.212] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.212] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.212] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.212] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.216] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.217] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.217] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.217] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.221] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.221] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.221] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.221] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.228] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.228] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.228] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.228] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.232] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.233] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.233] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.233] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.237] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.237] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.237] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.242] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.242] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.242] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.242] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.246] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.246] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.246] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.247] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.251] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.251] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.251] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.251] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.255] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.255] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.256] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.256] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.260] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.260] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.260] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.260] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.264] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.264] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.264] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.264] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.279] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.281] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.281] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.281] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.286] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.286] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.287] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.287] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.294] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.294] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.294] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.294] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.298] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.298] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.298] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.298] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.306] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.306] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.306] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.306] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.310] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.310] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.311] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.311] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.315] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.315] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.315] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.315] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.319] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.319] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.320] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.320] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.324] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.324] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.324] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.324] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.328] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.328] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.329] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.329] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.333] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.333] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.333] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.333] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.337] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.337] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.337] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.337] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.341] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.342] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.342] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.342] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.346] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.347] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.347] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.347] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.351] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.351] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.351] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.351] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.356] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.356] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.356] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.356] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.362] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.363] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.363] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.363] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.367] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.367] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.367] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.367] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.371] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.371] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.371] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.371] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.376] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.376] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.376] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.376] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.380] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.380] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.380] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.380] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.385] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.385] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.385] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.385] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.389] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.389] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.389] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.389] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.393] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.394] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.394] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.394] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.398] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.398] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.398] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.398] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.402] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.402] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.403] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.403] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.407] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.407] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.407] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.407] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.411] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.411] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.411] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.411] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.415] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.416] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.416] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.416] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.420] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.420] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.420] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.420] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.429] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.429] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.429] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.429] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.437] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.437] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.437] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.437] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.447] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.447] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.447] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.447] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.456] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.456] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.456] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.456] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.466] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.466] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.466] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.476] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.476] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.476] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.476] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.485] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.486] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.486] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.493] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.493] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.493] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.493] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.497] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.497] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.497] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.497] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.501] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.501] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.501] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.501] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.505] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.505] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.505] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.505] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.509] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.510] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.510] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.510] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.514] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.514] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.514] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.514] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.518] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.518] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.518] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.518] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.522] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.522] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.522] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.522] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.526] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.526] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.526] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.526] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.530] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.530] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.530] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.530] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.534] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.534] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.534] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.534] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.538] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.538] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.538] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.538] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.542] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.542] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.542] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.542] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.546] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.546] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.547] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.547] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.551] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.551] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.551] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.551] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.557] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.557] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.558] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.558] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.561] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.562] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.562] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.562] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.566] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.566] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.566] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.566] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.570] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.570] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.570] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.570] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.574] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.574] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.574] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.575] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.579] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.579] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.579] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.579] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.583] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.583] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.583] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.583] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.587] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.587] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.587] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.587] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.591] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.591] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.591] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.591] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.595] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.596] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.596] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.596] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.599] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.599] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.600] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.600] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.604] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.605] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.605] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.605] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.608] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.609] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.609] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.609] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.613] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.613] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.613] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.613] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.619] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.620] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.620] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.620] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.624] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.624] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.624] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.624] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.628] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.628] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.628] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.628] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.632] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.632] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.633] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.633] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.636] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.637] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.637] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.637] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.641] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.641] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.641] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.641] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.645] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.645] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.645] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.645] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.649] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.649] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.649] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.649] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.653] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.653] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.653] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.653] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.657] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.658] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.658] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.658] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.662] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.662] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.662] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.662] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.666] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.666] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.666] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.666] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.670] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.670] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.670] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.670] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.676] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.676] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.676] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.676] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.680] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.680] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.680] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.680] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.686] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.687] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.687] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.687] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.691] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.691] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.691] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.691] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.695] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.695] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.695] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.695] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.699] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.699] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.699] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.700] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.705] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.706] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.706] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.706] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.710] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.710] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.710] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.710] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.714] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.714] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.714] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.714] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.718] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.718] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.718] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.718] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.722] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.722] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.722] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.722] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.726] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.726] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.726] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.726] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.730] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.730] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.730] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.730] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.734] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.734] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.734] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.735] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.738] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.738] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.739] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.739] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.743] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.743] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.743] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.743] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.750] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.750] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.750] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.750] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.754] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.754] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.754] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.754] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.757] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.758] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.758] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.758] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.761] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.762] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.762] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.762] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.766] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.766] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.766] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.766] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.769] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.770] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.770] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.770] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.774] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.775] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.775] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.775] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.779] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.779] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.779] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.779] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.793] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.793] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.793] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.793] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.797] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.798] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.798] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.798] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.809] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.810] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.810] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.810] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.817] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.817] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.817] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.817] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.822] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.822] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.822] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.822] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.826] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.826] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.826] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.827] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.831] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.831] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.831] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.831] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.835] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.835] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.835] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.835] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.839] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.840] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.840] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.840] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.844] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.844] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.844] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.844] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.848] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.848] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.848] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.852] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.853] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.853] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.853] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.857] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.857] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.857] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.857] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.861] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.861] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.861] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.862] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.866] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.866] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.866] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.866] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.870] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.870] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.870] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.874] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.874] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.874] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.874] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.881] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.881] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.881] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.881] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.885] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.886] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.886] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.886] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.890] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.890] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.890] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.890] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.894] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.894] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.894] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.894] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.898] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.898] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.898] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.898] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.902] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.902] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.902] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.903] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.906] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.907] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.907] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.907] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.911] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.911] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.911] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.911] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.915] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.915] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.915] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.915] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.919] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.920] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.920] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.920] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.924] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.924] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.924] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.924] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.928] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.928] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.928] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.928] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.932] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.932] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.932] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.932] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.936] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.937] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.937] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.937] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.941] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.941] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.941] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.948] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.948] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.948] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.948] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.952] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.952] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.952] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.953] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.956] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.956] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.957] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.957] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.961] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.961] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.961] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.961] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.965] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.965] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.965] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.965] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.969] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.969] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.969] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.969] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.973] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.973] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.973] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.974] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.977] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.978] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.978] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.978] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.982] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.982] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.982] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.982] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.986] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.986] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.987] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.987] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.990] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.991] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.991] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.991] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0173.996] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0173.996] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0173.996] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0173.996] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.004] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.004] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.004] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.004] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.010] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.011] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.011] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.011] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.015] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.015] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.015] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.015] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.019] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.019] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.020] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.020] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.024] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.024] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.024] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.024] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.028] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.028] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.028] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.033] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.033] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.034] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.034] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.037] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.038] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.038] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.038] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.041] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.042] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.042] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.042] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.046] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.046] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.046] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.046] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.050] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.050] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.050] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.050] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.054] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.055] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.055] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.055] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.059] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.059] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.059] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.059] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.064] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.064] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.064] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.064] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.068] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.068] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.068] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.069] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.075] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.075] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.075] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.075] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.079] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.080] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.080] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.080] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.084] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.084] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.084] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.084] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.094] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.094] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.094] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.095] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.105] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.105] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.105] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.105] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.121] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.121] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.121] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.122] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.129] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.129] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.129] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.129] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.134] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.134] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.134] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.134] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.140] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.141] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.141] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.141] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.145] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.145] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.145] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.145] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.149] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.149] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.149] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.149] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.154] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.154] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.154] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.154] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.158] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.158] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.158] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.158] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.162] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.162] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.162] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.162] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.166] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.166] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.166] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.166] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.171] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.171] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.171] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.171] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.200] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.200] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.200] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.200] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.207] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.207] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.207] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.207] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.211] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.211] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.211] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.211] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.215] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.215] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.215] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.215] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.224] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.224] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.224] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.224] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.228] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.228] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.229] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.229] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.233] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.233] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.233] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.233] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.237] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.237] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.238] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.238] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.242] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.242] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.242] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.242] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.250] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.250] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.250] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.251] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.255] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.255] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.255] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.255] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.260] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.260] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.260] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.260] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.264] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.264] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.264] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.264] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.271] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.271] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.271] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.271] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.275] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.275] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.275] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.275] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.284] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.285] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.285] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.285] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.294] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.295] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.295] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.295] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.304] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.304] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.304] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.304] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.313] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.313] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.313] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.313] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.326] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.327] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.327] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.327] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.338] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.339] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.339] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.339] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.347] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.347] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.347] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.347] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.351] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.351] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.351] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.351] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.356] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.356] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.356] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.356] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.360] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.360] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.360] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.360] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.364] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.365] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.365] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.365] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.369] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.369] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.369] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.369] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.373] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.373] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.373] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.373] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.377] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.378] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.378] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.378] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.382] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.382] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.382] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.382] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.386] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.386] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.386] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.386] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.390] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.390] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.390] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.391] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.394] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.395] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.395] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.395] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.399] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.399] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.399] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.399] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.405] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.405] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.405] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.405] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.409] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.410] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.410] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.410] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.414] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.414] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.414] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.414] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.418] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.418] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.419] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.419] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.423] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.423] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.423] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.423] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.427] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.427] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.427] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.427] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.440] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.440] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.440] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.440] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.445] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.445] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.445] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.445] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.453] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.454] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.454] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.454] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.463] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.463] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.463] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.463] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.474] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.475] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.475] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.475] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.484] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.485] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.485] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.485] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.494] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.494] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.494] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.494] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.502] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.502] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.502] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.502] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.515] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.515] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.515] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.515] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.527] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.528] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.528] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.528] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.542] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.542] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.542] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.542] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.547] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.548] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.548] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.548] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.552] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.552] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.552] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.552] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.556] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.556] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.556] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.556] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.560] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.560] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.560] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.560] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.565] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.565] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.565] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.565] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.571] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.572] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.572] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.572] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.584] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.584] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.585] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.585] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.594] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.594] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.594] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.594] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.607] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.607] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.607] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.608] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.623] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.624] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.624] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.624] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.633] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.633] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.633] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.633] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.646] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.648] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.648] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.648] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.652] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.652] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.652] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.652] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.656] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.656] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.656] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.657] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.667] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.667] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.667] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.667] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.672] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.672] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.672] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.672] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.676] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.676] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.676] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.676] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.680] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.680] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.680] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.680] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.685] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.685] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.685] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.685] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.689] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.689] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.689] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.689] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.693] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.693] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.693] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.693] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.697] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.697] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.697] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.697] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.701] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.701] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.701] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.701] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.705] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.705] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.705] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.705] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.709] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.710] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.710] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.710] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.713] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.714] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.714] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.714] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.717] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.718] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.718] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.718] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.721] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.722] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.722] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.722] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.728] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.729] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.729] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.729] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.733] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.733] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.733] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.733] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.737] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.737] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.737] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.737] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.741] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.741] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.741] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.741] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.746] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.746] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.746] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.746] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.751] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.751] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.751] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.752] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.755] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.756] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.756] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.756] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.760] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.760] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.760] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.760] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.764] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.764] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.764] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.764] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.768] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.768] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.768] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.768] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.772] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.772] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.772] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.772] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.776] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.776] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.777] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.777] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.781] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.781] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.781] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.781] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.785] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.785] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.786] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.786] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.792] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.792] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.792] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.792] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.796] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.797] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.797] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.797] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.808] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.808] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.808] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.808] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.812] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.812] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.813] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.813] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.816] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.817] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.817] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.817] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.820] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.821] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.821] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.821] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.825] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.825] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.825] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.825] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.829] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.829] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.829] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.829] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.833] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.833] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.833] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.833] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.837] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.837] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.838] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.841] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.842] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.842] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.842] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.846] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.846] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.846] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.846] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.850] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.850] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.850] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.850] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.854] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.854] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.854] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.854] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.860] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.860] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.860] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.860] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.864] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.865] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.865] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.865] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.868] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.869] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.869] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.869] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.873] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.873] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.873] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.873] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.877] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.877] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.878] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.878] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.881] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.882] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.882] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.882] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.886] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.886] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.886] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.886] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.890] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.890] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.890] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.890] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.894] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.894] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.894] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.895] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.899] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.899] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.899] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.899] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.903] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.903] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.903] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.903] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.907] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.907] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.907] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.907] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.911] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.911] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.911] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.911] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.915] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.915] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.916] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.916] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.922] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.922] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.922] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.922] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.930] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.930] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.930] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.930] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.938] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.938] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.938] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.942] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.942] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.942] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.942] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.946] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.946] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.946] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.946] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.950] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.950] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.950] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.950] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.954] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.955] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.955] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.955] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.958] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.959] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.959] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.959] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.967] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.967] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.967] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.967] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.975] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.975] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.975] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.975] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.980] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.981] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.981] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.981] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.986] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.987] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.987] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.987] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.991] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.991] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.991] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.991] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.995] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.995] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.995] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.995] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0174.999] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0174.999] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0174.999] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0174.999] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.003] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.004] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.004] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.004] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.007] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.008] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.008] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.008] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.011] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.012] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.012] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.012] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.016] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.016] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.016] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.016] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.020] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.020] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.020] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.020] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.024] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.024] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.024] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.024] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.028] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.028] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.029] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.033] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.033] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.033] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.033] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.037] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.037] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.037] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.037] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.041] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.041] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.041] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.041] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.045] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.046] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.046] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.046] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.052] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.052] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.052] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.052] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.056] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.056] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.057] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.057] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.061] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.061] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.061] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.061] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.065] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.065] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.065] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.065] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.069] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.069] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.069] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.069] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.073] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.073] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.073] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.073] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.087] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.087] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.088] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.088] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.094] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.094] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.094] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.094] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.098] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.098] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.098] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.098] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.102] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.102] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.102] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.106] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.106] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.107] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.107] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.111] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.111] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.112] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.118] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.118] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.118] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.118] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.122] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.122] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.123] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.123] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.127] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.127] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.127] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.127] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.131] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.131] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.131] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.131] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.135] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.136] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.136] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.136] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.145] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.145] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.145] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.145] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.152] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.153] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.153] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.153] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.164] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.164] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.165] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.165] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.168] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.168] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.169] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.169] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.187] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.188] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.188] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.188] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.191] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.191] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.192] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.192] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.195] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.196] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.196] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.196] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.200] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.200] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.200] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.200] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.207] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.208] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.208] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.208] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.211] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.211] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.211] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.211] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.221] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.221] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.221] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.221] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.230] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.231] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.231] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.231] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.234] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.235] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.235] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.235] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.238] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.239] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.239] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.239] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.243] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.243] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.243] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.243] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.250] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.250] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.250] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.250] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.258] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.258] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.258] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.258] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.268] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.268] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.269] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.269] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.278] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.278] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.278] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.278] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.288] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.288] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.288] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.288] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.298] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.298] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.298] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.298] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.307] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.307] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.307] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.307] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.317] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.317] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.317] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.317] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.326] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.326] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.327] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.327] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.336] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.337] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.337] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.337] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.345] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.346] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.346] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.346] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.354] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.354] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.355] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.355] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.363] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.364] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.364] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.364] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.372] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.373] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.373] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.373] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.384] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.384] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.384] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.384] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.393] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.394] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.394] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.394] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.402] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.402] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.402] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.402] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.410] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.410] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.410] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.410] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.414] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.414] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.414] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.414] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.418] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.418] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.418] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.418] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.422] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.422] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.422] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.422] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.426] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.426] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.426] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.426] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.430] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.430] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.431] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.431] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.434] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.435] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.435] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.435] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.438] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.439] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.439] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.439] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.445] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.445] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.445] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.445] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.449] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.449] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.449] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.449] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.453] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.453] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.453] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.453] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.457] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.457] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.457] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.457] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.461] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.462] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.462] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.465] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.466] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.466] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.470] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.470] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.470] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.470] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.476] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.476] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.476] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.476] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.485] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.485] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.485] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.485] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.496] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.496] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.496] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.496] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.505] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.505] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.505] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.505] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.511] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.511] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.512] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.512] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.520] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.520] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.520] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.520] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.530] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.530] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.530] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.530] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.539] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.540] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.540] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.540] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.548] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.548] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.548] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.548] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.556] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.557] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.557] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.557] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.561] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.561] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.561] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.561] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.565] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.565] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.565] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.565] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.569] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.570] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.570] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.570] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.576] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.576] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.576] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.576] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.581] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.581] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.581] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.581] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.585] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.585] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.585] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.585] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.589] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.589] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.589] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.589] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.593] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.594] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.594] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.594] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.598] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.598] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.598] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.598] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.603] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.603] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.603] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.603] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.607] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.607] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.607] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.607] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.612] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.612] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.612] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.612] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.616] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.616] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.616] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.616] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.620] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.620] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.620] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.620] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.624] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.625] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.625] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.625] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.628] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.629] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.629] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.629] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.633] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.633] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.633] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.633] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.639] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.639] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.640] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.640] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.643] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.644] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.644] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.644] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.648] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.648] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.648] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.648] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.652] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.652] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.652] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.653] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.657] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.657] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.657] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.657] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.661] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.661] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.661] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.661] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.665] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.665] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.665] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.665] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.669] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.669] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.669] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.669] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.673] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.673] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.673] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.673] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.682] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.682] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.682] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.682] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.692] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.692] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.692] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.692] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.703] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.703] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.703] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.703] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.712] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.713] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.713] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.713] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.728] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.728] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.728] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.728] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.738] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.738] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.738] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.738] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.742] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.742] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.742] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.742] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.746] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.746] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.746] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.746] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.751] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.751] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.751] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.751] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.755] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.755] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.755] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.755] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.759] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.759] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.759] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.759] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.763] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.763] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.763] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.763] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.770] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.770] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.770] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.770] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.778] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.779] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.779] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.779] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.787] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.787] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.788] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.788] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.797] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.797] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.797] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.797] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.848] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.848] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.848] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.859] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.860] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.860] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.860] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.869] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.869] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.869] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.869] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.879] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.879] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.879] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.879] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.888] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.889] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.889] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.889] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.900] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.900] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.900] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.900] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.909] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.910] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.910] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.910] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.918] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.919] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.919] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.919] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.928] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.928] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.929] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.941] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.942] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.942] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.942] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.951] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.951] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.951] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.952] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.963] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.963] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.963] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.963] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.972] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.972] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.973] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.973] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.980] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.981] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.981] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.981] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.984] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.985] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.985] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.985] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.989] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.989] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.989] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.989] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.993] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.993] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.993] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.993] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0175.997] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0175.997] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0175.997] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0175.997] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.001] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.001] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.001] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.001] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.005] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.006] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.006] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.006] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.010] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.010] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.010] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.010] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.019] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.019] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.019] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.019] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.031] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.031] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.032] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.032] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.039] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.039] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.039] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.039] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.043] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.044] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.044] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.044] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.052] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.052] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.052] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.052] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.061] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.061] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.062] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.062] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.070] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.070] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.070] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.070] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.074] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.074] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.075] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.075] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.078] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.079] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.079] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.079] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.083] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.083] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.083] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.083] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.087] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.087] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.087] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.087] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.093] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.093] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.093] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.094] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.097] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.098] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.098] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.098] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.105] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.106] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.106] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.110] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.110] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.110] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.110] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.114] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.114] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.114] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.114] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.117] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.118] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.118] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.118] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.121] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.121] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.122] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.122] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.125] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.126] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.126] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.126] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.130] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.130] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.130] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.130] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.134] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.134] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.134] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.134] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.138] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.138] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.138] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.138] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.142] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.142] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.143] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.143] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.147] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.147] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.147] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.147] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.151] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.152] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.152] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.152] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.158] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.158] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.158] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.158] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.162] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.162] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.162] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.162] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.166] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.166] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.166] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.166] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.184] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.184] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.184] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.184] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.188] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.188] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.188] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.188] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.192] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.192] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.192] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.192] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.196] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.197] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.197] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.197] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.201] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.201] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.201] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.201] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.206] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.206] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.206] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.206] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.210] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.210] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.210] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.210] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.214] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.214] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.214] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.214] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.219] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.219] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.219] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.219] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.225] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.225] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.225] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.225] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.229] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.229] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.230] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.230] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.239] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.239] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.239] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.239] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.244] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.244] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.244] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.244] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.248] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.248] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.249] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.253] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.253] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.253] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.253] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.257] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.257] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.257] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.257] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.261] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.261] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.261] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.261] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.265] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.266] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.266] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.266] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.270] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.270] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.270] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.270] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.274] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.274] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.274] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.274] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.278] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.278] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.278] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.278] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.282] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.283] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.283] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.283] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.289] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.289] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.289] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.289] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.293] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.294] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.294] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.294] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.298] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.298] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.298] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.298] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.302] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.302] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.302] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.302] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.307] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.307] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.307] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.307] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.311] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.311] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.311] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.311] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.315] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.316] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.316] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.316] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.320] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.320] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.320] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.320] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.324] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.324] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.324] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.324] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.328] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.328] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.328] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.329] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.332] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.333] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.333] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.333] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.337] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.337] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.337] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.337] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.341] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.341] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.342] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.342] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.347] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.347] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.347] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.347] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.353] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.353] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.353] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.353] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.358] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.358] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.358] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.358] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.362] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.362] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.362] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.362] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.366] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.367] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.367] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.367] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.371] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.371] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.371] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.371] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.375] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.376] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.376] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.376] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.380] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.380] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.380] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.380] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.385] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.385] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.385] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.385] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.389] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.389] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.389] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.389] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.394] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.394] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.394] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.394] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.398] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.398] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.398] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.398] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.402] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.403] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.403] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.403] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.407] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.407] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.407] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.407] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.411] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.411] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.411] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.411] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.415] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.418] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.418] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.418] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.422] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.422] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.422] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.422] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.426] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.426] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.426] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.426] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.430] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.430] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.430] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.430] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.435] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.435] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.435] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.435] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.439] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.439] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.439] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.439] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.444] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.444] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.444] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.444] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.448] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.448] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.448] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.448] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.452] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.453] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.453] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.453] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.457] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.457] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.457] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.457] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.461] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.462] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.462] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.466] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.466] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.466] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.470] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.470] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.470] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.470] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.474] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.474] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.475] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.475] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.478] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.479] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.479] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.479] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.485] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.485] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.486] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.490] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.490] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.490] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.490] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.494] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.494] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.494] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.494] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.498] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.499] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.499] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.499] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.503] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.503] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.503] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.503] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.507] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.507] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.507] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.508] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.511] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.512] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.512] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.512] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.516] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.516] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.516] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.516] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.520] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.521] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.521] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.521] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.525] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.525] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.525] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.525] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.530] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.530] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.530] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.530] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.534] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.535] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.535] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.535] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.539] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.539] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.539] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.539] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.544] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.544] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.544] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.544] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.556] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.556] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.556] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.556] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.560] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.561] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.561] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.561] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.565] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.565] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.565] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.565] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.569] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.570] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.570] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.570] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.574] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.574] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.574] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.574] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.581] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.581] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.581] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.581] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.593] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.593] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.593] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.593] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.603] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.603] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.603] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.603] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.627] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.628] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.628] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.628] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.634] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.635] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.635] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.635] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.639] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.639] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.639] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.640] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.644] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.644] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.644] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.644] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.648] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.649] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.649] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.649] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.653] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.653] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.653] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.653] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.657] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.658] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.658] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.658] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.662] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.662] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.662] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.662] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.667] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.667] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.667] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.667] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.671] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.672] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.672] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.672] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.676] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.676] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.676] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.676] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.680] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.681] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.681] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.681] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.685] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.685] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.685] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.685] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.690] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.690] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.690] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.690] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.694] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.694] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.694] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.694] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.698] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.699] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.699] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.699] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.703] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.703] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.703] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.703] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.707] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.708] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.708] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.708] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.712] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.712] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.712] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.712] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.717] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.717] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.717] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.722] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.722] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.722] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.722] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.727] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.727] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.727] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.727] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.731] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.732] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.732] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.732] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.736] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.736] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.736] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.736] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.740] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.740] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.740] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.740] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.745] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.745] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.745] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.745] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.750] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.750] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.750] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.750] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.754] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.754] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.754] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.754] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.759] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.759] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.759] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.759] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.764] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.764] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.764] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.764] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.768] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.768] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.768] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.768] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.772] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.772] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.772] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.773] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.776] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.777] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.777] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.777] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.782] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.782] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.782] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.782] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.786] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.786] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.786] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.786] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.791] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.791] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.791] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.791] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.795] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.795] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.795] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.795] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.799] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.799] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.800] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.800] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.812] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.812] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.812] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.812] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.816] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.816] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.816] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.816] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.821] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.821] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.821] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.821] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.825] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.825] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.825] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.826] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.830] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.830] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.830] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.830] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.834] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.834] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.834] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.834] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.838] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.838] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.838] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.843] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.843] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.843] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.843] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.847] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.847] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.848] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.852] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.852] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.852] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.852] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.856] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.856] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.856] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.856] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.860] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.860] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.860] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.860] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.865] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.866] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.866] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.866] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.870] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.870] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.870] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.870] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.874] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.874] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.874] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.874] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.878] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.878] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.878] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.878] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.882] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.883] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.883] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.883] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.888] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.888] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.888] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.888] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.892] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.892] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.892] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.892] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.901] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.901] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.902] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.902] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.905] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.906] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.906] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.906] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.911] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.911] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.911] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.911] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.915] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.915] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.916] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.916] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.920] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.920] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.920] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.920] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.924] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.924] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.924] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.924] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.928] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.928] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.928] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.928] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.932] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.932] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.933] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.933] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.938] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.938] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.938] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.942] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.942] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.942] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.942] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.947] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.947] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.947] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.947] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.951] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.951] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.952] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.952] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.955] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.956] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.956] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.956] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.960] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.960] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.960] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.960] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.965] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.965] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.965] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.965] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.969] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.969] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.969] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.969] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.973] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.973] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.973] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.973] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.977] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.978] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.978] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.978] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.981] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.982] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.982] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.982] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.986] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.986] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.986] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.986] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.991] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.992] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.992] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.992] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0176.996] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0176.996] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0176.996] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0176.996] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.000] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.000] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.000] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.000] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.004] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.004] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.004] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.004] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.008] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.008] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.009] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.009] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.012] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.013] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.013] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.013] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.018] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.018] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.018] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.018] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.022] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.022] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.023] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.023] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.026] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.027] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.027] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.027] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.031] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.031] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.031] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.031] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.035] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.035] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.035] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.035] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.039] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.039] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.039] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.039] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.043] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.043] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.044] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.044] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.049] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.049] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.049] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.049] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.053] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.053] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.053] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.054] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.057] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.058] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.058] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.058] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.062] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.063] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.063] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.063] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.067] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.067] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.067] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.067] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.071] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.071] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.071] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.071] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.077] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.077] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.077] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.077] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.081] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.081] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.081] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.081] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.085] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.085] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.085] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.085] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.089] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.089] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.089] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.089] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.093] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.093] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.093] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.093] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.098] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.098] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.098] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.098] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.102] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.102] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.102] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.107] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.108] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.108] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.108] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.112] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.112] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.112] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.116] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.116] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.116] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.116] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.120] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.120] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.120] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.120] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.124] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.125] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.125] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.125] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.129] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.129] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.129] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.129] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.133] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.133] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.133] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.133] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.137] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.138] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.138] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.138] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.143] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.143] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.143] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.143] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.147] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.147] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.147] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.147] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.151] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.151] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.151] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.152] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.156] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.156] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.156] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.156] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.160] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.160] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.160] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.160] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.164] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.164] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.164] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.164] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.179] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.180] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.180] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.180] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.184] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.184] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.184] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.184] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.189] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.189] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.189] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.189] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.193] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.194] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.194] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.194] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.198] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.198] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.198] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.198] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.202] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.202] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.202] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.202] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.208] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.208] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.208] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.208] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.212] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.212] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.212] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.212] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.216] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.217] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.217] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.217] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.220] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.221] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.221] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.221] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.225] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.225] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.225] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.225] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.229] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.230] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.230] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.230] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.234] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.234] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.234] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.234] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.238] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.238] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.238] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.238] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.243] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.244] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.244] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.244] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.249] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.249] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.249] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.249] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.254] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.254] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.254] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.254] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.258] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.258] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.258] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.258] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.262] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.262] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.262] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.262] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.266] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.266] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.266] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.266] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.270] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.271] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.271] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.271] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.275] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.275] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.275] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.275] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.280] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.280] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.280] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.280] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.283] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.283] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.284] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.284] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.287] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.287] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.287] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.287] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.290] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.290] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.290] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.290] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.294] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.294] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.294] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.294] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.297] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.297] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.297] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.297] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.302] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.302] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.302] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.302] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.305] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.305] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.305] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.305] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.309] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.309] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.309] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.309] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.315] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.315] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.315] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.315] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.319] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.319] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.319] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.319] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.322] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.322] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.322] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.322] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.325] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.326] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.326] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.326] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.329] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.329] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.329] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.329] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.332] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.332] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.332] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.332] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.336] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.336] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.336] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.336] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.339] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.339] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.340] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.343] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.343] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.343] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.343] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.346] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.346] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.347] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.347] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.350] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.350] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.350] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.350] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.355] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.355] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.355] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.355] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.358] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.359] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.359] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.359] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.363] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.363] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.363] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.363] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.366] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.366] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.366] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.366] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.370] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.370] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.370] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.370] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.373] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.374] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.374] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.374] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.377] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.377] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.377] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.377] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.380] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.381] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.381] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.381] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.384] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.384] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.384] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.384] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.387] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.387] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.387] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.387] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.392] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.393] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.393] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.393] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.396] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.396] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.397] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.397] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.400] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.400] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.400] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.400] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.403] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.404] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.404] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.404] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.407] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.407] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.407] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.407] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.410] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.411] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.411] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.411] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.414] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.414] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.414] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.414] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.417] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.417] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.417] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.418] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.421] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.421] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.421] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.421] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.424] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.425] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.425] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.425] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.428] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.428] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.428] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.428] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.431] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.432] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.432] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.432] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.437] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.437] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.437] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.437] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.440] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.440] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.440] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.440] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.443] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.444] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.444] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.444] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.447] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.447] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.447] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.447] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.450] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.450] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.451] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.451] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.454] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.454] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.454] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.454] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.458] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.458] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.458] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.461] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.462] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.462] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.465] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.465] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.465] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.465] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.469] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.469] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.469] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.469] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.472] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.472] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.473] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.473] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.477] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.478] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.478] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.478] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.481] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.481] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.481] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.481] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.485] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.485] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.485] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.485] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.488] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.488] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.489] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.489] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.492] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.492] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.492] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.492] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.496] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.496] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.496] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.496] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.499] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.500] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.500] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.500] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.503] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.503] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.503] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.503] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.506] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.506] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.506] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.506] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.510] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.510] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.510] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.510] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.521] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.521] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.521] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.521] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.524] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.524] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.524] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.524] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.528] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.528] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.528] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.528] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.531] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.531] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.531] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.531] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.535] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.535] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.535] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.535] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.538] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.538] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.538] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.538] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.541] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.541] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.542] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.542] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.545] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.545] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.545] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.545] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.548] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.548] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.548] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.548] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.551] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.552] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.552] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.552] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.555] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.555] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.556] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.556] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.559] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.559] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.559] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.559] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.568] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.568] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.568] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.569] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.572] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.572] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.572] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.572] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.576] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.576] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.576] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.576] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.579] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.579] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.580] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.580] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.583] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.583] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.583] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.583] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.586] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.586] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.586] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.586] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.590] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.590] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.590] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.590] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.593] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.593] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.593] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.593] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.596] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.597] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.597] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.597] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.600] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.600] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.600] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.600] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.605] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.606] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.606] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.606] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.611] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.611] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.611] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.611] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.614] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.614] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.614] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.614] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.617] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.617] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.618] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.618] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.621] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.621] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.621] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.621] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.624] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.624] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.624] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.624] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.628] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.628] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.628] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.628] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.631] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.631] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.631] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.631] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.634] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.635] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.635] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.635] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.638] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.638] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.638] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.638] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.641] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.642] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.642] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.642] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.645] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.645] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.645] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.645] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.648] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.648] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.648] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.648] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.652] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.652] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.652] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.652] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.657] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.657] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.657] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.657] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.660] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.660] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.660] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.660] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.663] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.663] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.663] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.663] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.666] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.667] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.667] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.667] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.670] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.670] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.670] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.670] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.673] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.673] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.673] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.673] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.677] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.677] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.677] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.677] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.680] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.680] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.680] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.680] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.683] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.684] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.684] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.684] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.687] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.687] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.687] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.687] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.690] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.690] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.690] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.690] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.693] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.693] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.693] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.693] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.696] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.696] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.697] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.697] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.702] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.702] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.702] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.702] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.705] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.705] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.705] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.705] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.708] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.709] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.709] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.709] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.712] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.712] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.712] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.712] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.715] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.715] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.716] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.716] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.719] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.719] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.719] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.719] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.722] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.722] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.722] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.722] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.726] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.726] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.726] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.726] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.729] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.729] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.729] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.730] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.733] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.733] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.733] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.733] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.736] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.736] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.736] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.736] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.740] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.740] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.740] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.740] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.743] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.743] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.743] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.743] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.747] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.747] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.747] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.747] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.752] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.752] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.752] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.752] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.755] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.755] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.755] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.755] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.759] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.759] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.759] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.759] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.762] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.763] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.763] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.763] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.766] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.766] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.766] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.766] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.769] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.769] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.769] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.769] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.772] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.773] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.773] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.773] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.776] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.776] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.776] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.776] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.779] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.780] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.780] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.780] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.783] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.783] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.783] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.783] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.786] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.786] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.786] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.786] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.793] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.793] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.793] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.793] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.799] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.799] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.799] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.799] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.810] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.810] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.810] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.810] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.814] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.814] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.814] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.814] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.818] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.818] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.819] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.819] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.822] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.823] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.823] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.823] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.827] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.827] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.827] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.827] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.831] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.831] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.831] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.831] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.835] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.835] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.836] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.836] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.840] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.840] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.840] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.840] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.844] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.844] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.844] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.844] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.850] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.851] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.851] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.851] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.855] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.855] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.855] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.855] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.859] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.860] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.860] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.860] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.864] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.864] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.864] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.864] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.868] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.868] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.868] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.868] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.872] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.872] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.872] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.872] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.876] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.876] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.876] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.876] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.880] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.881] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.881] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.881] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.884] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.884] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.885] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.885] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.888] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.889] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.889] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.889] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.893] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.893] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.893] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.893] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.896] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.897] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.897] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.897] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.902] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.903] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.903] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.903] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.906] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.907] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.907] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.907] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.910] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.910] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.910] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.911] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.914] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.914] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.914] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.914] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.918] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.918] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.918] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.918] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.922] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.922] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.922] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.922] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.926] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.926] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.927] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.927] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.930] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.931] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.931] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.931] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.935] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.935] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.935] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.939] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.939] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.939] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.943] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.943] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.943] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.943] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.953] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.953] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.953] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.953] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.957] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.958] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.958] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.958] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.961] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.962] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.962] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.962] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.966] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.966] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.966] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.966] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.970] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.970] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.970] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.970] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.974] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.974] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.974] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.974] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.978] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.978] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.978] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.978] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.982] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.982] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.983] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.983] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.986] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.987] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.987] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.987] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.990] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.991] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.991] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.991] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.995] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.995] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.995] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.995] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0177.999] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0177.999] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0177.999] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0177.999] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.005] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.005] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.005] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.005] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.009] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.009] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.009] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.009] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.013] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.013] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.014] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.014] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.017] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.017] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.017] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.018] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.021] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.021] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.022] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.022] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.025] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.025] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.025] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.026] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.029] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.029] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.029] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.030] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.033] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.033] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.034] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.034] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.037] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.037] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.037] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.037] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.041] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.041] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.041] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.041] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.045] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.045] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.046] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.046] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.049] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.049] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.049] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.049] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.053] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.053] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.054] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.054] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.060] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.060] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.060] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.060] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.064] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.064] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.064] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.064] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.068] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.068] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.068] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.068] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.072] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.072] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.072] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.072] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.076] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.077] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.077] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.077] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.081] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.081] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.081] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.081] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.085] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.085] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.085] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.085] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.089] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.089] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.089] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.089] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.093] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.093] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.093] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.094] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.097] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.097] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.098] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.098] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.102] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.102] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.102] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.106] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.106] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.106] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.110] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.110] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.110] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.111] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.116] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.116] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.117] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.117] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.120] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.121] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.121] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.121] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.124] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.125] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.125] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.125] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.128] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.129] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.129] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.129] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.132] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.133] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.133] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.133] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.137] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.137] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.137] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.137] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.141] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.141] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.141] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.141] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.145] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.145] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.145] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.145] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.149] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.149] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.149] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.149] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.153] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.154] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.154] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.154] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.158] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.158] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.158] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.158] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.162] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.162] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.162] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.162] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.166] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.178] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.178] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.178] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.182] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.182] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.182] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.182] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.186] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.186] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.187] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.187] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.190] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.191] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.191] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.191] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.195] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.195] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.195] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.195] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.198] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.199] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.199] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.199] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.203] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.203] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.203] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.203] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.207] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.207] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.207] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.207] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.211] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.211] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.212] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.212] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.215] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.216] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.216] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.216] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.219] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.219] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.220] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.220] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.232] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.232] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.233] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.233] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.237] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.237] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.237] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.241] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.241] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.241] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.241] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.246] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.246] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.246] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.246] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.250] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.250] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.250] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.250] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.254] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.254] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.254] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.254] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.258] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.258] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.258] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.259] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.263] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.263] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.263] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.263] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.267] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.267] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.267] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.267] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.271] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.271] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.271] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.271] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.275] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.275] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.275] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.276] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.279] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.280] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.280] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.280] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.286] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.286] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.286] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.286] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.290] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.291] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.291] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.291] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.295] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.295] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.295] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.295] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.299] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.299] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.299] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.299] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.303] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.303] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.303] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.303] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.308] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.308] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.308] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.308] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.311] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.312] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.312] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.312] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.316] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.316] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.316] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.316] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.320] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.320] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.320] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.320] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.324] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.324] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.324] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.324] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.328] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.328] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.328] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.328] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.332] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.332] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.332] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.332] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.336] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.336] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.336] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.336] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.340] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.340] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.340] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.346] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.346] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.347] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.347] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.350] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.351] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.351] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.351] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.355] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.355] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.355] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.355] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.359] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.359] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.359] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.359] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.363] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.363] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.363] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.363] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.367] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.367] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.367] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.367] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.372] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.373] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.373] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.373] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.377] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.377] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.377] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.377] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.397] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.397] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.397] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.397] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.445] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.445] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.445] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.445] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.491] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.491] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.491] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.491] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.536] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.537] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.537] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.537] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.541] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.541] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.542] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.542] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0178.598] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0178.602] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0178.602] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0178.602] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.307] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.307] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.307] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.308] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.344] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.344] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.344] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.348] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.348] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.348] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.348] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.378] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.378] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.378] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.378] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.382] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.382] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.382] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.382] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.386] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.387] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.387] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.387] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.391] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.391] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.391] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.391] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.395] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.395] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.395] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.395] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.399] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.399] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.400] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.400] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.403] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.404] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.404] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.404] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.407] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.408] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.408] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.408] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.411] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.411] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.411] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.411] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.415] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.416] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.416] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.416] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.420] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.420] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.420] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.420] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.424] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.424] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.424] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.424] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.428] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.428] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.428] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.428] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.432] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.432] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.432] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.432] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.436] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.437] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.437] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.437] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.443] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.443] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.443] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.443] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.447] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.447] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.447] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.447] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.451] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.451] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.451] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.451] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.455] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.455] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.456] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.456] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.465] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.465] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.465] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.465] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.469] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.469] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.469] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.469] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.473] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.473] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.473] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.473] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.477] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.478] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.478] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.478] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.482] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.482] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.482] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.482] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.486] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.486] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.486] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.486] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.490] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.490] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.490] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.490] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.494] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.494] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.495] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.498] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.499] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.499] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.499] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.502] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.502] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.503] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.503] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.509] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.509] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.509] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.509] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.513] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.513] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.513] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.513] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.517] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.517] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.517] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.517] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.521] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.521] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.521] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.522] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.525] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.526] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.526] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.526] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.529] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.530] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.530] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.530] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.534] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.534] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.534] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.534] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.537] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.538] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.538] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.538] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.541] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.542] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.542] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.542] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.546] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.546] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.546] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.546] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.550] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.550] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.550] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.550] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.554] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.554] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.554] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.554] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.558] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.559] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.559] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.559] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.563] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.563] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.563] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.563] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.567] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.567] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.567] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.567] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.574] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.574] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.574] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.574] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.582] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.582] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.582] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.582] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.590] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.590] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.590] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.590] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.594] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.594] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.594] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.594] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.597] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.598] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.598] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.598] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.602] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.603] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.603] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.603] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.607] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.607] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.607] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.607] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.616] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.616] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.616] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.616] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.624] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.624] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.624] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.624] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.633] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.633] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.633] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.633] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.643] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.644] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.644] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.644] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.648] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.648] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.648] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.648] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.652] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.652] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.652] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.652] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.656] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.657] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.657] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.657] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.661] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.661] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.661] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.661] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.665] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.665] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.665] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.665] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.669] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.669] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.670] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.670] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.674] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.674] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.674] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.674] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.677] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.678] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.678] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.678] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.682] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.682] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.682] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.682] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.686] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.686] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.686] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.686] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.690] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.690] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.690] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.690] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.694] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.694] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.695] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.695] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.698] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.699] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.699] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.699] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.705] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.705] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.705] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.705] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.709] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.709] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.709] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.709] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.713] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.713] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.713] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.713] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.717] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.717] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.717] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.717] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.721] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.721] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.721] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.721] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.725] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.725] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.726] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.726] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.729] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.730] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.730] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.730] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.733] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.734] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.734] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.734] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.738] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.738] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.738] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.738] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.742] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.742] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.742] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.742] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.746] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.746] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.746] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.746] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.750] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.750] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.751] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.751] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.754] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.755] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.755] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.755] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.759] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.759] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.759] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.759] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.763] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.763] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.763] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.763] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.770] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.770] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.770] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.770] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.774] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.774] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.774] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.774] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.778] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.778] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.779] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.779] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.782] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.782] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.782] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.782] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.786] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.786] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.786] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.786] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.790] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.790] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.790] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.790] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.794] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.794] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.794] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.794] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.798] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.798] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.798] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.799] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.802] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.803] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.803] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.803] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.813] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.814] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.814] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.814] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.818] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.818] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.818] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.818] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.822] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.822] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.822] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.822] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.826] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.826] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.826] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.826] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.830] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.830] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.830] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.830] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.836] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.836] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.837] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.837] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.840] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.841] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.841] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.841] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.844] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.844] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.845] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.845] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.848] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.849] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.849] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.852] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.853] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.853] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.853] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.857] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.857] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.857] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.857] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.861] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.861] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.861] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.861] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.865] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.865] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.865] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.865] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.869] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.869] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.869] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.869] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.873] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.873] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.873] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.874] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.877] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.877] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.877] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.877] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.882] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.882] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.882] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.882] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.886] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.886] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.886] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.886] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.890] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.891] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.891] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.891] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.895] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.895] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.895] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.895] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.901] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.901] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.901] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.901] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.905] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.905] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.906] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.906] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.910] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.910] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.910] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.910] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.914] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.914] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.914] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.914] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.918] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.919] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.919] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.919] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.923] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.923] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.923] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.923] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.927] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.927] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.927] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.927] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.931] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.932] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.932] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.932] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.936] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.936] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.936] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.936] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.940] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.940] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.940] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.940] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.944] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.944] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.944] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.944] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.948] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.948] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.949] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.949] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.952] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.953] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.953] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.953] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.957] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.957] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.957] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.957] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.964] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.964] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.964] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.964] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.968] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.968] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.968] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.968] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.972] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.972] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.972] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.972] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.976] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.976] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.976] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.977] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.980] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.981] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.981] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.981] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.985] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.985] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.985] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.985] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.989] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.989] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.989] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.989] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.994] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.994] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.994] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.994] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0179.998] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0179.998] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0179.998] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0179.998] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.002] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.003] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.003] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.003] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.007] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.007] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.007] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.007] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.015] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.015] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.015] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.015] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.019] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.019] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.019] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.019] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.023] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.023] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.023] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.023] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.030] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.030] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.030] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.030] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.034] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.034] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.034] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.034] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.038] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.038] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.038] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.038] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.043] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.043] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.043] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.043] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.047] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.047] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.047] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.047] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.051] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.051] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.051] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.051] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.055] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.055] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.056] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.056] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.059] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.060] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.060] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.060] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.064] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.064] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.064] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.064] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.068] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.068] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.068] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.068] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.078] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.078] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.078] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.078] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.082] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.082] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.082] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.082] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.087] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.087] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.087] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.087] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.094] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.094] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.094] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.094] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.098] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.098] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.098] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.098] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.102] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.102] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.102] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.102] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.106] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.107] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.107] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.107] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.111] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.111] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.111] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.111] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.115] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.115] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.115] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.115] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.119] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.120] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.120] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.120] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.123] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.124] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.124] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.124] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.128] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.128] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.128] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.128] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.132] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.132] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.132] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.132] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.136] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.136] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.136] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.136] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.140] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.141] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.141] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.141] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.145] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.145] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.145] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.145] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.149] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.150] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.150] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.150] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.154] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.154] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.154] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.154] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.160] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.161] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.161] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.161] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.174] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.174] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.175] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.175] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.179] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.179] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.180] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.180] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.184] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.184] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.184] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.184] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.188] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.188] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.189] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.189] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.194] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.194] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.194] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.194] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.198] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.198] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.198] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.198] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.202] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.202] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.202] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.203] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.207] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.207] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.207] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.207] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.211] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.211] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.212] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.212] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.215] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.216] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.216] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.216] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.220] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.220] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.220] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.220] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.227] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.227] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.227] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.227] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.231] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.231] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.231] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.231] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.235] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.236] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.236] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.236] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.240] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.240] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.240] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.240] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.244] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.244] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.244] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.244] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.248] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.248] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.248] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.248] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.252] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.252] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.253] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.253] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.257] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.257] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.257] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.257] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.261] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.262] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.262] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.262] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.265] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.266] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.266] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.266] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.270] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.270] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.270] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.270] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.274] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.274] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.275] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.275] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.279] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.279] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.279] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.279] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.284] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.284] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.284] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.284] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.291] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.291] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.291] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.291] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.295] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.295] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.295] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.295] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.299] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.300] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.300] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.300] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.304] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.304] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.304] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.304] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.309] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.309] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.309] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.309] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.313] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.313] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.313] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.314] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.318] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.318] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.318] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.318] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.322] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.322] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.322] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.322] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.326] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.327] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.327] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.327] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.331] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.331] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.331] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.331] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.335] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.336] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.336] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.336] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.340] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.340] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.340] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.344] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.344] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.344] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.348] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.349] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.349] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.349] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.355] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.356] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.356] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.356] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.360] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.360] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.360] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.360] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.371] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.372] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.372] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.376] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.376] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.376] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.376] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.380] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.380] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.380] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.380] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.384] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.385] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.385] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.385] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.389] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.389] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.389] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.389] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.393] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.393] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.393] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.394] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.398] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.398] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.398] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.398] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.402] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.403] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.403] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.403] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.407] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.407] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.407] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.407] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.428] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.430] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.430] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.430] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.434] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.434] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.434] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.434] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.439] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.439] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.439] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.439] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.443] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.444] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.444] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.444] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.448] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.448] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.448] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.448] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.452] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.452] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.452] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.453] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.457] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.457] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.457] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.457] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.462] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.462] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.462] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.466] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.466] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.466] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.470] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.471] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.471] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.471] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.475] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.475] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.475] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.475] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.480] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.480] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.480] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.480] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.487] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.487] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.487] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.487] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.492] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.492] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.492] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.492] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.496] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.496] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.496] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.496] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.500] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.501] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.501] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.501] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.505] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.505] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.505] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.505] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.509] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.509] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.509] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.509] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.513] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.513] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.513] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.513] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.517] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.518] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.518] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.518] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.522] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.522] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.522] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.522] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.526] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.526] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.526] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.526] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.530] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.531] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.531] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.531] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.535] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.535] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.535] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.535] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.539] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.539] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.539] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.539] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.544] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.544] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.544] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.544] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.551] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.551] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.551] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.551] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.556] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.556] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.556] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.556] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.560] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.560] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.560] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.560] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.564] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.564] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.565] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.565] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.568] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.573] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.573] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.573] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.585] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.585] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.585] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.585] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.608] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.608] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.609] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.609] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.618] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.618] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.618] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.618] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.622] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.622] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.622] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.622] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.626] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.626] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.626] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.626] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.630] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.630] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.631] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.631] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.635] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.635] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.635] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.635] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.639] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.639] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.639] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.639] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.643] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.644] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.644] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.644] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.648] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.648] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.648] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.648] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.652] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.652] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.652] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.653] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.656] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.656] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.657] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.657] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.660] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.661] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.661] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.661] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.665] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.665] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.665] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.665] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.669] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.669] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.669] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.669] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.673] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.673] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.673] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.673] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.680] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.681] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.681] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.681] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.684] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.684] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.684] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.684] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.687] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.687] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.687] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.687] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.691] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.691] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.691] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.691] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.694] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.694] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.694] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.694] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.698] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.698] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.698] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.698] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.701] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.701] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.701] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.701] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.704] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.705] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.705] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.705] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.708] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.708] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.708] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.708] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.711] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.711] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.712] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.712] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.715] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.715] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.715] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.715] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.718] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.718] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.718] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.718] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.722] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.722] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.722] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.722] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.725] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.725] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.725] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.726] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.728] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.729] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.729] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.729] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.732] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.732] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.732] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.732] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.735] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.735] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.735] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.736] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.739] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.739] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.739] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.739] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.745] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.745] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.745] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.745] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.748] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.748] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.749] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.749] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.752] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.752] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.752] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.752] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.755] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.755] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.756] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.756] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.760] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.760] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.760] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.760] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.763] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.763] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.763] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.763] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.766] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.767] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.767] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.767] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.770] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.770] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.770] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.770] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.773] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.774] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.774] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.774] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.777] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.777] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.777] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.777] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.780] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.780] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.780] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.780] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.783] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.784] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.784] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.784] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.787] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.787] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.787] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.787] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.790] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.791] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.791] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.791] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.794] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.794] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.794] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.794] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.797] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.798] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.798] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.798] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.801] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.801] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.801] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.801] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.804] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.805] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.805] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.805] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.815] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.815] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.815] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.815] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.818] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.819] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.819] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.819] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.822] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.822] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.822] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.822] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.825] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.826] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.826] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.826] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.829] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.829] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.829] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.829] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.832] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.833] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.833] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.833] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.836] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.836] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.836] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.836] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.839] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.839] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.839] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.839] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.842] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.843] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.843] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.843] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.846] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.846] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.846] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.846] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.849] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.849] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.850] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.850] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.853] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.853] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.853] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.853] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.856] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.856] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.856] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.856] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.859] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.859] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.860] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.860] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.863] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.863] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.863] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.863] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.867] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.867] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.867] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.867] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.870] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.871] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.871] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.871] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.876] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.876] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.876] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.876] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.880] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.880] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.880] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.880] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.883] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.883] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.883] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.883] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.886] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.887] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.887] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.887] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.890] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.890] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.890] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.890] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.893] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.893] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.893] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.894] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.897] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.897] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.897] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.897] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.900] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.901] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.901] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.901] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.904] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.904] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.904] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.904] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.907] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.907] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.907] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.908] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.910] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.911] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.911] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.911] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.914] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.914] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.914] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.914] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.917] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.918] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.918] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.918] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.921] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.921] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.921] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.921] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.924] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.924] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.925] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.925] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.928] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.928] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.928] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.928] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.932] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.932] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.932] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.932] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.935] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.935] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.935] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.935] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.941] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.941] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.941] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.944] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.944] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.944] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.944] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.948] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.948] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.948] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.948] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.951] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.951] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.951] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.951] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.954] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.955] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.955] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.955] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.958] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.958] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.958] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.958] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.961] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.962] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.962] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.962] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.965] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.965] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.965] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.965] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.968] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.968] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.968] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.968] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.971] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.972] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.972] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.972] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.975] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.975] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.975] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.975] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.979] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.979] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.979] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.979] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.982] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.982] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.982] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.983] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.986] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.986] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.986] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.986] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.989] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.989] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.989] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.989] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.993] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.993] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.993] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.993] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0180.996] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0180.997] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0180.997] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0180.997] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.000] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.000] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.000] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.000] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.006] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.006] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.006] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.006] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.009] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.010] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.010] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.010] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.013] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.013] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.013] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.013] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.016] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.016] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.017] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.017] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.020] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.020] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.020] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.020] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.023] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.023] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.023] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.023] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.027] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.027] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.027] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.027] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.030] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.030] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.030] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.030] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.033] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.034] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.034] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.034] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.037] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.037] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.037] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.037] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.040] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.040] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.040] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.040] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.043] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.044] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.044] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.044] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.047] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.047] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.047] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.047] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.051] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.051] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.051] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.051] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.054] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.054] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.055] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.055] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.058] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.058] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.058] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.058] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.061] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.061] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.061] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.061] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.064] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.065] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.065] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.065] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.070] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.071] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.071] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.071] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.074] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.074] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.074] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.074] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.077] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.078] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.078] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.078] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.081] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.081] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.081] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.081] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.085] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.085] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.085] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.085] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.088] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.088] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.088] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.088] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.092] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.092] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.092] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.092] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.096] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.096] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.096] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.096] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.099] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.099] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.099] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.099] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.103] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.103] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.103] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.106] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.106] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.106] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.110] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.110] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.110] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.110] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.113] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.113] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.113] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.113] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.117] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.117] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.117] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.117] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.120] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.120] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.120] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.120] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.124] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.124] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.124] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.124] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.127] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.127] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.127] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.127] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.131] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.131] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.131] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.131] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.136] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.137] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.137] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.137] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.140] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.140] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.140] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.140] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.143] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.144] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.144] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.144] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.147] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.147] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.147] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.147] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.151] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.151] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.151] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.151] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.154] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.154] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.154] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.154] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.157] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.158] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.158] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.158] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.161] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.161] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.161] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.161] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.184] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.184] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.184] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.184] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.187] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.188] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.188] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.188] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.191] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.191] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.191] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.191] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.195] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.195] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.195] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.195] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.201] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.201] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.201] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.201] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.205] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.205] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.205] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.205] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.208] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.208] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.209] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.209] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.212] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.212] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.212] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.212] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.215] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.216] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.216] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.216] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.219] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.219] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.219] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.219] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.222] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.222] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.222] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.222] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.226] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.226] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.226] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.226] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.229] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.229] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.229] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.229] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.232] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.233] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.233] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.233] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.236] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.236] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.236] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.236] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.239] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.239] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.239] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.239] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.243] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.243] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.243] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.243] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.246] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.246] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.246] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.246] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.249] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.250] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.250] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.250] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.253] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.253] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.253] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.253] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.257] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.257] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.257] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.257] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.260] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.260] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.260] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.260] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.266] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.266] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.266] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.266] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.269] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.270] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.270] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.270] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.273] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.273] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.273] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.273] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.276] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.277] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.277] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.280] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.280] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.280] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.280] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.284] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.284] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.284] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.284] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.287] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.287] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.287] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.287] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.291] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.291] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.291] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.291] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.294] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.294] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.294] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.294] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.298] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.298] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.298] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.298] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.301] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.302] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.302] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.302] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.305] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.305] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.305] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.305] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.309] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.309] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.309] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.309] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.312] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.312] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.312] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.312] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.316] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.316] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.316] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.316] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.319] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.319] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.319] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.319] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.323] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.323] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.323] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.323] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.326] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.326] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.327] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.327] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.332] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.332] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.332] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.332] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.336] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.336] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.336] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.336] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.339] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.339] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.340] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.343] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.343] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.343] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.343] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.346] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.346] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.346] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.346] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.349] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.350] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.350] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.350] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.353] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.353] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.353] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.353] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.356] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.356] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.356] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.356] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.360] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.360] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.360] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.360] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.363] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.363] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.363] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.363] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.366] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.367] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.367] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.367] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.370] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.370] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.370] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.370] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.373] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.374] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.374] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.374] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.377] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.377] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.377] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.377] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.380] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.381] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.381] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.381] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.384] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.384] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.384] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.384] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.387] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.388] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.388] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.388] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.391] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.391] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.391] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.391] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.397] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.397] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.397] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.397] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.401] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.401] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.401] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.401] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.404] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.404] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.404] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.404] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.407] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.408] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.408] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.408] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.411] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.411] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.411] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.411] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.415] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.415] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.415] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.415] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.418] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.419] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.419] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.419] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.422] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.422] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.422] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.422] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.425] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.426] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.426] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.426] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.429] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.429] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.429] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.429] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.433] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.433] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.433] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.433] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.436] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.436] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.436] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.436] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.440] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.440] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.440] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.440] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.443] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.444] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.444] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.444] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.447] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.447] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.447] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.447] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.450] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.451] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.451] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.451] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.454] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.454] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.454] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.454] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.460] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.460] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.460] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.460] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.463] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.464] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.464] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.464] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.467] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.467] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.467] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.467] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.470] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.471] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.471] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.471] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.475] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.475] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.475] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.475] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.478] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.478] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.478] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.478] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.481] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.481] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.482] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.482] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.492] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.492] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.492] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.492] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.496] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.496] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.496] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.496] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.499] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.499] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.500] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.500] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.503] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.503] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.503] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.503] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.506] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.506] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.506] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.507] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.510] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.510] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.510] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.510] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.513] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.513] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.513] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.513] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.517] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.517] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.517] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.517] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.520] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.520] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.520] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.520] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.526] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.526] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.526] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.526] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.529] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.530] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.530] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.530] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.533] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.533] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.533] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.533] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.536] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.537] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.537] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.537] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.540] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.540] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.540] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.540] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.545] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.545] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.545] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.545] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.549] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.549] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.549] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.549] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.552] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.552] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.552] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.553] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.556] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.556] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.556] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.556] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.559] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.560] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.560] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.560] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.563] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.563] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.563] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.563] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.566] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.566] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.567] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.567] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.570] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.570] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.570] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.570] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.574] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.574] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.574] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.574] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.577] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.577] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.577] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.577] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.580] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.580] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.581] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.581] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.584] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.584] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.584] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.584] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.587] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.587] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.587] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.587] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.593] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.593] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.593] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.593] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.597] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.597] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.597] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.597] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.600] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.600] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.600] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.600] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.610] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.610] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.610] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.610] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.616] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.616] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.616] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.616] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.619] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.620] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.620] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.620] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.623] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.623] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.623] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.623] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.626] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.627] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.627] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.627] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.630] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.631] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.631] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.631] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.634] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.635] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.635] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.635] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.639] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.639] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.639] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.639] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.642] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.642] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.643] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.643] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.646] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.646] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.646] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.646] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.649] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.650] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.650] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.650] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.655] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.655] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.656] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.656] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.659] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.659] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.659] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.659] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.662] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.662] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.662] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.663] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.666] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.666] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.666] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.666] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.669] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.669] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.669] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.669] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.673] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.673] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.673] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.673] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.676] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.676] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.677] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.677] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.677] GetTickCount () returned 0x1164e7e [0181.677] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.678] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c500000 [0181.678] GetTickCount () returned 0x1164e7e [0181.678] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.679] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c500000 [0181.680] GetTickCount () returned 0x1164e7e [0181.680] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.681] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.681] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.681] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.681] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.681] GetTickCount () returned 0x1164e7e [0181.681] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.682] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c580000 [0181.682] GetTickCount () returned 0x1164e7e [0181.682] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.683] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c580000 [0181.683] GetTickCount () returned 0x1164e7e [0181.683] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.684] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.684] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.684] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.684] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.685] GetTickCount () returned 0x1164e7e [0181.685] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.686] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c600000 [0181.686] GetTickCount () returned 0x1164e7e [0181.686] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.687] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c600000 [0181.687] GetTickCount () returned 0x1164e7e [0181.687] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.688] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.688] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.688] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.688] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.688] GetTickCount () returned 0x1164e7e [0181.688] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.690] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c680000 [0181.690] GetTickCount () returned 0x1164e7e [0181.690] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.691] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c680000 [0181.691] GetTickCount () returned 0x1164e7e [0181.691] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.692] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.692] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.692] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.692] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.692] GetTickCount () returned 0x1164e8e [0181.692] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.694] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c700000 [0181.694] GetTickCount () returned 0x1164e8e [0181.694] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.695] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c700000 [0181.695] GetTickCount () returned 0x1164e8e [0181.695] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.696] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.696] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.696] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.696] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.696] GetTickCount () returned 0x1164e8e [0181.696] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.697] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c780000 [0181.697] GetTickCount () returned 0x1164e8e [0181.697] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.699] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c780000 [0181.699] GetTickCount () returned 0x1164e8e [0181.699] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.700] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.700] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.700] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.700] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.700] GetTickCount () returned 0x1164e8e [0181.700] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.701] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c800000 [0181.701] GetTickCount () returned 0x1164e8e [0181.701] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.703] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c800000 [0181.703] GetTickCount () returned 0x1164e8e [0181.703] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.704] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.704] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.704] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.704] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.704] GetTickCount () returned 0x1164e8e [0181.704] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.705] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c880000 [0181.705] GetTickCount () returned 0x1164e8e [0181.705] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.706] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c880000 [0181.706] GetTickCount () returned 0x1164e8e [0181.706] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.707] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.708] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.708] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.708] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.708] GetTickCount () returned 0x1164e9d [0181.708] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.709] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c900000 [0181.709] GetTickCount () returned 0x1164e9d [0181.709] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.710] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c900000 [0181.710] GetTickCount () returned 0x1164e9d [0181.710] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.712] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.712] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.712] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.712] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.712] GetTickCount () returned 0x1164e9d [0181.712] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.713] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c980000 [0181.713] GetTickCount () returned 0x1164e9d [0181.713] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.714] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9c980000 [0181.714] GetTickCount () returned 0x1164e9d [0181.714] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.715] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.715] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.715] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.716] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.716] GetTickCount () returned 0x1164e9d [0181.716] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.717] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ca00000 [0181.717] GetTickCount () returned 0x1164e9d [0181.717] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.720] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ca00000 [0181.720] GetTickCount () returned 0x1164e9d [0181.720] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.721] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.722] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.722] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.722] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.722] GetTickCount () returned 0x1164e9d [0181.722] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.723] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ca80000 [0181.723] GetTickCount () returned 0x1164ead [0181.723] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.724] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ca80000 [0181.724] GetTickCount () returned 0x1164ead [0181.724] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.725] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.725] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.726] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.726] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.726] GetTickCount () returned 0x1164ead [0181.726] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.727] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cb00000 [0181.727] GetTickCount () returned 0x1164ead [0181.727] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.728] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cb00000 [0181.728] GetTickCount () returned 0x1164ead [0181.728] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.729] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.729] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.729] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.729] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.729] GetTickCount () returned 0x1164ead [0181.729] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.730] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cb80000 [0181.731] GetTickCount () returned 0x1164ead [0181.731] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.732] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cb80000 [0181.732] GetTickCount () returned 0x1164ead [0181.732] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.733] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.733] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.733] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.733] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.733] GetTickCount () returned 0x1164ead [0181.733] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.734] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cc00000 [0181.735] GetTickCount () returned 0x1164ead [0181.735] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.736] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cc00000 [0181.736] GetTickCount () returned 0x1164ead [0181.736] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.737] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.737] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.737] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.737] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.737] GetTickCount () returned 0x1164ead [0181.737] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.738] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cc80000 [0181.738] GetTickCount () returned 0x1164ead [0181.738] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.740] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cc80000 [0181.740] GetTickCount () returned 0x1164ebd [0181.740] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.741] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.741] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.741] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.741] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.741] GetTickCount () returned 0x1164ebd [0181.741] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.742] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cd00000 [0181.742] GetTickCount () returned 0x1164ebd [0181.742] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.743] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cd00000 [0181.743] GetTickCount () returned 0x1164ebd [0181.743] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.744] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.745] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.745] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.745] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.745] GetTickCount () returned 0x1164ebd [0181.745] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.746] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cd80000 [0181.746] GetTickCount () returned 0x1164ebd [0181.746] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.747] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cd80000 [0181.747] GetTickCount () returned 0x1164ebd [0181.747] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.748] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.748] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.748] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.748] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.748] GetTickCount () returned 0x1164ebd [0181.748] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.750] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ce00000 [0181.750] GetTickCount () returned 0x1164ebd [0181.750] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.751] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ce00000 [0181.751] GetTickCount () returned 0x1164ebd [0181.751] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.752] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.752] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.752] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.752] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.752] GetTickCount () returned 0x1164ebd [0181.752] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.754] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ce80000 [0181.754] GetTickCount () returned 0x1164ebd [0181.754] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.755] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ce80000 [0181.755] GetTickCount () returned 0x1164ecc [0181.755] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.756] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.756] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.756] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.756] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.756] GetTickCount () returned 0x1164ecc [0181.756] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.757] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cf00000 [0181.757] GetTickCount () returned 0x1164ecc [0181.757] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.758] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cf00000 [0181.758] GetTickCount () returned 0x1164ecc [0181.758] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.759] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.760] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.760] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.760] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.760] GetTickCount () returned 0x1164ecc [0181.760] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.761] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cf80000 [0181.761] GetTickCount () returned 0x1164ecc [0181.761] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.762] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9cf80000 [0181.762] GetTickCount () returned 0x1164ecc [0181.762] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.763] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.764] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.764] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.764] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.764] GetTickCount () returned 0x1164ecc [0181.764] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.778] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d000000 [0181.778] GetTickCount () returned 0x1164edc [0181.778] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.779] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d000000 [0181.779] GetTickCount () returned 0x1164edc [0181.779] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.780] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.780] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.780] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.780] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.780] GetTickCount () returned 0x1164edc [0181.780] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.781] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d080000 [0181.781] GetTickCount () returned 0x1164edc [0181.781] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.783] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d080000 [0181.783] GetTickCount () returned 0x1164edc [0181.783] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.786] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.786] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.786] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.786] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.786] GetTickCount () returned 0x1164eeb [0181.786] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.788] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d100000 [0181.788] GetTickCount () returned 0x1164eeb [0181.788] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.789] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d100000 [0181.789] GetTickCount () returned 0x1164eeb [0181.789] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.790] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.790] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.790] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.790] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.790] GetTickCount () returned 0x1164eeb [0181.790] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.791] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d180000 [0181.792] GetTickCount () returned 0x1164eeb [0181.792] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.793] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d180000 [0181.793] GetTickCount () returned 0x1164eeb [0181.793] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.794] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.794] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.794] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.794] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.794] GetTickCount () returned 0x1164eeb [0181.794] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.795] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d200000 [0181.795] GetTickCount () returned 0x1164eeb [0181.795] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.796] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d200000 [0181.796] GetTickCount () returned 0x1164eeb [0181.796] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.797] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.798] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.798] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.798] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.798] GetTickCount () returned 0x1164eeb [0181.798] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.799] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d280000 [0181.799] GetTickCount () returned 0x1164eeb [0181.799] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.800] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d280000 [0181.800] GetTickCount () returned 0x1164eeb [0181.800] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.802] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.802] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.802] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.802] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.802] GetTickCount () returned 0x1164efb [0181.802] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.803] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d300000 [0181.803] GetTickCount () returned 0x1164efb [0181.803] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.804] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d300000 [0181.804] GetTickCount () returned 0x1164efb [0181.804] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.805] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.805] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.806] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.806] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.806] GetTickCount () returned 0x1164efb [0181.806] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.814] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d380000 [0181.814] GetTickCount () returned 0x1164efb [0181.814] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.815] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d380000 [0181.815] GetTickCount () returned 0x1164efb [0181.815] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.816] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.816] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.816] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.816] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.816] GetTickCount () returned 0x1164efb [0181.816] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.818] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d400000 [0181.818] GetTickCount () returned 0x1164f0b [0181.818] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.819] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d400000 [0181.819] GetTickCount () returned 0x1164f0b [0181.819] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.820] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.820] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.820] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.820] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.820] GetTickCount () returned 0x1164f0b [0181.820] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.821] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d480000 [0181.821] GetTickCount () returned 0x1164f0b [0181.821] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.823] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d480000 [0181.823] GetTickCount () returned 0x1164f0b [0181.823] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.824] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.824] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.824] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.824] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.824] GetTickCount () returned 0x1164f0b [0181.824] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.825] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d500000 [0181.825] GetTickCount () returned 0x1164f0b [0181.825] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.826] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d500000 [0181.826] GetTickCount () returned 0x1164f0b [0181.826] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.827] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.828] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.828] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.828] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.828] GetTickCount () returned 0x1164f0b [0181.828] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.829] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d580000 [0181.829] GetTickCount () returned 0x1164f0b [0181.829] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.830] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d580000 [0181.830] GetTickCount () returned 0x1164f0b [0181.830] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.831] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.831] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.831] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.831] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.832] GetTickCount () returned 0x1164f0b [0181.832] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.833] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d600000 [0181.833] GetTickCount () returned 0x1164f1a [0181.833] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.834] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d600000 [0181.834] GetTickCount () returned 0x1164f1a [0181.834] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.835] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.835] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.835] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.835] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.836] GetTickCount () returned 0x1164f1a [0181.836] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.837] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d680000 [0181.837] GetTickCount () returned 0x1164f1a [0181.837] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.838] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d680000 [0181.838] GetTickCount () returned 0x1164f1a [0181.838] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.839] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.839] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.839] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.839] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.839] GetTickCount () returned 0x1164f1a [0181.839] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.840] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d700000 [0181.840] GetTickCount () returned 0x1164f1a [0181.840] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.841] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d700000 [0181.842] GetTickCount () returned 0x1164f1a [0181.842] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.843] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.843] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.843] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.843] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.843] GetTickCount () returned 0x1164f1a [0181.843] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.844] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d780000 [0181.844] GetTickCount () returned 0x1164f1a [0181.844] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.845] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d780000 [0181.845] GetTickCount () returned 0x1164f1a [0181.845] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.846] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.847] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.847] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.847] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.847] GetTickCount () returned 0x1164f1a [0181.847] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.850] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d800000 [0181.850] GetTickCount () returned 0x1164f2a [0181.850] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.851] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d800000 [0181.851] GetTickCount () returned 0x1164f2a [0181.851] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.853] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.853] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.853] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.853] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.853] GetTickCount () returned 0x1164f2a [0181.853] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.854] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d880000 [0181.854] GetTickCount () returned 0x1164f2a [0181.854] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.856] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d880000 [0181.856] GetTickCount () returned 0x1164f2a [0181.856] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.857] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.857] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.857] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.857] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.857] GetTickCount () returned 0x1164f2a [0181.857] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.858] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d900000 [0181.858] GetTickCount () returned 0x1164f2a [0181.858] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.859] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d900000 [0181.860] GetTickCount () returned 0x1164f2a [0181.860] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.860] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.861] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.861] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.861] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.861] GetTickCount () returned 0x1164f2a [0181.861] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.862] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d980000 [0181.862] GetTickCount () returned 0x1164f2a [0181.862] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.863] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9d980000 [0181.863] GetTickCount () returned 0x1164f2a [0181.863] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.865] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.865] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.865] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.865] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.865] GetTickCount () returned 0x1164f39 [0181.865] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.866] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9da00000 [0181.866] GetTickCount () returned 0x1164f39 [0181.866] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.867] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9da00000 [0181.867] GetTickCount () returned 0x1164f39 [0181.867] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.868] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.868] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.869] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.869] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.869] GetTickCount () returned 0x1164f39 [0181.869] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.870] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9da80000 [0181.870] GetTickCount () returned 0x1164f39 [0181.870] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.871] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9da80000 [0181.871] GetTickCount () returned 0x1164f39 [0181.871] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.872] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.872] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.872] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.872] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.872] GetTickCount () returned 0x1164f39 [0181.872] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.873] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9db00000 [0181.874] GetTickCount () returned 0x1164f39 [0181.874] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.875] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9db00000 [0181.875] GetTickCount () returned 0x1164f39 [0181.875] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.876] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.876] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.876] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.876] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.876] GetTickCount () returned 0x1164f39 [0181.876] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.877] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9db80000 [0181.878] GetTickCount () returned 0x1164f39 [0181.878] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.879] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9db80000 [0181.879] GetTickCount () returned 0x1164f39 [0181.879] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.880] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.880] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.880] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.880] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.880] GetTickCount () returned 0x1164f49 [0181.880] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.881] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9dc00000 [0181.881] GetTickCount () returned 0x1164f49 [0181.881] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.882] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9dc00000 [0181.882] GetTickCount () returned 0x1164f49 [0181.882] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.883] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.884] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.884] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.884] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.884] GetTickCount () returned 0x1164f49 [0181.884] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.885] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9dc80000 [0181.885] GetTickCount () returned 0x1164f49 [0181.885] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.886] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9dc80000 [0181.886] GetTickCount () returned 0x1164f49 [0181.886] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.887] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.887] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.887] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.887] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.888] GetTickCount () returned 0x1164f49 [0181.888] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.889] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9dd00000 [0181.889] GetTickCount () returned 0x1164f49 [0181.889] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.890] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9dd00000 [0181.890] GetTickCount () returned 0x1164f49 [0181.890] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.891] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.891] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.891] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.891] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.891] GetTickCount () returned 0x1164f49 [0181.891] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.892] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9dd80000 [0181.892] GetTickCount () returned 0x1164f49 [0181.892] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.893] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9dd80000 [0181.894] GetTickCount () returned 0x1164f49 [0181.894] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.895] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.895] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.895] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.895] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.895] GetTickCount () returned 0x1164f59 [0181.895] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.896] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9de00000 [0181.896] GetTickCount () returned 0x1164f59 [0181.896] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.897] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9de00000 [0181.897] GetTickCount () returned 0x1164f59 [0181.897] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.898] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.899] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.899] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.899] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.899] GetTickCount () returned 0x1164f59 [0181.899] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.900] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9de80000 [0181.900] GetTickCount () returned 0x1164f59 [0181.900] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.901] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9de80000 [0181.901] GetTickCount () returned 0x1164f59 [0181.901] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.902] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.902] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.903] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.903] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.903] GetTickCount () returned 0x1164f59 [0181.903] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.904] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9df00000 [0181.904] GetTickCount () returned 0x1164f59 [0181.904] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.905] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9df00000 [0181.905] GetTickCount () returned 0x1164f59 [0181.905] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.906] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.906] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.906] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.907] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.907] GetTickCount () returned 0x1164f59 [0181.907] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.908] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9df80000 [0181.908] GetTickCount () returned 0x1164f59 [0181.908] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.909] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9df80000 [0181.909] GetTickCount () returned 0x1164f59 [0181.909] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.910] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.910] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.910] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.910] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.910] GetTickCount () returned 0x1164f68 [0181.910] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.914] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e000000 [0181.914] GetTickCount () returned 0x1164f68 [0181.914] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.916] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e000000 [0181.916] GetTickCount () returned 0x1164f68 [0181.916] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.917] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.918] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.918] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.918] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.918] GetTickCount () returned 0x1164f68 [0181.918] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.919] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e080000 [0181.919] GetTickCount () returned 0x1164f68 [0181.919] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.920] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e080000 [0181.920] GetTickCount () returned 0x1164f68 [0181.920] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.921] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.922] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.922] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.922] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.922] GetTickCount () returned 0x1164f68 [0181.922] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.923] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e100000 [0181.923] GetTickCount () returned 0x1164f68 [0181.923] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.924] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e100000 [0181.924] GetTickCount () returned 0x1164f68 [0181.924] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.925] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.925] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.925] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.925] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.925] GetTickCount () returned 0x1164f68 [0181.925] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.927] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e180000 [0181.927] GetTickCount () returned 0x1164f78 [0181.927] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.928] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e180000 [0181.928] GetTickCount () returned 0x1164f78 [0181.928] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.929] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.929] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.929] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.929] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.929] GetTickCount () returned 0x1164f78 [0181.929] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.931] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e200000 [0181.931] GetTickCount () returned 0x1164f78 [0181.931] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.932] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e200000 [0181.932] GetTickCount () returned 0x1164f78 [0181.932] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.933] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.933] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.933] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.933] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.933] GetTickCount () returned 0x1164f78 [0181.933] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.934] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e280000 [0181.934] GetTickCount () returned 0x1164f78 [0181.934] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.935] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e280000 [0181.935] GetTickCount () returned 0x1164f78 [0181.935] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.936] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.937] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.937] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.937] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.937] GetTickCount () returned 0x1164f78 [0181.937] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.938] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e300000 [0181.938] GetTickCount () returned 0x1164f78 [0181.938] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.939] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e300000 [0181.939] GetTickCount () returned 0x1164f78 [0181.939] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.940] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.941] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.941] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.941] GetTickCount () returned 0x1164f78 [0181.941] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.942] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e380000 [0181.942] GetTickCount () returned 0x1164f87 [0181.942] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.943] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e380000 [0181.943] GetTickCount () returned 0x1164f87 [0181.943] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.944] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.944] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.944] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.944] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.945] GetTickCount () returned 0x1164f87 [0181.945] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.946] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e400000 [0181.946] GetTickCount () returned 0x1164f87 [0181.946] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.947] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e400000 [0181.947] GetTickCount () returned 0x1164f87 [0181.947] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.948] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.948] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.948] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.948] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.948] GetTickCount () returned 0x1164f87 [0181.948] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.949] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e480000 [0181.950] GetTickCount () returned 0x1164f87 [0181.950] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.951] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e480000 [0181.951] GetTickCount () returned 0x1164f87 [0181.951] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.952] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.952] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.952] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.952] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.952] GetTickCount () returned 0x1164f87 [0181.952] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.953] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e500000 [0181.953] GetTickCount () returned 0x1164f87 [0181.953] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.954] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e500000 [0181.954] GetTickCount () returned 0x1164f87 [0181.954] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.955] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.956] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.956] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.956] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.956] GetTickCount () returned 0x1164f87 [0181.956] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.957] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e580000 [0181.957] GetTickCount () returned 0x1164f97 [0181.957] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.958] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e580000 [0181.958] GetTickCount () returned 0x1164f97 [0181.958] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.959] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.959] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.959] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.959] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.960] GetTickCount () returned 0x1164f97 [0181.960] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.961] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e600000 [0181.961] GetTickCount () returned 0x1164f97 [0181.961] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.962] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e600000 [0181.962] GetTickCount () returned 0x1164f97 [0181.962] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.963] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.963] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.963] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.963] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.963] GetTickCount () returned 0x1164f97 [0181.963] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.964] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e680000 [0181.965] GetTickCount () returned 0x1164f97 [0181.965] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.965] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e680000 [0181.966] GetTickCount () returned 0x1164f97 [0181.966] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.967] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.967] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.967] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.967] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.967] GetTickCount () returned 0x1164f97 [0181.967] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.968] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e700000 [0181.968] GetTickCount () returned 0x1164f97 [0181.968] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.969] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e700000 [0181.969] GetTickCount () returned 0x1164f97 [0181.969] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.971] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.971] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.971] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.971] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.971] GetTickCount () returned 0x1164f97 [0181.971] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.972] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e780000 [0181.972] GetTickCount () returned 0x1164f97 [0181.972] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.973] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e780000 [0181.973] GetTickCount () returned 0x1164fa7 [0181.973] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.974] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.974] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.974] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.974] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.975] GetTickCount () returned 0x1164fa7 [0181.975] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.976] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e800000 [0181.976] GetTickCount () returned 0x1164fa7 [0181.976] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.977] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e800000 [0181.977] GetTickCount () returned 0x1164fa7 [0181.977] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.981] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.981] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.981] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.981] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.981] GetTickCount () returned 0x1164fa7 [0181.981] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.982] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e880000 [0181.982] GetTickCount () returned 0x1164fa7 [0181.982] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.983] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e880000 [0181.983] GetTickCount () returned 0x1164fa7 [0181.983] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.984] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.984] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.984] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.984] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.984] GetTickCount () returned 0x1164fa7 [0181.984] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.985] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e900000 [0181.985] GetTickCount () returned 0x1164fa7 [0181.986] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.986] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e900000 [0181.987] GetTickCount () returned 0x1164fa7 [0181.987] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.988] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.988] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.988] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.988] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.988] GetTickCount () returned 0x1164fa7 [0181.988] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.989] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e980000 [0181.989] GetTickCount () returned 0x1164fb6 [0181.989] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.990] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9e980000 [0181.990] GetTickCount () returned 0x1164fb6 [0181.990] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.992] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.992] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.992] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.992] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.992] GetTickCount () returned 0x1164fb6 [0181.992] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.993] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ea00000 [0181.993] GetTickCount () returned 0x1164fb6 [0181.993] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.994] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ea00000 [0181.994] GetTickCount () returned 0x1164fb6 [0181.994] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.995] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.996] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0181.996] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0181.996] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0181.996] GetTickCount () returned 0x1164fb6 [0181.996] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.997] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ea80000 [0181.997] GetTickCount () returned 0x1164fb6 [0181.997] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.998] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ea80000 [0181.998] GetTickCount () returned 0x1164fb6 [0181.998] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0181.999] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0181.999] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.000] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.000] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.000] GetTickCount () returned 0x1164fb6 [0182.000] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.001] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9eb00000 [0182.001] GetTickCount () returned 0x1164fb6 [0182.001] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.002] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9eb00000 [0182.002] GetTickCount () returned 0x1164fb6 [0182.002] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.003] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.003] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.003] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.004] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.004] GetTickCount () returned 0x1164fb6 [0182.004] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.005] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9eb80000 [0182.005] GetTickCount () returned 0x1164fc6 [0182.005] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.006] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9eb80000 [0182.006] GetTickCount () returned 0x1164fc6 [0182.006] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.007] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.007] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.007] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.007] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.007] GetTickCount () returned 0x1164fc6 [0182.007] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.009] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ec00000 [0182.009] GetTickCount () returned 0x1164fc6 [0182.009] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.010] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ec00000 [0182.010] GetTickCount () returned 0x1164fc6 [0182.010] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.011] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.011] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.011] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.011] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.011] GetTickCount () returned 0x1164fc6 [0182.011] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.012] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ec80000 [0182.013] GetTickCount () returned 0x1164fc6 [0182.013] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.014] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ec80000 [0182.014] GetTickCount () returned 0x1164fc6 [0182.014] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.015] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.015] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.015] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.015] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.015] GetTickCount () returned 0x1164fc6 [0182.015] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.016] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ed00000 [0182.016] GetTickCount () returned 0x1164fc6 [0182.016] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.017] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ed00000 [0182.017] GetTickCount () returned 0x1164fc6 [0182.017] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.019] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.019] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.019] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.019] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.019] GetTickCount () returned 0x1164fc6 [0182.019] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.020] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ed80000 [0182.020] GetTickCount () returned 0x1164fd5 [0182.020] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.021] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ed80000 [0182.022] GetTickCount () returned 0x1164fd5 [0182.022] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.023] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.023] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.023] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.023] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.023] GetTickCount () returned 0x1164fd5 [0182.023] WriteFile (in: hFile=0x98, lpBuffer=0x2200000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2200000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.024] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ee00000 [0182.024] GetTickCount () returned 0x1164fd5 [0182.024] WriteFile (in: hFile=0x98, lpBuffer=0x2c00000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x2c00000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.025] SetFilePointer (in: hFile=0x98, lDistanceToMove=-524288, lpDistanceToMoveHigh=0x55f14c*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x55f14c*=0) returned 0x9ee00000 [0182.026] GetTickCount () returned 0x1164fd5 [0182.026] WriteFile (in: hFile=0x98, lpBuffer=0x3600000*, nNumberOfBytesToWrite=0x80000, lpNumberOfBytesWritten=0x55f168, lpOverlapped=0x0 | out: lpBuffer=0x3600000*, lpNumberOfBytesWritten=0x55f168*=0x80000, lpOverlapped=0x0) returned 1 [0182.027] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.027] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.027] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.027] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.030] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.030] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.030] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.030] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.034] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.034] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.034] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.034] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.037] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.037] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.037] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.037] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.040] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.041] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.041] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.041] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.046] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.046] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.046] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.046] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.049] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.050] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.050] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.050] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.053] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.053] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.053] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.053] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.056] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.056] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.057] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.057] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.060] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.060] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.060] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.060] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.063] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.063] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.063] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.063] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.066] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.066] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.067] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.067] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.070] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.070] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.070] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.070] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.073] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.073] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.073] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.073] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.076] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.076] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.076] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.077] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.080] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.080] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.080] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.080] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.083] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.083] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.083] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.083] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.086] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.086] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.086] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.086] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.090] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.090] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.090] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.090] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.093] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.093] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.093] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.093] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.096] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.096] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.096] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.096] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.099] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.100] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.100] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.100] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.103] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.103] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.103] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.103] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.106] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.106] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.106] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.106] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.112] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.112] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.112] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.112] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.116] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.116] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.116] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.116] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.119] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.119] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.119] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.119] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.122] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.122] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.122] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.123] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.126] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.126] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.126] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.126] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.130] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.130] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.130] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.130] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.133] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.133] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.133] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.133] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.136] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.137] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.137] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.137] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.140] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.140] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.140] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.140] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.143] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.143] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.143] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.143] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.146] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.147] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.147] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.147] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.150] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.150] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.150] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.150] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.153] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.153] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.153] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.153] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.156] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.156] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.156] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.157] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.160] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.160] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.161] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.161] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.164] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.164] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.164] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.164] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.167] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.167] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.168] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.168] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.171] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.171] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.171] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.171] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.190] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.190] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.190] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.190] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.194] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.194] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.194] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.194] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.197] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.197] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.197] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.197] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.200] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.200] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.200] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.200] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.203] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.203] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.204] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.204] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.206] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.207] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.207] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.207] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.211] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.211] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.211] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.211] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.214] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.214] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.214] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.214] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.217] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.217] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.217] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.217] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.221] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.221] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.221] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.221] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.224] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.224] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.224] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.224] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.227] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.227] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.227] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.227] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.230] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.231] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.231] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.231] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.234] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.234] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.234] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.234] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.237] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.237] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.237] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.237] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.243] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.243] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.243] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.243] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.246] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.247] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.247] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.247] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.250] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.250] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.250] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.250] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.253] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.253] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.253] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.253] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.257] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.257] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.257] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.257] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.260] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.260] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.261] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.261] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.264] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.264] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.264] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.264] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.267] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.267] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.267] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.267] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.270] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.271] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.271] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.271] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.274] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.274] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.274] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.274] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.277] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.278] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.278] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.278] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.281] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.281] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.281] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.281] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.284] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.284] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.284] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.284] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 [0182.287] GetDiskFreeSpaceW (in: lpRootPathName="C:\\", lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374 | out: lpSectorsPerCluster=0x55f3e0, lpBytesPerSector=0x55f3d0, lpNumberOfFreeClusters=0x55f378, lpTotalNumberOfClusters=0x55f374) returned 1 [0182.287] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0182.288] GetProcAddress (hModule=0x76c20000, lpProcName="GetDiskFreeSpaceExW") returned 0x76c4d50f [0182.288] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0 | out: lpFreeBytesAvailableToCaller=0x55f3b0, lpTotalNumberOfBytes=0x55f36c, lpTotalNumberOfFreeBytes=0x55f3c0) returned 1 Process: id = "23" image_name = "wmiadap.exe" filename = "c:\\windows\\system32\\wbem\\wmiadap.exe" page_root = "0x2222e000" os_pid = "0x8e0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x36c" cmd_line = "wmiadap.exe /F /T /R" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000cedf" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 173 os_tid = 0x97c Thread: id = 174 os_tid = 0x8c4 Thread: id = 175 os_tid = 0x8cc Thread: id = 176 os_tid = 0x98c Thread: id = 177 os_tid = 0x848 Thread: id = 178 os_tid = 0x998 Process: id = "24" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xa7e5000" os_pid = "0x2cc" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0x36c" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b580" [0xc000000f], "LOCAL" [0x7] Thread: id = 180 os_tid = 0x8e4 Thread: id = 181 os_tid = 0x7bc Thread: id = 182 os_tid = 0x794 Thread: id = 183 os_tid = 0x644 Thread: id = 184 os_tid = 0xaf4 Thread: id = 185 os_tid = 0x850 Thread: id = 186 os_tid = 0x5b4 Thread: id = 187 os_tid = 0x7d4 Thread: id = 188 os_tid = 0x608 Thread: id = 189 os_tid = 0x600 Thread: id = 190 os_tid = 0x5fc Thread: id = 191 os_tid = 0x5dc Thread: id = 192 os_tid = 0x134 Thread: id = 193 os_tid = 0x174 Thread: id = 194 os_tid = 0x3bc Thread: id = 195 os_tid = 0x3b4 Thread: id = 196 os_tid = 0x3a4 Thread: id = 197 os_tid = 0x304 Thread: id = 198 os_tid = 0x300 Thread: id = 199 os_tid = 0x2d8 Thread: id = 200 os_tid = 0x2d0 Thread: id = 229 os_tid = 0x93c Process: id = "25" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x726b7000" os_pid = "0xa60" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0x36c" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:00093bbb" [0xc000000f] Thread: id = 218 os_tid = 0xa64 Thread: id = 219 os_tid = 0xa5c Thread: id = 220 os_tid = 0xa58 Thread: id = 221 os_tid = 0xb0 Thread: id = 222 os_tid = 0x954 Thread: id = 223 os_tid = 0xa50 Thread: id = 224 os_tid = 0xb0c Thread: id = 225 os_tid = 0x950 Thread: id = 226 os_tid = 0xa80